Microsoft Certified:Azure Administrator Associate
Domain 4Objective 1
Configure and Manage Virtual Networks in Azure AZ-104 Practice Questions (Page 2)
Part of the Implement and manage virtual networking domain, which accounts for 15–20% of the AZ-104 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)
14questions here
3free pages
6concepts
15–20%of the exam
Questions 6–10
- 6
A VM in a subnet cannot reach the internet. The VM has a public IP and the subnet's NSG allows outbound internet traffic. You check the effective routes for the VM's network interface and see a user-defined route with destination 0.0.0.0/0 and next hop type 'Virtual appliance' pointing to an NVA that is currently down. What is the most likely cause of the connectivity issue?
Select an answer first - 7
You have two virtual networks in the same region: VNet-A (10.1.0.0/16) and VNet-B (10.2.0.0/16). You create a peering from VNet-A to VNet-B and from VNet-B to VNet-A. Both show 'Connected'. You can ping a VM in VNet-B from a VM in VNet-A, but you cannot RDP to the VM in VNet-B. What is the most likely cause?
Select an answer first - 8
You are planning a virtual network for a new application that will be deployed in two Azure regions. You need to ensure that the address spaces do not overlap and that you can peer the VNets in the future. You also need to minimize the number of address ranges to manage. Which address space plan should you use?
Select an answer first - 9
You have two virtual networks: VNet1 (10.0.0.0/16) and VNet2 (10.1.0.0/16). You need to enable resources in VNet1 to communicate with resources in VNet2. You have created a peering from VNet1 to VNet2, but resources in VNet1 cannot reach VNet2. What should you do first?
Select an answer first - 10
You deploy a Linux VM in a virtual network and need to allow an external user to connect to it via SSH from the internet. You have already created a network security group that allows inbound SSH (TCP 22) from the user's public IP. The VM still cannot be reached. What should you do?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-104” is a trademark of its owner, used for identification only.