DjamgaMind: Audio Intelligence for the C-Suite (Daily AI News, Energy, Healthcare, Finance)
Full-Stack AI Intelligence. Zero Noise.The definitive audio briefing for the C-Suite and AI Architects. From Daily News and Strategic Deep Dives to high-density Industrial & Regulatory Intelligence—decoded at the speed of the AI era. . 👉 Start your specialized audio briefing today at Djamgamind.com
AI Jobs and Career
I wanted to share an exciting opportunity for those of you looking to advance your careers in the AI space. You know how rapidly the landscape is evolving, and finding the right fit can be a challenge. That's why I'm excited about Mercor – they're a platform specifically designed to connect top-tier AI talent with leading companies. Whether you're a data scientist, machine learning engineer, or something else entirely, Mercor can help you find your next big role. If you're ready to take the next step in your AI career, check them out through my referral link: https://work.mercor.com/?referralCode=82d5f4e3-e1a3-4064-963f-c197bb2c8db1. It's a fantastic resource, and I encourage you to explore the opportunities they have available.
- Full Stack Engineer [$150K-$220K]
- Software Engineer, Tooling & AI Workflow, Contract [$90/hour]
- DevOps Engineer, India, Contract [$90/hour]
- More AI Jobs Opportunitieshere
| Job Title | Status | Pay |
|---|---|---|
| Full-Stack Engineer | Strong match, Full-time | $150K - $220K / year |
| Developer Experience and Productivity Engineer | Pre-qualified, Full-time | $160K - $300K / year |
| Software Engineer - Tooling & AI Workflows (Contract) | Contract | $90 / hour |
| DevOps Engineer (India) | Full-time | $20K - $50K / year |
| Senior Full-Stack Engineer | Full-time | $2.8K - $4K / week |
| Enterprise IT & Cloud Domain Expert - India | Contract | $20 - $30 / hour |
| Senior Software Engineer | Contract | $100 - $200 / hour |
| Senior Software Engineer | Pre-qualified, Full-time | $150K - $300K / year |
| Senior Full-Stack Engineer: Latin America | Full-time | $1.6K - $2.1K / week |
| Software Engineering Expert | Contract | $50 - $150 / hour |
| Generalist Video Annotators | Contract | $45 / hour |
| Generalist Writing Expert | Contract | $45 / hour |
| Editors, Fact Checkers, & Data Quality Reviewers | Contract | $50 - $60 / hour |
| Multilingual Expert | Contract | $54 / hour |
| Mathematics Expert (PhD) | Contract | $60 - $80 / hour |
| Software Engineer - India | Contract | $20 - $45 / hour |
| Physics Expert (PhD) | Contract | $60 - $80 / hour |
| Finance Expert | Contract | $150 / hour |
| Designers | Contract | $50 - $70 / hour |
| Chemistry Expert (PhD) | Contract | $60 - $80 / hour |
Microsoft Azure Administrator Certification Questions and Answers Dumps – AZ 104
Microsoft Azure Administrator AZ 104 is one of the most popular Microsoft Azure Administrator certification exams. To pass this exam, you need to have a good understanding of Microsoft Azure and its various components. The best way to prepare for this exam is to use this Microsoft AZ 104 dumps. These dumps will help you to understand the Microsoft Azure platform and its various features. In addition, you will also get an idea about the types of questions that are asked in this exam. With the help of these dumps, you can easily pass the Microsoft AZ 104 exam.
2022-2023 Azure Administrator AZ104 Latest Practice Exam
Microsoft Certified: Azure Administrator Associate Average Salary — $125,993
Candidates for the Azure Administrator Associate certification should have subject matter expertise implementing, managing, and monitoring an organization’s Microsoft Azure environment.
Responsibilities for this role include implementing, managing, and monitoring identity, governance, storage, compute, and virtual networks in a cloud environment, plus provision, size, monitor, and adjust resources, when needed.
AZ-104 Microsoft Azure Administrator Exam Breakdown:
Manage Azure identities and governance (15-20%),
Manage Azure AD objects,
Manage role-based access control (RBAC),
Manage subscriptions and governance,
Implement and manage storage (10-15%),
Manage storage accounts,
Manage data in Azure Storage,
Configure Azure files and Azure blob storage,
Deploy and manage Azure compute resources (25-30%),
Configure VMs for high availability and scalability,
Automate deployment and configuration of VMs,
Create and configure VMs,
Create and configure containers,
Create and configure Web Apps,
Configure and manage virtual networking (30-35%),
Implement and manage virtual networking,
Configure name resolution,
Secure access to virtual networks,
Configure load balancing,
Monitor and troubleshoot virtual networking,
Integrate an on-premises network with an Azure virtual network,
Monitor and back up Azure resources (10-15%),
Monitor resources by using Azure Monitor,
Implement backup and recovery,
2022-2023 Azure Administrator AZ104 Latest Practice Exam
Below are the top 50 Microsoft Azure Administrator Certification Questions and Answers Dumps.
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
AI-Powered Professional Certification Quiz Platform
Web|iOs|Android|Windows
Are you passionate about AI and looking for your next career challenge? In the fast-evolving world of artificial intelligence, connecting with the right opportunities can make all the difference. We're excited to recommend Mercor, a premier platform dedicated to bridging the gap between exceptional AI professionals and innovative companies.
Whether you're seeking roles in machine learning, data science, or other cutting-edge AI fields, Mercor offers a streamlined path to your ideal position. Explore the possibilities and accelerate your AI career by visiting Mercor through our exclusive referral link:
Find Your AI Dream Job on Mercor
Your next big opportunity in AI could be just a click away!
2022-2023 Azure Administrator AZ104 Latest Practice Exam
AI- Powered Jobs Interview Warmup For Job Seekers
⚽️Comparative Analysis: Top Calgary Amateur Soccer Clubs – Outdoor 2025 Season (Kids' Programs by Age Group)
Question 1: In our subscription, we have four different resource groups. They are RG1, RG2, RG3, RG4. RG2 has a Read-only lock at the resource group scope. RG3 has a Delete lock at the resource group scope. RG1 and RG4 do not have locks. We need to determine how we could move resources between resource groups during the lifecycle of these resources. Assuming all resources provisioned support moving between resource groups regardless of region. Which of the following statements are plausible?
AI Jobs and Career
And before we wrap up today's AI news, I wanted to share an exciting opportunity for those of you looking to advance your careers in the AI space. You know how rapidly the landscape is evolving, and finding the right fit can be a challenge. That's why I'm excited about Mercor – they're a platform specifically designed to connect top-tier AI talent with leading companies. Whether you're a data scientist, machine learning engineer, or something else entirely, Mercor can help you find your next big role. If you're ready to take the next step in your AI career, check them out through my referral link: https://work.mercor.com/?referralCode=82d5f4e3-e1a3-4064-963f-c197bb2c8db1. It's a fantastic resource, and I encourage you to explore the opportunities they have available.
A. We can move resources from RG1 to RG4.
B. We can move resources between any of these resource groups.
Invest in your future today by enrolling in this Azure Fundamentals - Pass the Azure Fundamentals Exam with Ease: Master the AZ-900 Certification with the Comprehensive Exam Preparation Guide!
- AWS Certified AI Practitioner (AIF-C01): Conquer the AWS Certified AI Practitioner exam with our AI and Machine Learning For Dummies test prep. Master fundamental AI concepts, AWS AI services, and ethical considerations.
- Azure AI Fundamentals: Ace the Azure AI Fundamentals exam with our comprehensive test prep. Learn the basics of AI, Azure AI services, and their applications.
- Google Cloud Professional Machine Learning Engineer: Nail the Google Professional Machine Learning Engineer exam with our expert-designed test prep. Deepen your understanding of ML algorithms, models, and deployment strategies.
- AWS Certified Machine Learning Specialty: Dominate the AWS Certified Machine Learning Specialty exam with our targeted test prep. Master advanced ML techniques, AWS ML services, and practical applications.
- AWS Certified Data Engineer Associate (DEA-C01): Set yourself up for promotion, get a better job or Increase your salary by Acing the AWS DEA-C01 Certification.
C. We can move resources from RG2 to RG4.
D. We can move resources from RG4 to RG3.
E. We can move resources from RG2 to RG3.
ANSWER1:
2022-2023 Azure Administrator AZ104 Latest Practice Exam
Azure Administrator Exam Prep App #Azure #AZ104 #AzureAdmnistrator #AzureDevOps #AzureAdmin #AzureTraining #AzureSysAdmin #AzureCloud #LearnAzure
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 2: Your company has recently added a few new users to your Azure Active Directory. You have already added them to an active directory group, and now you have asked them to add their devices to the domain. When they add their devices, you have to ensure they are prompted to use a mobile phone to verify their identity. How do you configure this?
A. Require multi-factor authentication to join devices
B. Configure a point-to-site VPN
C. Enable Conditional Access
D. You must sign up for Azure AD Premium
ANSWER2:
Question 3: Under your Azure Subscription, you are trying to identify VMs that are underutilized in order to shutdown all VMs with CPU utilization under 5%. Which blade should you use?
A. Customer Insights
B. Advisor recommendations
C. Monitor
D. Metrics
ANSWER3:
Question4: You have just purchased the domain name arseemagroup.com from a third party registrar. Using your Azure Active Directory domain, you’d like to create new users with the suffix @arseemagroup.com. Which three things must you do?
A. Access the custom domain names blade from Azure AD
B. Create a MX or TXT record from arseemagroup.com DNS
C. Verify that you own the domain name
D. Access the App registrations blade from Azure AD
ANSWER4:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 5: You have two subscriptions named Subscription1 and Subscription2. You are logged into Azure using Azure PowerShell from Computer1. How can you identify which subscription you are currently viewing and then switch from one subscription to the other for the current session at Computer1.
A. Set-AzContext -SubscriptionName
B. Get-AzContext
C. Select-AzContext
D. AzShow-Context
ANSWER5:
Question 6: You have two subscriptions named Subscription1 and Subscription2. You are currently managing resources in Subscription1 from Computer1 that has the Azure CLI installed. You need to switch to Subscription2. Which command should you run?
A. az set account –subscription “Subscription2”
B. az account set –subscription “Subscription2”
C. az subscription set “Subscription2”
D. Select-AzureSubscription -SubscriptionName “Subscription2”
ANSWER6:
Question 7: You work at the IT help desk for Consilium Corporation. You have been getting an influx of calls into the help desk about resetting users’ passwords. They keep reporting that they can’t seem to figure out how to reset their password in order to gain access to their Customer Relationship Management (CRM) software. What do you do?
A. Ensure that the users who are having problems are within the correct AD group
B. Make sure you have Azure Active Directory Free
C. Make sure they have their verification device (mobile app or access to email)
D. Verify that self-service password reset is enabled in Azure Active Directory
ANSWER7:
Question 8: In this scenario, we are working for Cloud Chase Support. We our the active administrator, and we have been tasked with determining how to ensure we do not incur costs in either our Prod-Subscription and our Dev-Subscription for virtual machine resources. We have a CloudChase management group where both subscription nested. We decide to use Azure Policy to enforce compliance on Virtual Machines. Our Policy definition states that virtual machines are not an allowed resource type at the scope of our CloudChase management group. There are some existing virtual machines in our Prod-Subscription at the time this policy is created. After the enforcement of our new policy which of the below statements is true?
A. We cannot create virtual machines in any subscription under the scope of our management group and our existing virtual machines will be deallocated.
B. Virtual machines can be created in our Prod-Subscription if they are compliant.
C. Virtual machines can be created in our Dev-Subscription.
D. We cannot create virtual machines in any subscription under the scope of our management group.
ANSWER8:
Question 9: You recently signed up for Azure Active Directory Premium and need users to be able to reset their passwords if they are unable to login. What should you configure in Azure Active Directory?
A. Set “block sign-in” to off when creating the user
B. User password reset
C. User password change
D. Add user to sign-in group in Azure AD
ANSWER9:
Question 10: You have an Azure Pay-as-you-go Subscription named Subscription1. You have some concerns about cost for Subscription1, and you would like to spend less than $100.00 US per month on all resources in this subscription. If you spend more than $90.00 US, you would like to get an alert in the form of a text message. What should you do?
A. Shutdown VMs when you are not using them
B. Create an alert in Azure Monitor
C. Create a budget alert condition tied to an action group
D. Create a budget in the subscriptions blade
ANSWER10:
2022-2023 Azure Administrator AZ104 Latest Practice Exam
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 11: We want to be provide an Azure AD B2B guest user the ability to manage all resources inside of our DevRG resource group. We want to give them these abilities over managing all resources inside of this resource group and nothing more. What role would we assign to the user to accomplish this goal? Assume we are assigning the role to the DevRG scope.
A. User Access Administrator
B. Owner
C. Contributor
D. Global Admin
ANSWER11:
Question 12: You have just created a General-purpose V2 storage account in Azure. From a VM located in your on-prem environment, you’ve logged into your Azure subscription using the Connect-AzConnect command from the PowerShell command line. Next, you need to retrieve the key, in order to access your storage account. Which PowerShell cmdlet will you use to retrieve the access key?
A. Get-AzStorageAccount
B. Get-AzStorageContainerKey
C. Get-AzStorageContainerStoredAccessPolicy
D. Get-AzStorageAccountKey
ANSWER12:
Question 13: You have been directed to copy all data from one storage account to another using the AzCopy tool. You need to report which storage services you can copy. Which of those services would it be?
A. Only Azure File Shares
B. Azure Queues and Blobs
C. Azure Blob and File Shares
D. Azure Table and File Shares
ANSWER13:
Question 14: You have a general purpose v1 storage account named consiliumstore that has a private container named container2. You need to allow read access to the data inside container2, but only within a 14 day window. How do you accomplish this using the Azure Portal?
A. Upgrade the storage account to general purpose v2
B. Create a shared access signatures
C. Create a service SAS
D. Create a stored access policy
ANSWER14:
Question 15: You have an existing Microsoft Enterprise Agreement (EA) Subscription. You need to ship 34TB of data from an on-premise Windows 2016 server to your Azure storage account. You need to ensure that the data transfer has zero impact on the network, preserves your existing drives and is the fastest and most secure method. What should be your first step to starting the import job?
A. Open a ticket with Microsoft Support
B. Order an Azure Databox via the Azure Portal
C. Start an Import Job via the Azure Portal
D. Prepare your hard drives using the WAImportExport tool
ANSWER15:
Question 16: You have data in an AWS S3 Bucket named myS3Bucket and you need to copy all of its contents to a container named container1 in an Azure storage account named companydata. Which command would be most efficient use of getting the data from the S3 bucket to the Azure storage container?
A. azcopy copy ‘https://s3.amazonaws.com/myS3Bucket’ ‘https://companydata.blob.core.windows.net/container1’ –recursive=true
B. aws s3 cp s3://mybucket/test.txt https://companydata.blob.core.windows.net/container1
C. azcopy blob copy ‘https://s3.amazonaws.com/myS3Bucket’ ‘https://companydata.blob.core.windows.net/container1’
D. azcopy copy sync ‘https://s3.amazonaws.com/myS3Bucket’ ‘https://companydata.blob.core.windows.net/container1’
ANSWER16:
Question 17: You have the following Azure Storage Accounts in your Subscription: stor1 (BlockBlobStorage) stor2 (FileStorage) stor3 (StorageV2) Which of these storage accounts can be converted to Read-Access Geo-Redundant Storage (RA-GRS) based on their storage account kind? Please select the most appropriate answer.
A. stor1 and stor2
B. stor3
C. stor2
D. stor1, stor2, and stor3
ANSWER17:
Question 18: You create an Azure storage account named companystore with a publicly accessible container named container1. You upload a file to container1 named pic1.png. What will be the URL in order to access this blob?
A. https://companystore.blob.core.windows.net/container1/pic1.png
B. https://portal.azure.com/companystore.blob.core.windows.net/pic1.png
C. https://blob.core.windows.net/companystore/container1/pic.png
D. https://pic1.companystore.blob.core.windows.net
ANSWER18:
2022-2023 Azure Administrator AZ104 Latest Practice Exam
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 19: You have an Azure subscription named Subscription1. In Subscription1, you have an Azure virtual machine named VM1. Attached to VM1 are two network interface cards. You require a third network interface card with a network bandwidth above 1000 Mbps for your storage area network. What should you do?
A. Create an additional VM in the same subnet and connect to VM1 over the LAN
B. Create a new subnet with a sufficient number of available IP addresses
C. Create a new storage account to store data for VM1
D. Change the VM SKU to Standard_A4 or larger
ANSWER19:
Question 20: You are trying to create a new Azure Kubernetes Service (AKS) cluster from your local workstation. The AKS cluster must contain three nodes and ensure access to the worker nodes in order to troubleshoot the kubelet. You have authenticated to Azure from your local workstation with the Azure CLI. What command will you use to create an AKS cluster named AKS1 with the necessary components inside of the resource group named RG1?
A. az aks create -g RG1 -n AKS1 –generate-ssh-keys –node-count 3
B. az kubernetes create –name AKS1 –group RG1 –nodes 3 –generate-keys
C. az aks create –name AKS1 –resource-group RG1 –nodes 3 –ssh-key-value ~/.ssh/id_rsa.pub
D. az kubernetes create –name AKS1 –resource-group RG1 –nodes 3 –generate-keys
ANSWER20:
Question 21: VM1 is located in the West US region, and the OS disk is Premium SSD. The size of VM1 is currently Standard_D2s_v3, but you need to change the size to Standard_D2. You are able to select the size from the size blade, but you receive an error message. Why can’t you change the VM size?
A. You need to provide the username and password for the OS to upgrade
B. Standard_D2 does not support premium SSD disks
C. The size Standard_D2 is not available in the West US region
D. You did not shut down (deallocated) VM1 before you change the size
ANSWER21:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 22: You have an Azure Kubernetes Service (AKS) cluster named AKS1 within the resource group named RG1. You are trying run the command kubectl get all from the Azure Cloud Shell (https://shell.azure.com) to view your cluster resources. You received the error Error from server (BadRequest): the server rejected our request for an unknown reason. You’ve verified that the resources exist and the command is correct. What do you need to do in order to view your cluster resources from the Azure Cloud Shell?
A. Retrieve the access credentials using the command az aks get-credentials --name AKS1 --resource-group RG1
B. Log into the cluster GUI from the Azure Portal
C. Install the kubectl tool
D. Access the Kubernetes Dashboard using the command az aks browse --name AKS1 --resource-group RG1
ANSWER22:
Question 23: You have a subscription named Subscription1. You create a new Azure VM in your subscription named VM5 running Windows 2012 R2. You try to connect and login to VM5, but you get an error that says “We couldn’t connect to the remote PC. Make sure the PC is turned on and connected to the network, and that remote access is enabled.” You have verified that VM5 is running and has been assigned a public IP address. What change do you need to make in order to successfully connect and login to VM5?
A. Add a rule to the Network Security Group that will allow port 3389
B. Select Reset password from the VM blade
C. Use Network Watcher for detailed connection tracing
D. You need to access the VM from a computer that’s in the same subnet
ANSWER23:
Question 24: Subscription1 contains an Azure VM named VM1 with the following configuration:VM Size: Standard_D2s_v3
Public IP Address: 52.173.36.55
Resource Group: RG1
Availability Zone: None
Location: Japan East
Disk Type: Standard HDD
What are two things you can do to reduce data loss and achieve a 99.9% SLA?
A. Create a recovery services vault and enable replication for VM1
B. Move VM1 to a paired region
C. Place the VM in an availability zone
D. Change the disk type to Premium SSD
ANSWER24:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 25: You have created an application that is to be run on Linux containers named ContainerApp1. You’ve created an Azure container instance with an FQDN, but you notice that when the container restarts, all application data is lost. What is the best solution to preserve the data associated with your application?
A. Create a public blob storage container and share the URI with the application
B. Create a storage account and share the SAS with the application
C. Mount an Azure file share as a volume in Azure Container Instances
D. Run the container on a VM, and use the managed disk attached to the VM
ANSWER25:
Question 26: You’ve created a Dockerfile that contains the necessary steps to build an image that you plan to use for your application running as a Web App in App Services named APP1. You have created an Azure Container Registry, which is where you plan to store your images to be used for APP1. What should your next step be?
A. Run the az acr build command
B. Create the App Service Plan
C. Run the docker push command
D. Run the docker login command
ANSWER26:
Question 27: You have an application that runs on instances in a Virtual Machine Scale Set. The number of instances in the VMSS is at three starting Monday. The minimum number of instances is one, and the maximum is 5 instances. There are two scaling rules for this VMSS:
| Rule | Condition | Action |
|---|---|---|
| Rule1 | CPU > 75% | +1 instance |
| Rule2 | CPU < 25% | -1 instance |
Based on the rules above and the chart below, on Wednesday how many instances will there be in our VMSS?
|CPU%|Time(UTC)|Day |:—|:—:|:—:|—:| |75|12:01|Tuesday| |20|13:36|Tuesday| |85|12:10|Wednesday| |20|19:07|Thursday|
A. 2 instances
B. 3 instances
C. 4 instances
D. 5 instances
ANSWER27:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 28: Subscription1 contains an Azure VM named VM1. You have added a data disk to VM1, as well as a new network interface card. You need to create two more Azure VMs just like this one named VM2 and VM3. What is the most efficient way to create VM2 and VM3 that will minimize cost?
A. Backup the VM and recover to a different region
B. Redeploy VM1 with the new disk and NIC and deploy the template to VM2 and VM3
C. Select Export template from VM1 blade, then deploy VM2 and VM3 with that template
D. Create an image from VM1 and use the image to deploy VM2 and VM3
ANSWER28:
Question 29: You have an Azure subscription named Subscription1. You have created a web app named App1 in Subscription1 that is sourced from a git repository named Git1. You need to ensure that every commit to the master branch in Git1 triggers a deployment to a test version of the application before releasing it to production. What are two changes that you must make to App1 to fulfill this requirement?
A. Create a build server with the master branch of Git1 as the trigger
B. Configure custom domains for test and production versions of App1
C. Add a new deployment slot to App1 to release the test version of App1
D. Create a new web app and configure failover settings from test to production
ANSWER29:
Question 30: You plan to create an Azure Web App in the East US region. You need to ensure that this web app scales out with demand, to prevent downtime. You also need to ensure that the data that resides inside of the application will remain secure and never become exposed to anyone outside of the organization. Which App Service plan SKU will you chose that will meet these requirements and also save on cost?
A. FREE
B. B1
C. SHARED
D. I1
ANSWER30:
Question 31: VM1 is located in the East US region. You have added a premium SSD data disk to VM1, but the IOPS are not satisfying the needs of your application, how can you change the speed of the disk?
A. Select the disk configuration and increase the size
B. Shut down (Deallocate) the VM
C. Export the disk and convert to VHD
D. Create a new disk and migrate the data
ANSWER31:
Question 32: The NoName Company has just deployed a number of Azure VMs into a specific subnet in an Azure virtual network. They have also implemented a network security plan which includes the use of Azure Firewall. From those newly deployed VMs, the company wants to deny access to the website https://www.microsoft.com. How can you achieve this using their current Azure resources?
A. A network rule
B. Create a route via Route Table to the firewall (as a virtual appliance hop)
C. Configure an application rule on the Azure Firewall that blocks FQDNS www.microsoft.com
D. An Application Gateway
E. A Subnet named AzureFirewallSubnet
F. A VPN Gateway
ANSWER32:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 33: You need to create an Azure virtual machine named VM1 that requires a static private IP address configured inside the IP address space for the VNet in which the VM resides. How do you configure a static IP address for this Azure VM?
A. After the VM has been created, create a new network interface and configure a static IP address for that network interface
B. After the VM has been created, go to the network interface attached to the VM and change the IP configuration to static assignment
C. When creating a VM in the portal, select New next to private ip address and choose static after assigning the correct IP address
D. When creating the VM in the portal, change the setting from dynamic to static on the networking tab under private IP address
ANSWER33:
Question 34: You have an Azure subscription named Subscription1. In Subscription1, you have a web server that has the IP address 10.1.0.83 and a database server that has the IP address 10.1.0.142. Instead of remembering the IP addresses of the servers, you’d like to connect to these servers using a DNS name. With no DNS server currently, and without having to create a new DNS server, how can you access your database server from your web server by the DNS name db.yourcompany.com?
A. Public DNS Zone
B. Promote Server to Domain Controller
C. Access the Domain Controller
D. Private DNS Zone
ANSWER34:
Question 35: You have an Azure subscription named Subscription1. In Subscription1 you have two VNets, one named VNet-Hub and one named VNet-Spoke. Within VNet-Hub, there is an Azure Firewall with a public IP address, configured as a Standard SKU. In VNet-Spoke, there is a Windows Server 2016 with no public IP address and no Network Security Group (NSG). Using which three items can you utilize the public IP address of the Azure firewall to connect to the Windows Server, without exposing the server to the public internet directly?
A. NAT Rule for the Firewall
B. Route Table
C. Virtual Network Gateway
D. Virtual Network Peering
E. ExpressRoute Gateway
ANSWER35:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 36: You have an on-premises environment as well as your Azure environment with a subscription named Subscription1. Subscription1 has a virtual network named VNET1 and you need to connect to the on-premises network securely using an ExpressRoute link and Site-to-site VPN. What Azure resources do you need in order to establish the connection while minimizing cost?
A. Azure VPN Gateway
B. Network virtual appliance
C. No resources needed, ExpressRoute is encrypted by default
D. A route table
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
ANSWER36:
Question 37: You have a Network Security Group (NSG) that is associated with a network interface that is attached to an Azure virtual machine named VM1 running Windows Server 2019. VM1 is in subnet named subnet1, in a virtual network named VNet1. A different NSG is attached to subnet1, but you notice that there is an inbound rule to allow port 3389. When you try to connect to VM1, you cannot connect. You reviewed the NSG and the source IP address and the protocol are correct. How can you connect to VM1 using best practices for NSGs in Azure?
A. The protocol on the NSG rule is set to UDP
B. The NSG attached to the network interface needs to be removed
C. The source IP address on the NSG rule is incorrect
D. You need to add an inbound rule for the NSG attached to the network interface
ANSWER37:
Question 38: You have an Azure subscription named Subscription1. In Subscription1 you have an Azure VM named VM1 with Windows Server 2019 as the operating system. VM1 does not have a public IP address assigned to it. VM1 is located in a virtual network named VNet1, in subnet1. Attached to subnet1 is a Network Security Group (NSG) that has port 3389 open inbound. On your local machine, you do not have an RDP client installed, but you need to login into the VM. Without assigning a public IP address to the VM, what three things in combination can we use to log into VM1?
A. HTML5 supported Web Browser
B. Azure VPN Gateway
C. A subnet named AzureBastionSubnet
D. A Gateway Subnet
E. Azure Bastion Host
F. Inbound security rule to open port 443
ANSWER38:
Question 40: You have a subscription named Subscription1. Subscription1 has one Azure virtual machine named VM1 which is an Ubuntu server. You can’t seem to login to the server via SSH. What tool should you use to verify if the problem is the network security group?
A. IP flow verify tool in Azure Network Watcher
B. Azure Monitor VM metrics
C. Azure Traffic Manager traffic view
D. Azure Virtual Network logs
ANSWER40:
Question 41: You have two Azure virtual machines named VM1 and VM2. VM1 is using the Red Hat Enterprise Linux 8.1 (LVM) operating system and is located in VNet1, within subnet1. VM2 is using the Windows Server 2019 operating system, and is located in VNet1, within subnet2. VNet1 has custom DNS configured, pointing to a DNS server with the IP address 172.168.0.6. VM2 has 10.0.1.15 configured as the DNS server on its network interface. Which DNS server will VM2 use for DNS queries?
A. 8.8.8.8
B. 10.0.1.15 for primary, 172.168.0.6 as secondary
C. 10.0.1.15
D. 172.168.0.6
ANSWER41:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 42: You have created a new Azure virtual machine in a subnet named Subnet1 with an attached network interface card named NIC1. The NIC1, attached to Subnet1, has the following effective routes:
| Source | State | Address Prefix | Next Hop |
|---|---|---|---|
| Default | Active | 10.1.0.0/16 | Virtual Network |
| Default | Invalid | 0.0.0.0/0 | Internet |
| Default | Active | 10.0.0.0/8 | None |
| Default | Active | 100.64.0.0/10 | None |
| Default | Active | 192.168.0.0/16 | None |
| Default | Active | 25.33.80.0/20 | None |
| Default | Active | 25.41.3.0/25 | None |
| User | Active | 0.0.0.0/0 | None |
What will happen when the virtual machine tried to communicate with a VM on a different network?
A. Traffic will be sent successfully
B. Traffic will be forced out to the internet
C. Traffic will be forced internally
D. Traffic will be dropped and no connection will be established
ANSWER42:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 43: You have a standard load balancer that directs traffic from port 80 externally to three different virtual machines. You need to direct all incoming TCP traffic on port 5000 to port 22 internally for connecting to Linux VMs. What do you need in order to connect to the VM via SSH?
A. A public IP address for all three VMs
B. A Route Table with at least one rule
C. A Network Security Group (NSG)
D. A Network Address Translation (NAT) Rule
ANSWER43:
Question 44: You have a web application that serves video and images to those visiting the site. You start to notice that your web server is overloaded, and often crashes because the requests have consumed all of its resources. To combat this, you’ve added an additional web server and you plan to load balance these servers by serving images from the first server only and serving video from the second server only. Which Azure resource can you implement that will properly load balance (at OSI layer 7) with URL-based routing and secure with SSL at the lowest cost?
A. Azure Load Balancer
B. Azure Front Door
C. Azure Application Gateway
D. Web Application Firewall
ANSWER44:
Question 45: You manage a virtual network named VNet1 that is hosted in the West US region. Two virtual machines named VM1 and VM2, both running Windows Server, are on VNet1. You need to monitor traffic between VM1 and VM2 for a period of five hours. As a solution, you propose to create a connection monitor in Azure Network Watcher. Does this solution meet the goal?
A. Yes
B. –
C. –
D. No
ANSWER45:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 46: You have an Azure subscription named Subscription1. You would like to connect your on-premises environment to Subscription1. You have to meet three requirements from the business. The first requirement is that the connection from the on-premises office and Azure must be a private connection. No network traffic is allowed to go over the public internet. The second requirement is that all traffic from the on-premises office and Azure must happen at layer 3 (network layer). The third requirement is that this connection from on-premises to Azure must be redundant to minimize the opportunity for failure. What type of connection fulfills these three requirements?
A. ExpressRoute with premium add-on
B. ExpressRoute
C. Site-to-Site VPN
D. Virtual WAN
ANSWER46:
Question 47: You have an Azure subscription as well as an on-premises environment that is connected via ExpressRoute circuit. You have two additional branch offices that you need to connect to the network, as well as ten remote employees that change locations frequently but still need access to Azure resources. What is the solution that will provide the quickest setup at the lowest cost?
A. Site-to-Site VPN
B. Point-to-Site VPN
C. Virtual WAN
D. Hub-and-Spoke Network Topology
ANSWER47:
Question 48: You have a small number of servers running a microservice, and you want to make sure that all the servers have connectivity to each other. You also need to calculate network performance metrics like packet loss and link latency. Which two Azure resources do you need to meet this requirement?
A. Log Analytics Workspace
B. Network Performance Monitor
C. Azure Monitor
D. Azure Traffic Manager
ANSWER48:
Question 49: You have two virtual networks named VNet1 and VNet2. VNet1 is located in the West US region, whereas VNet2 is located in the East US region. You need to configure a virtual machine that’s located in VNet1 to also communicate with VMs in VNet2. From the choices available how can we enable communication between resources in VNet1 and VNet2
A. Migrate the VNet1 VM to VNet2 and leave the other VM components on VNet1
B. Migrate the network interface card (NIC), the network security group (NSG) and the VM disks to VNet2
C. Just the VM disks will need to be migrated to VNet2
D. Configure a VNet-to-VNet VPN gateway connection to allow communication between VNets in different regions
ANSWER49:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 50: You have two subscriptions, one named Subscription1 and the other named Subscription2. Both subscriptions are located within the same tenant. You have one Azure virtual machine located within Subscription1 and another Azure virtual machine within Subscription2 and you’d like to view CPU utilization metrics on both virtual machines. How can you achieve this while maintaining the minimum number of Azure resources and minimizing cost?
A. Create a Log Analytics Workspace for both VMs
B.Turn on VM Insights in Azure Monitor
C. Install the Log Analytics (OMS) Agent on the VMs
D. Enable guest-level monitoring on each VM
ANSWER50:
Question 51: You have created a new Azure virtual machine named VM1. You plan to use VM1 as a web server, which will require the VM to be accessible using HTTP/S (HTTP and HTTPS) protocol. A Network Security Group (NSG) is attached to the NIC of VM1 with the following rules:
Priority|Name|Port|Protocol|SRC|DEST|Action| |:—|:—:|:—:|:—:|:—:|:—:|—:| |300|Rule2|80|TCP|Any|Any|Deny| |400|Rule1|443|TCP|Any|Any|Deny| |500|Rule4|60-500|TCP|Any|Any|Allow| |600|Rule5|22|TCP|72.166.177.14/32|Any|Deny| |1000|Rule3|22|TCP|Any|Any|Allow|
What changes do you have to make to the NSG in order to meet the requirements for VM1?
A. Change the priority of Rule3 to 200
B. Change the action of Rule1 to Allow
C. Change the priority of Rule4 to 200
D. Change the port of Rule5 to 443
ANSWER51:
Question 52: You have an Azure virtual machine running Windows Server 2016. You need to collect OS level metrics on this virtual machine, including Windows event logs and performance counters. Which of the following items do you need in order to collect this metrics data?
A. Enable guest-level monitoring
B. Windows Diagnostics Extension
C. Log Analytics Agent
D. InfluxData Telegraf Agent
E. Storage Account for Diagnostic Data
ANSWER52:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 53: You have an Azure subscription with a virtual machine named VM1. You are using Recovery Services Vault (RSV) to backup VM1 with soft delete enabled. The backup policy is set to backup daily at 11 PM UTC, retain an instant recovery snapshot for 2 days, and retain the daily backup point for 14 days. After the initial backup of VM1, you are instructed to delete the vault and all of the backup data. What should you do?
A. Turn off soft delete in the vault security settings
B. Wait 14 days
C. Stop the backup of VM1 and delete backup data
D. Delete the backup policy
E. Delete Backup Jobs Workload
F. Wait 15 days
ANSWER53:
Question 54: You have a number of virtual machines and web applications running in your Azure environment. These Azure resources are critical for business operations, so you’ve locked the resources in order to prevent deletion. In addition, how can you alert on these actions in the portal, and notify your team via email and SMS when a user is trying to delete or create a new resource from within your Azure subscription?
A. Pin the activity log to your dashboard
B. Create a new alert rule
C. Query Administrative Events and Copy Link to Query
D. Create a new action group
ANSWER54:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 55: You have a .NET Core application running in Azure App Services. You are expecting a huge influx of traffic to your application in the coming days. When your application experiences this spike in traffic, you want to detect any anomalies such as request errors or failed queries immediately. What service can you use to assure that you know about these types of errors related to your .NET application immediately?
A. Client-side monitoring
B. Live Metrics Stream in Application Insights
C. Application Insights Search
D. Log analytics workspace
ANSWER55:
Question 56: You have an Azure subscription named Subscription1. In Subscription1 you have two Azure VMs named VM1 and VM2, both running Windows Server 2016. VM1 is backed up using Recovery Services Vault, with a backup policy of producing a daily backup and keeping that daily backup for seven days. Also, a snapshot is kept for 2 days. VM1 is compromised by a virus that infects the entire system, including the files. You need to restore the files from yesterday’s backup of VM1. Where can you restore the files to in the quickest manner?
A. A new Azure VM
B. Restore the VM1 snapshot
C. VM2
D. In-place
ANSWER56:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Question 57: You have a subscription named Subscription1. You would like to be alerted upon certain administrative events within Subscription1 to detect unauthorized access. Which of the following is the quickest method to setup these types of alerts?
A. Monitor > Alerts > New Alert Rule
B. Log Analytics Workspace > myWorkdspace > Advanced Settings
C. Policy > Assignments > Assign Policy
D. Subscriptions > mySubscription > Activity Log > New Alert
ANSWER57:
Microsoft Azure Administrator Certification Q&A:
What does az vmss deallocate do?
The az vmss deallocate command will deallocate and remove the VMs within a VMSS. Azure Doc
A company is planning to use Azure for the various services they offer. They want to ensure that they can bill each department for the resources they consume. They decide to use Azure resource tags to separate the bills department wise. Would this fulfill the requirement?
– Yes, you can use resource tags to organize your Azure resources and also apply billing techniques department wise. The Microsoft documentation mentions the following.
– Reference: Azure resource tags
A company is planning to use Azure for the various services they offer. They want to ensure that they can bill each department for the resources they consume. They decide to use Azure rolebased access control to separate the bills department wise. Would this fulfill the requirement?
– No, This is used to control access to resources and can’t be used for billing purposes.
– Reference: Azure Role Based Access Control
A company is planning to use Azure for the various services they offer. They want to ensure that they can bill each department for the resources they consume. They decide to use Azure policies to separate the bills department wise. Would this fulfill the requirement?
– No, Azure policies are used from a governance perspective and can’t be used to create bills department wise.
– Reference: Azure Gov policies
A company is planning to use the Azure Import/Export service to move data out of its Azure Storage account. Which of the following service could be used when defining the Azure Export job?
– Only the BLOB service is supported by the Export job feature. This is also given in the Microsoft documentation.
– Reference: Azure Blob Storage
Suppose you have an application running on a windows virtual machine in azure. what is the best-practice guidance on where the app should store data files?
– Dedicated data disks are generally considered the best place to store application data files. They can be larger than OS disks and you can optimize them for the cost and performance characteristics appropriate for your data.
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Sources/References:
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
1- Exam AZ-104: Microsoft Azure Administrator
3- Exam AZ-104: Microsoft Azure Administrator – Skills Measured
4- Whizlab
5- Udemy
Azure Breaking News – Azure Certifications Testimonials
- Growing pains for a small saas company.
by /u/SalamanderFew1357 (Microsoft Azure) on April 21, 2026 at 11:13 amWe are a tiny company building an app, and as we onboard more users, our cloud infrastructure is starting to show cracks. We didn’t really design for traffic spikes early on, and now some services randomly throttle or fail under load. We have mostly been fixing things reactively, but it’s starting to get stressful. I,am curious how other small teams handle this? how do you plan architecture ahead of time without overengineering everything from day one? submitted by /u/SalamanderFew1357 [link] [comments]
- draw.io with Azure work items
by /u/OnlyInvestigator1675 (Microsoft Azure) on April 21, 2026 at 11:07 amDo you guys actually use diagrams inside Azure DevOps work items? I always had the same issue: write requirements → open another tool → export → upload → lose context. So I made a small extension that lets me draw diagrams directly inside the work item using draw.io but not sure if sharing links is allowed here Nothing fancy 😊, just: - draw/edit inside ADO - save with the work item - no external storage submitted by /u/OnlyInvestigator1675 [link] [comments]
- [Teach Tuesday] Share any resources that you've used to improve your knowledge in Azure in this thread!by /u/AutoModerator (Microsoft Azure) on April 21, 2026 at 11:00 am
All content in this thread must be free and accessible to anyone. No links to paid content, services, or consulting groups. No affiliate links, no sponsored content, etc... you get the idea. Found something useful? Share it below! submitted by /u/AutoModerator [link] [comments]
- We have a strong Entra ID and Intune setup already doing a lot of what SASE promises, trying to figure out if we need the whole thing or just SSEby /u/Bitter-Ebb-8932 (Microsoft Azure) on April 21, 2026 at 9:44 am
Conditional access, device compliance, identity-based access control all covered through Entra ID and Intune. Our WAN isn't complex, around 300 users across four sites with most traffic going to Azure and M365 anyway, so the SD-WAN component of full SASE feels like it might be more than we need. The SSE-only argument is that we shouldn't pay for SD-WAN we don't need and our existing network is fine as is. The counter argument is that running security and networking from separate platforms creates visibility gaps that only become obvious during incidents when you're trying to correlate across both layers and neither has the complete picture. To those with a mature Entra ID setup and went through this exact decision, did full SASE justify itself or does SSE genuinely cover what you need in practice? submitted by /u/Bitter-Ebb-8932 [link] [comments]
- Made a free Action that visualizes what changed in your azurerm Terraform PRs. would love feedback from people who actually run Azure in productionby /u/nilipilo (Microsoft Azure) on April 21, 2026 at 9:32 am
Hey r/AZURE, I built a free open source tool called ArchiteX. It started as AWS only, but after the v1.3 launch the most repeated feedback i got was just "azure when?", so i shipped v1.4 today with proper azurerm support. Posting here because this is the audience that will actually tell me if it is useful or just my own itch. What it does: drop in GitHub Action. On every PR that touches *.tf it parses base + head, builds a resource graph for each, computes the architectural delta (added / removed / changed nodes and edges), runs a set of weighted risk rules and posts a sticky comment with: a 0 to 10 risk score with reasons (every rule weight is documented and capped) a plain english summary of what changed and why a reviewer should care a focused mermaid diagram of only the changed nodes plus one layer of context, not the whole topology an optional CI gate (mode: blocking) for high risk changes an audit bundle uploaded as a workflow artifact (summary.md, score.json, egress.json, a self contained report.html and a SHA-256 manifest) What is in the azure tranche today (v1.4): 12 azurerm_* resource types covering the canonical 3 tier scope: virtual_network, subnet, public_ip, network_interface, network_security_group, network_security_rule, linux_virtual_machine, windows_virtual_machine, lb, storage_account, mssql_server, mssql_database 3 azure specific risk rules on top of the cross provider ones: nsg_allow_all_ingress (NSG rule that allows * or 0.0.0.0/0 inbound), storage_account_public (storage account with public_network_access_enabled or allow_nested_items_to_be_public set to true), mssql_database_public (mssql_server with public_network_access_enabled = true) auto detection. drop your .tf in and the tool figures out which provider each resource belongs to, no config needed. mixed AWS + azure repos work too, the comment opens with a "Detected providers: aws, azurerm, N resources analyzed" banner a canonical azure example (examples/07-azure-public-lb, public LB plus open NSG) wired into CI so you can see what a real comment looks like before installing anything Why i think it is different from Defender for Cloud / Azure Policy / tfsec / Checkov: those are great at "this resource is misconfigured" or "this subscription is non compliant right now". ArchiteX answers a different question, "what changed in the architecture in this PR". A brand new public LB. An NSG flipping from a private CIDR to *. A storage account toggling public_network_access_enabled. A resource gated behind count = var.create ? 1 : 0 that you did not notice was being toggled on. It is the architectural diff layer at PR review time, not a runtime posture tool. Works fine side by side with the others. A few deliberate calls i made, especially relevant to this sub: local only, no azure credentials needed. ArchiteX never runs terraform plan, never calls ARM, never downloads the azurerm provider, never touches state. it just reads the static .tf source files. the only network call in the whole tool is the GitHub REST API call to post the comment. no SaaS, no telemetry, no account, no paid tier. Important if you work in a regulated tenant. no LLM in the hot path. template based renderer. same input gives byte identical output across runs, machines, contributors. i wanted a tool where re running can never quietly change a score and erode reviewer trust. conditional resources are first class. module author repos have lots of count = var.x ? 1 : 0. those resources get rendered as conditional phantoms (? prefix in the diagram) and explicitly excluded from per resource rules so they cannot false positive. self contained HTML audit report. no JS, no CDN, no remote fonts. open it in an air gapped browser, the full report renders. Coverage today: 57 resource types total (45 AWS + 12 azure), 21 weighted risk rules. Free, MIT, single Go binary, single Action, zero config to start. Repo: https://github.com/danilotrix86/ArchiteX Live sample report (no install): https://danilotrix86.github.io/ArchiteX/report.html 30 second quickstart is at the top of the README. What i would love your help with: what azurerm resource is the first thing that breaks it in your repo? coverage gaps are the #1 thing i want to fix. tranche 0 is deliberately the canonical 3 tier scope. AKS, Application Gateway, Cosmos DB, Key Vault, Front Door and Function App are queued for tranche 1, but i want your priority order, not mine. smallest reproducer in an issue is the highest value contribution i can ask for. are the 3 azure rule weights sensible for your team? nsg_allow_all_ingress 3.5, storage_account_public 4.0, mssql_database_public 3.5. calibrated to my taste and a small group of testers. very curious to hear "rule X is too high or too low for our risk tolerance". the mssql_database_public rule does NOT cross check whether an azurerm_mssql_firewall_rule scopes the public access (that would need graph traversal and break the deterministic first contract). reviewers can suppress it via .architex.yml or an inline comment. is that the right trade off for azure shops, or should the rule be quieter by default? Will answer every comment in the thread. submitted by /u/nilipilo [link] [comments]
- Conferences for Azure infrastructure (Landing Zones, CAF, Networking) + DevOps / Terraform / GitHub?by /u/namor38 (Microsoft Azure) on April 21, 2026 at 8:27 am
I’m trying to find conferences that actually match my day-to-day work, not just high-level cloud talk. My main focus is: Azure infrastructure (Landing Zones, CAF, networking, governance) Azure DevOps (pipelines, CI/CD) Terraform (IaC, multi-environment setups) PowerShell (automation) Security topics Also relevant if it fits naturally: GitHub / GitHub Actions GitHub Copilot DevOps practices around Azure environments I’m looking for events that go deep into: real-world Azure architecture (enterprise-scale, hub-spoke, private endpoints) infrastructure as code in production environments CI/CD and platform engineering patterns automation and operational tooling Last year I attended Microsoft Ignite, but it felt very AI / Copilot-heavy and less focused on deep infrastructure topics. Location doesn’t matter. Preferably multi-day conferences with workshops or hands-on labs, not just marketing sessions. Which conferences actually cover this stack in a meaningful, practical way? submitted by /u/namor38 [link] [comments]
- Detecting log ingestion dropouts per server in Sentinelby /u/Historical-Ear7543 (Microsoft Azure) on April 21, 2026 at 7:16 am
We’re an MSSP using Azure Lighthouse to monitor many Microsoft Sentinel workspaces. We’re trying to improve how we detect when a server stops sending logs to Sentinel, and ideally tell the difference between: a temporary ingestion drop, and a real issue (agent/DCR/connectivity). Today we use a scheduled query checking for events over the last 2 hours, which triggers a ticket and customer notification. It works, but creates noise and isn’t very precise. How are others handling this? Better KQL patterns or baselining? Using AMA / Arc signals instead of raw log presence? Grace periods to avoid false positives? Sentinel-native vs Logic Apps / external automation? Interested in real-world approaches that scale across many workspaces. Thanks! submitted by /u/Historical-Ear7543 [link] [comments]
- How did you prepare for AZ‑900 ? Looking for advice 🙏by /u/Klutzy-Ganache3876 (Microsoft Azure Certifications) on April 21, 2026 at 7:09 am
Hi everyone 👋 I’m planning to take the AZ‑900: Microsoft Azure Fundamentals exam and would love some advice from people who have already passed it. I have a basic cloud background (including one entry‑level cloud cert), but I’m still new to Azure specifically and don’t yet have much hands‑on experience with it. I’d really appreciate your input on: Which study resources helped you the most? (Microsoft Learn, videos, practice exams, etc.) How important was hands‑on Azure experience for AZ‑900? Any tricky topics or common pitfalls to watch out for? Things you wish you had known before taking the exam? How long you studied and what worked (or didn’t) Thanks in advance any guidance would really help! 🙂 submitted by /u/Klutzy-Ganache3876 [link] [comments]
- CosmosDB and Static Web App being in different regionsby /u/dataArchon (Microsoft Azure) on April 21, 2026 at 6:47 am
I'm new to Azure (I'm on the free tier) and cloud computing in general, I was creating resources on Azure using Terraform and I wasn't aware that Static Web Apps are only available for 'westus2,centralus,eastus2,westeurope,eastasia' so I had both my CosmosDB account and the SWA instance set to southeastasia. So now I'm wondering whether it would be better to keep CosmosDB in southeastasia and SWA in eastasia or have them both in eastasia. Having lower latency would be nice since this is for an Edge AI/IoT project where the user would be able to control an end device through the website but I just wanted to know what would be the better option. Also it would be nice to know whether SWA is the best option for my use case, the website was created using react and there are some features like the dashboards, end device controls in the website, so I'm not sure whether SWA is the best option or whether running the website on an Azure VM would be better. submitted by /u/dataArchon [link] [comments]
- Who actually migrated from VMware to Azure, or did you just stay put?by /u/Embarrassed_Log_9964 (Microsoft Azure) on April 21, 2026 at 4:41 am
VMware used to be the go͏-to choice. After the Broadcom changes, a lot of us are in renew or rethink mode. When people talk about how to migrate from VMware to Azure, the network side gets skipped almost every time, but it usually decides how fast you can actually move. AVS sounds like the easy option, but then it's months of planning and carrier timelines. When a VMware to Azure project drags, what's usually the blocker? Connectivity planning, or cost control after cutover? submitted by /u/Embarrassed_Log_9964 [link] [comments]
- Building a Microsoft 365 security tool — got some tough feedback, would appreciate input from adminsby /u/NathanSecurity (Microsoft Azure) on April 21, 2026 at 4:30 am
submitted by /u/NathanSecurity [link] [comments]
- [Azure] SAS tokens returning 403 AuthorizationFailure even though token generates successfully , storage account has public access disabled.by /u/EstablishmentAway273 (Microsoft Azure) on April 21, 2026 at 3:21 am
Stack: FastAPI backend, React frontend, Azure Data Lake Storage Gen2, deployed on Azure Container Apps The setup:Building a RAG-based document chat app. When users click citation links, the backend generates a SAS token and returns a blob URL so Microsoft Office Online Viewer can render DOCX/XLSX/PPTX files in an iframe. PDF files are rendered natively in the browser using <object> tag. The problem:SAS tokens generate successfully (200 OK from backend) but when the browser or Microsoft's viewer servers try to fetch the blob URL, they get: ''' <Error> <Code>AuthorizationFailure</Code> <Message>This request is not authorized to perform this operation.</Message> </Error> ''' What we tried: • Account key SAS — generates fine, still 403 on fetch • User delegation SAS — same result • URL encoding spaces in blob path — fixed signature mismatch • Checked SAS token format — looks correct (sv, se, sp=r, sig) Root cause we found:The storage account has Public network access: Disabled with private endpoints only. Everything only accessible within the VNet. Interesting behavior: • PDF works inside corporate VPN/PAM tool , browser is inside VNet, <object data={sasUrl}> fetches directly ✅ • PDF fails outside VPN — browser on public internet, same 403 ❌ • DOCX/XLSX/PPTX fail everywhere — Microsoft's viewer servers (view.officeapps.live.com) are always on public internet, always blocked ❌ The question:With a fully private storage account (private endpoints only, public access disabled), is there any way to make SAS tokens work for third-party viewers like Microsoft Office Online? Or is the only correct architecture to stream everything through the backend? Current workaround:Routing all file fetches through our JWT-protected backend download endpoint, which is inside the VNet and can reach storage. Works for PDF and DOCX (client-side rendering). PPTX has no good client-side renderer so showing a download button instead. Considering: • LibreOffice backend conversion (PPTX → PDF, stream PDF) • Asking infra team to enable public access from selected networks • Google Docs Viewer as alternative to Microsoft Viewer (same problem — needs public URL) Anyone dealt with this pattern before? Is LibreOffice conversion the standard approach for private storage + document preview? submitted by /u/EstablishmentAway273 [link] [comments]
- Startegy for implementing EntraID Conditional Accessby /u/WonderBeast2 (Microsoft Azure) on April 21, 2026 at 3:00 am
TLDR: given the vast number of combinations of the Devices, apps, user types, and Conditions, how does a good Entra architecture strategically plan the CA policies? When implementing Azure landing zone, given that Entra has limit of 195 CA policies, how do you strategically plan the Conditional access that has sufficient coverage. Going through one of the tenant I've noticed that they defined policies per apps for enforcing MFA, which sounds so wasteful. Edit: Searching through found few links, but are those practically suitable for an enterprise ? I am interested to learn from your past experiences. https://intercept.cloud/en-gb/blogs/conditional-access-policies-in-azure https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview#common-decisions submitted by /u/WonderBeast2 [link] [comments]
- Passed AZ-900by /u/Electrical-Towel-806 (Microsoft Azure Certifications) on April 21, 2026 at 2:59 am
I just passed the Azure Fundamentals (AZ-900) exam with a score of 826. I went into it thinking it would be “just basics,” but honestly some of the questions were tricky. Not difficult in terms of depth, but the wording can really throw you off if your concepts aren’t clear. I’m pretty new to Azure, so I started with Scott Duffy’s Udemy course, which was helpful to understand the fundamentals. But what actually made the difference was practicing scenario-based questions. I used Inside Cloud and Security practice questions - https://insidethemicrosoftcloud.com/az900quiz these are quite tricky and much closer to the real exam. The default Microsoft practice test and the Udemy ones are pretty straightforward, so relying only on those isn’t enough at all. The actual exam had a lot of scenario-based and slightly confusing questions. I expected it to be harder overall, but it turned out to be manageable. I took my time going through the questions so ended up finishing with about 7 minutes left. Overall, it was a good experience. Happy to help if anyone is preparing for it submitted by /u/Electrical-Towel-806 [link] [comments]
- Azure Portal Not Responding. You?by /u/climb4fun (Microsoft Azure) on April 21, 2026 at 12:03 am
Ping times out. Other sites include dev.azure.com are working. I'm in eastern Canada. submitted by /u/climb4fun [link] [comments]
- Running a Self‑Hosted LLM on Azure Container Appsby /u/groovy-sky (Microsoft Azure) on April 20, 2026 at 9:32 pm
Hey everyone, I wanted to better understand how LLM inference actually works under the hood, so I put together a small tutorial showing how to run the Gemma‑4 E2B model on Azure Container Apps using a lightweight stack built around llama.cpp. The goal wasn’t to build anything production‑grade — mostly just to experiment, learn a bit more about the runtime side of LLMs, and document the process along the way. https://github.com/groovy-sky/azure/tree/master/local-ai-00#introduction If you're curious about running a self‑hosted LLM on Azure without relying on managed AI platforms, this might be useful. P.S. If you're curious how it works, you can try the demo: https://gemma-h4ksrlmuz7pfa.ashysky-1e58cf76.westeurope.azurecontainerapps.io submitted by /u/groovy-sky [link] [comments]
- az900, questionsby /u/yerbater0s (Microsoft Azure Certifications) on April 20, 2026 at 9:12 pm
Hi everyone, I want to get the AZ-900 basic certification. I see there's a practice quiz on the Microsoft Learn website. Are the exam questions at the same level? Are they similar? Because, honestly, the practice quiz questions weren't that difficult. I'm worried the exam questions will be difficult submitted by /u/yerbater0s [link] [comments]
- Exam Vouchersby /u/Cloudo01 (Microsoft Azure Certifications) on April 20, 2026 at 9:12 pm
Hello everyone, I just started studying for DP-300. I saw an offer on Udemy to buy Exam voucher + retake for 120$ is it decent or I should wait since im not looking to take the exam in the next month anyway. Thanks 😀 Edit note: the exam voucher in my country goes for 80$ submitted by /u/Cloudo01 [link] [comments]
- az900by /u/yerbater0s (Microsoft Azure) on April 20, 2026 at 9:11 pm
Hi everyone, I want to get the AZ-900 basic certification. I see there's a practice quiz on the Microsoft Learn website. Are the exam questions at the same level? Are they similar? Because, honestly, the practice quiz questions weren't that difficult. I'm worried the exam questions will be difficult submitted by /u/yerbater0s [link] [comments]
- Passed SC-300 on My 2nd Attempt
by /u/SecondComing101 (Microsoft Azure Certifications) on April 20, 2026 at 9:05 pmMy first attempt was on March 30th, had a bunch of study notes, was killing the Microsoft Practice Test, went into the test and it felt like the matrix screen saver. Very scenario based, didn’t know how to properly read / filter out information on the case study, it was a lot going on. To say the least I ended with a score of 557, with the passing mark being 700 and I was crushed. Post-test, I went on tutorialdojo, and just practiced on questions / heavy scenarios that appeared on the test. The key to passing the test is understanding the WHY and also being able to recognize the patterns, and what the questions are asking. To make a long story short, took the test again, felt more confident knowing how the test format was and with the questions that were coming my way, ended up passing with a score of 776. I have no IT experience, but hopefully this motivates those who are trying to get in the field. Got my Security+ in Feb, and now have my SC-300, desired career road path is IAM, so any advice on what my next step should be, as I am thinking of getting the AWS-Solution Architect cert next in the near future. Moral of the story - You Can Do IT TOO!!! submitted by /u/SecondComing101 [link] [comments]
AZ104 Exam Prep on ios – AZ104 Exam Prep on android
AZ104 Exam Prep on windows 10/11 – AZ104 Exam Prep on web
Azure Certification Path 2022- 2023 for someone with no experience coding
This is what I would recommend as the path since you have no coding experience:
AZ900–>AZ104–>SC900–>AZ305 or AZ400 or AZ500 -> AI900
Azure Fundamentals –> Azure Administrator –> Microsoft Security, Compliance, and Identity Fundamentals –> Azure Solutions Architect Expert or Microsoft Azure Security Technologies
or Designing and Implementing Microsoft DevOps Solutions
That being said, I’d recommend learn scripting as that would come in handy for this admin path expert. If you passed SAA, I’m positive you can pass any cert with proper dedication.
FYI – I created this free tool to carve out your certification path. Give it a try here. Open to feedback on how it can be improved for everyone.
Certifications for Microsoft Azure
There’s a Microsoft certification for you, whether or not you’re thinking about what Microsoft Azure is and where to start, or where you should go next in your cloud job. There are around 16 Azure cloud assertions open. Here is an overview of current Microsoft Azure assertions.
Nuts and bolts Level Certifications
Microsoft Certified: Azure Fundamentals
Microsoft Certified: Azure Data Fundamentals
Microsoft Certified: Azure AI Fundamentals
Accomplice Level Certifications
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Azure Developer Associate
Microsoft Certified: Azure Database Administrator Associate
Microsoft Certified: Azure Security Engineer Associate
Microsoft Certified: Azure Data Scientist Associate
Microsoft Certified: Azure Data Engineer Associate
Microsoft Certified: Azure AI Engineer Associate
Microsoft Certified: Azure Stack Hub Operator Associate
Expert Level Certifications
Microsoft Certified: Azure Solutions Architect Expert
Microsoft Certified: DevOps Engineer Expert
Specialty Certifications
Microsoft Certified: Azure IoT Developer Specialty
Microsoft Certified: Azure for SAP Workloads Specialty
Microsoft Certified: Azure Virtual Desktop Specialty
There are also two other Microsoft assertions that are Azure-related. While we won’t cautiously depict them in this post, dependent upon your master way and limit, they might justify researching.
For security engineers responsible for peril the leaders, checking, and response, the Microsoft Certified: Security Operations Analyst Associate confirmation is required. It requires completing the SC-200 appraisal.
Test SC-300 is required for the Microsoft Certified: Identity and Access Administrator Associate, which is for heads who use Azure AD to manage IAM.
What might be prudent for you to do first?
In particular, you should make certain with regards to what a Microsoft Azure confirmation is and isn’t. Is simply clear? Phenomenal! Then, at that point, we ought to explore three circumstances that can assist you with picking where to start.
“I’m new to development. I’m essentially uninformed in regards to this ‘cloud’ that is quite serious.”
You can sort out some way to cloud in the event that you’re the kind of person who counts “Microsoft Word” as a specific capacity on your resume. On the off chance that you’re just beginning started, a section level certification will outfit you with the language and understanding you’ll need to all the more promptly analyze your ensuing stages. The AZ-900 Azure Fundamentals accreditation is your first stop on the Azure road.
The cloud might be alarming, yet the capacities you’ll get as you seek after this accreditation will help you with understanding it in a way that even an all out beginner can understand — especially if you have the right getting ready. (Look at me as a hotshot, yet I think our Azure Fundamentals getting ready is astonishing.)
“I have a fundamental cognizance of the cloud.”
Perhaps you’ve worked in the IT field beforehand. Perhaps you’ve attempted various things with AWS, GCP, or Azure. Do you accept you’re ready to make a dive? Press the brakes. Start with the Azure Fundamentals affirmation, if you haven’t at this point. In the best circumstance, you’ll see it to be a breeze. Regardless, paying little heed to how far you advance in Azure, this accreditation will give the establishment to future accomplishment. The accompanying crosspiece on the ladder (Azure Administrator Associate) can be an inconvenient one to ascend. Before dealing with it, you’ll need all of the Fundamentals data notwithstanding a huge load of Azure included knowledge.
Here are different Azure Certifications (Microsoft Certified)
AZ-900
For beginners, this is the best Microsoft Azure accreditation. It’s an unprecedented spot to start on the off chance that you’re new to appropriated processing or Microsoft Azure. This one would be Azure 101 if test names appeared to be okay and acceptable.
Test AZ-900: Microsoft Azure Fundamentals ($99 USD) is required.
There are no fundamentals.
For whom this is for?
In a general sense, everyone. Non-particular individuals with a cloud-related calling, similarly as new or cheerful designers or IT experts, could benefit from acknowledging what the cloud is and isn’t. Any person who needs to comprehend the Microsoft Azure environment should have the data expected to complete this evaluation.
Fundamentals DP-900 Microsoft Certified
For inescapable data focused cloud subject matter experts, this is a significant beginning advance assertion.
Test DP-900: Microsoft Azure Data Fundamentals ($99 USD) is required.
There are no fundamentals.
For whom this is for?
This helper is for informational collection draftsmen and data base administrators who are essentially starting with cloud data.
AI Fundamentals AI-900 Microsoft Certified
This Microsoft Azure affirmation exhibits that you appreciate the fundamentals of man-made mental ability (AI) and AI (ML) in Azure for amateurs with both particular and non-specific establishments.
Test AI-900: Microsoft Azure AI Fundamentals ($99 USD) is required.
There are no basics.
For whom this is for?
Reproduced insight Engineers, Data Scientists, Developers, and Solutions Architects with a working data on AL and ML, similarly as Azure organizations related with them. This affirmation, like the others in the Azure Fundamentals series, is normal for those with both specific and non-particular establishments. That proposes data science and PC programming experience aren’t required, but Microsoft recommends making them program data or experience.
Administrator Associate AZ-104 is a Microsoft attestation.
For the IT swarm, this is the rudiments of Azure organization. This takes you from a fundamental perception of the cloud to having the alternative to perform cloud tasks (and get repaid to do them).
Test AZ-104: Microsoft Azure Administrator ($165 USD) is required.
For whom this is for?
This affirmation is for IT specialists and administrators who screen cloud assets and resources and direct cloud system. This test is (mistakenly) seen as an entry level test, yet you’ll need to know an immense heap of anticipated that information should pass and do whatever it takes not to have your AZ denied.
Azure Container Apps:
Azure Container Apps is a serverless offering you can use to host your containers. It is a good fit for containerized apps and hosting microservices. Integrated services like KEDA, Envoy proxy, and Dapr provide you with out-of-the-box auto-scaling, ingress, traffic splitting, and simplified microservice connectivity.
Container Apps service is built on top of Kubernetes. Container Apps are an Azure Resource Manager deployment object, meaning you can’t just use your existing Kubernetes object descriptions and migrate them to Container Apps. You need to rewrite your deployment stack using Bicep or ARM templates. Terraform is not yet supported.
A Twitter List by enoumen
