Azure Administrator Certification Practice Exam (AZ-104)

What you get

• Coverage of all five AZ-104 domains, weighted the way Microsoft weights them in the official skills outline.
• Timed mock exams so the 100-minute limit is something you have already practised against.
• Per-domain results after each attempt — most AZ-104 failures come down to one weak area, not a broad gap.
• One subscription covers Azure, AWS and Google Cloud, including AZ-900 if you are starting further back.

Sample AZ-104 questions

Four real questions from the AZ-104 bank, written by a certified subject-matter expert, with the answer and the reasoning. This is the format and difficulty of every question inside.

1. Domain 1: Manage Azure identities and governance

   Q1. You want to prevent accidental deletion of a critical Azure resource. What should you configure?

   • A An Azure Policy with a deny effect
   • B A resource lock (CanNotDelete)Correct
   • C Role-based access control with the Reader role
   • D A recovery services vault backup

   Why: A CanNotDelete lock blocks deletion for everyone, including subscription owners, until the lock itself is removed — which is exactly the "are you sure?" step accidental deletion needs. RBAC restricts who can act, but an owner can still delete; backup helps you recover afterwards rather than preventing it.

2. Domain 1: Manage Azure identities and governance

   Q2. Which Azure feature allows you to group multiple subscriptions for unified policy assignment and access management?

   • A Resource groups
   • B Management groupsCorrect
   • C Azure Blueprints
   • D Availability sets

   Why: Management groups sit above subscriptions in the hierarchy, so a policy or role assignment made there flows down to every subscription beneath it. Resource groups sit below a subscription and cannot span more than one.

3. Domain 1: Manage Azure identities and governance

   Q3. You need to ensure that only devices compliant with company policies can access Microsoft Entra ID resources. Which feature should you use?

   • A Conditional AccessCorrect
   • B Azure Policy
   • C Privileged Identity Management
   • D Microsoft Entra Connect

   Why: Conditional Access evaluates signals — device compliance state, location, risk level — at sign-in and grants or blocks accordingly. Azure Policy governs resource configuration, not sign-in, and PIM governs when privileged roles are activated.

4. Domain 1: Manage Azure identities and governance

   Q4. You must grant a user the ability to create and manage virtual machines in a specific resource group, but not allow them to modify network settings. Which built-in role should you assign?

   • A Contributor
   • B Owner
   • C Virtual Machine ContributorCorrect
   • D Network Contributor

   Why: Virtual Machine Contributor grants full management of VMs but explicitly excludes the virtual network and subnet permissions, which is precisely the split described. Contributor and Owner would both allow the network changes you are trying to prevent.

Create Your Free Account

Signing up is free. When you upgrade: 5-Day Free Trial — Credit Card Required. No charge until day 5. Cancel anytime. Then 9.99€/month.

Frequently asked questions

Is it free to sign up?

Yes. Creating an account takes an email address and a password — no card, no payment details. The AWS, Azure and Google Cloud question banks and the timed mock exams are the part covered by the 9.99€ per month subscription, which you can start whenever you want from inside the app.

How does the free trial work?

The trial applies to the subscription, not to the account. When you upgrade, the first 5 days are free and give you full access to every question bank and mock exam. A credit card is required to begin the trial, and you are not charged during those 5 days. At the end of day 5 the subscription automatically renews at 9.99€ per month unless you cancel before then.

Do I need to enter a credit card?

Not to sign up or to practise on the free account. A card is required only when you start the subscription and its 5-day trial, by card or through PayPal. Nothing is charged until day 5.

What happens if I cancel during the trial?

You are not charged at all. Cancel any time before the end of day 5 from your account settings — or from your PayPal dashboard if you paid through PayPal — and the subscription ends with no payment taken.

What does the subscription include?

One subscription covers every certification on QuizBuilder — AWS, Microsoft Azure and Google Cloud — including timed mock exams, unlimited practice, and progress tracking across all of them.

Who writes the questions?

Certified subject-matter experts. Each exam is built by someone who holds that certification and works in that field — the AWS banks by AWS-certified SMEs, the Azure banks by Azure-certified SMEs, and so on. Nothing is scraped from other sites or generated and shipped unreviewed.

Are these the real exam questions?

No, and you should be wary of anyone claiming otherwise — distributing real exam content violates the certification agreements you sign with AWS, Microsoft and Google, and can invalidate your certification. These are original questions, written by a certified SME in that field to match the style, difficulty and domain weighting of the real exam.

Can I try it without paying or entering a card?

Yes. The free taster gives you 5 practice questions with full explanations, no signup and no card required.