FirstTry

Exam objective

AZ-104

Create and configure virtual machines

This objective sits in Deploy and manage Azure compute resources, which carries 24% of the Azure Administrator exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.

Objective title verbatim from the official objectives. Microsoft Azure exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

Deploy and manage Azure compute resources

A subscription administrator wants a new team member to create and manage virtual machines across the subscription, but must not be able to modify virtual networks or any other resource type. Which role assignment satisfies this requirement?

Assign the Virtual Machine Contributor role at subscription scopeCorrect · your answerThis is correct because Virtual Machine Contributor is scoped specifically to VM management actions.
Assign the Contributor role at subscription scope for all resourcesContributor grants create and manage rights over almost all resource types in the subscription, which exceeds the restriction on virtual networks.
Assign the Owner role at subscription scope for all resource typesOwner includes Contributor-level access plus the ability to manage role assignments, far broader than what is needed.
Assign the Reader role at subscription scope for all resource typesReader only allows viewing resources and cannot create or manage virtual machines at all.
Assign the Network Contributor role at subscription scope onlyNetwork Contributor manages virtual networks and related networking resources, the opposite of what the team member needs.

Correct.

Checked against learn.microsoft.com, July 2026

Concept

A role definition lists the specific actions a security principal can perform, and built-in roles can be scoped narrowly to a single resource type such as virtual machines.

Why A

The Virtual Machine Contributor role grants permission to create and manage virtual machines without granting rights over unrelated resource types like virtual networks, matching the stated restriction.

Source

For example, the Virtual Machine Contributor role allows a user to create and manage virtual machines.

Azure RBAC overview, checked July 2026
#rbac#built-in-roles#virtual-machines#role-assignment

Now you: practice questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

Deploy and manage Azure compute resources

An administrator is configuring a virtual machine that will use unmanaged disks stored as page blobs and needs the lowest possible disk latency for the VM. Which storage account type should the administrator create for the disks?

Sample question 2 of 3

Deploy and manage Azure compute resources

A team is provisioning a storage account that will hold only unmanaged virtual machine disks, which Azure stores as page blobs, and requires SSD-backed low-latency performance. No other blob types will ever be stored in this account. Which storage account type should be created?

Sample question 3 of 3

Deploy and manage Azure compute resources

An administrator tries changing a running VM from Standard_D4s_v5 to a memory-optimized size in the portal, but that size is missing from the list. What should the administrator do first?

Full Azure Administrator question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Deploy and manage Azure compute resources