Azure Administrator (AZ-104) — Identity, Governance and Storage flashcards
10 of 78 cards free to study here · 2 topics · the whole deck is built into Willys
Hands-on Entra ID users, groups and SSPR, RBAC and custom roles, Azure Policy, locks, tags and cost controls, then storage accounts, redundancy, tiers, SAS and keys, Azure Files and File Sync, blob protection, AzCopy and storage networking.
Learn deck · part of Microsoft Azure Administrator (AZ-104) · written against: AZ-104 skills measured (current study guide). Updated 2026-10-10.
Study the free sample
10 cards from the deck as they are. Flip, rate yourself, filter by topic; your progress stays in this browser.
Tap the card or press Space to flip
The 10 sample cards as a list
-
A Sales group should gain and lose members automatically as each user's department attribute changes. Which group membership type does this, and which licence tier does it need?A dynamic membership group with a rule such as user.department equals Sales. Dynamic groups require Microsoft Entra ID P1 (or higher).Identities and Governance › Entra Users and Groups
-
An administrator tries to manually add one extra person to a dynamic user group. What happens?It cannot be done — membership of a dynamic group is controlled only by its rule. Either change the rule or use an assigned group instead.Identities and Governance › Entra Users and Groups
-
Can one dynamic group hold both users and devices?No. A dynamic rule targets either users or devices, never both.Identities and Governance › Entra Users and Groups
Watch out: dynamic device membership is available only for security groups. -
Fifty new hires must be added to Microsoft Entra ID in one go from the portal. Which feature fits?Bulk create under Users — download the CSV template, fill in one row per user and upload it. Bulk invite works the same way for guests.Identities and Governance › Entra Users and Groups
-
A licence assignment fails for a new user even though licences are available. Which user property is most often missing?The usage location. It must be set before a licence can be assigned, because not every service is offered in every country.Identities and Governance › Entra Users and Groups
-
A workload needs premium, low-latency SMB file shares. Which storage account type is created?A premium file shares account (FileStorage kind). Standard general-purpose v2 accounts offer only standard-tier file shares.Storage › Storage Accounts and Redundancy
-
Which redundancy options are available to premium storage accounts?Only LRS and ZRS. Geo-redundant options are offered on standard general-purpose v2 accounts.Storage › Storage Accounts and Redundancy
-
With RA-GRS enabled, how does an application read from the secondary copy?Through the secondary endpoint, formed by adding -secondary to the account name, for example contoso-secondary.blob.core.windows.net.Storage › Storage Accounts and Redundancy
-
Before a customer-managed failover of a geo-redundant account, which property estimates how much data could be lost?Last Sync Time — writes after it may not have reached the secondary because geo-replication is asynchronous.Storage › Storage Accounts and Redundancy
-
After an unplanned customer-managed failover, what redundancy does the account have in its new primary region?It becomes LRS in the new primary; geo-redundancy must be re-enabled to protect it again.Storage › Storage Accounts and Redundancy
Unlock the whole deck
You are studying a free 10-card sample. All 78 cards of Azure Administrator (AZ-104) — Identity, Governance and Storage, the other 2 Microsoft Azure Administrator (AZ-104) decks, and spaced-repetition scheduling are built into Willys. 14-day free trial, then $14.99 a year.
In Willys, tap Exam Library at the top of your Decks (or Browse Exam Library… under the + button), find the exam on its shelf or by search, tick it and tap Add.
More Microsoft Azure Administrator (AZ-104) decks
← All Microsoft Azure Administrator (AZ-104) decks, with the study guide and topic outline.
About these cards
Review status: Second-reader reviewed, with corrections applied.
Checked against:
- Checked against the Microsoft Azure Administrator (AZ-104) skills outline, identity and governance and storage sections — topic outline only; no text copied.
- Checked against Microsoft Learn documentation for Microsoft Entra ID, Azure RBAC, Azure Policy, resource locks, Cost Management, Azure Storage, Azure Files, Azure File Sync and AzCopy (reference only; no sentences reproduced).
These are independent study notes written for Willys. They are not official exam material, may contain mistakes, and are no substitute for your course, your teacher or the exam owner's own publications. Found an error? Tell us — corrections ship as a new version of the deck.
Microsoft and Azure are trademarks of the Microsoft group of companies. This product is not affiliated with, sponsored by, or endorsed by Microsoft.
Use of these pages is covered by our Terms of Use.