Exam objective

AZ-104

Provision and manage containers in the Azure portal

This objective sits in Deploy and manage Azure compute resources, which carries 24% of the Azure Administrator exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.

Objective title verbatim from the official objectives. Microsoft Azure exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

Deploy and manage Azure compute resourcesChoose 2

A company's registry is Standard tier. A new design needs images replicated to a second region and pulls only over a private endpoint. Which required capabilities are Premium-only? (Choose two.)

Geo-replication of the registry across regionsCorrect · your answerCorrect.
Webhooks that fire on image push eventsWebhooks are available in every tier; Basic allows two and Standard ten.
Private Link access through private endpointsCorrect · your answerCorrect.
Microsoft Entra authentication for pushes and pullsEntra ID authentication integration is one of the capabilities every tier shares.
Deleting images and tags from a repositoryImage deletion is a basic capability that Basic, Standard and Premium all offer.

Correct.

Checked against learn.microsoft.com, September 2026

Concept

Registry pricing plans share one data plane and API surface; what separates them is included storage, throughput, and a set of network and availability features reserved for the top plan. Multi-region serving and restricting pulls to a virtual network sit in that reserved set, while authentication and lifecycle basics are in every plan.

Why A and C

Microsoft's tier page states that Premium adds geo-replication for managing a single registry across multiple regions and private link with private endpoints to restrict access, so both requirements force the Premium plan.

Source

In addition to higher image throughput, Premium adds features such as geo-replication for high availability through managing a single registry across multiple regions, private link with private endpoints to restrict access to the registry, and higher API concurrency and bandwidth throughput for large-scale concurrent deployments.

Microsoft Learn: Azure Container Registry service tiers, checked September 2026
#acr#premium#geo-replication

Now you: practice questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

Deploy and manage Azure compute resources

An administrator tries to switch a Premium container registry replicating to two regions down to the Standard plan. The portal refuses. What must be done before the switch succeeds?

Sample question 2 of 3

Deploy and manage Azure compute resources

An engineer deploys a container group in Azure Container Instances with a Windows web container and a Windows log-forwarding sidecar. The deployment is rejected. What explains the rejection?

Sample question 3 of 3

Deploy and manage Azure compute resources

Your Linux container group has a web container on port 80 and an API container on 5000. Only port 80 is public. How does the web container reach the API?

Full Azure Administrator question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Deploy and manage Azure compute resources