Exam AZ-103: Microsoft Azure Administrator Practice Test
AZ-103 practice covers administration of Azure resources, including compute, networking, storage, identity, and monitoring. The available questions sample operational decisions such as limiting virtual machine management exposure, organizing resources, controlling subnet traffic, and choosing managed hosting. These areas connect routine cloud administration with security, resilience, and service operations.
Exam overview
About the Exam AZ-103: Microsoft Azure Administrator Exam
Azure administration involves selecting services and configuring them to meet access, availability, and operational needs. Practice topics include resource groups for managing related resources, tags for classification, and role-based access control scoped to a resource group. Network scenarios consider network security groups, virtual network connectivity, and requirements such as reaching domain controllers for Windows VM domain joins. Compute questions touch availability sets and fault domains, as well as managed web hosting that reduces virtual machine maintenance. Storage and monitoring scenarios include protecting blob data from accidental changes and collecting VM performance counters and event logs for centralized review. For each task, identify the requirement first, then distinguish the Azure feature that addresses it from alternatives with broader access, different protection behavior, or more infrastructure overhead.
Sample Practice Questions
Review a selection from this exam's published US Practice Tests practice bank.
An administrator needs to restrict inbound management access to a virtual machine while allowing administrators to connect through the Azure portal using a browser. Which service provides managed RDP or SSH connectivity without exposing the VM's public IP?
Show answer
Correct answer: AAzure Bastion provides browser-based RDP and SSH access to virtual machines over the Azure portal, avoiding the need to expose a VM with a public IP address for management access.
An administrator wants to collect performance counters and event logs from Azure virtual machines for centralized analysis. Which service can collect and store this monitoring data?
Show answer
Correct answer: AAzure Monitor collects and analyzes telemetry from Azure resources. Configuring diagnostic or monitoring agents and data collection can send VM performance and log data to centralized destinations such as a Log Analytics workspace.
An administrator needs to place a virtual machine in a fault domain that is separate from another VM in the same availability set. What does an availability set use to help provide this separation?
Show answer
Correct answer: AAvailability sets distribute VMs across fault domains, which represent separate physical infrastructure, and update domains, which are rebooted separately during planned maintenance. This helps reduce the chance that a single hardware failure or maintenance event affects every VM.
A team needs to manage a group of related Azure resources as a unit and apply the same lifecycle operations to them. Which Azure construct provides this logical container?
Show answer
Correct answer: BA resource group is a logical container for Azure resources that share a lifecycle or management purpose. Resources can be deployed, managed, and deleted together through the resource group.
An administrator wants to group and organize resources by applying descriptive metadata such as environment, owner, or cost center. What should they apply to the resources?
Show answer
Correct answer: AAzure tags are name-value metadata that can be applied to resources and resource groups to support organization, reporting, and cost management.
A storage account requires protection against accidental deletion or overwrite of blob data for a configured retention period. Which feature is designed to provide this protection?
Show answer
Correct answer: ABlob soft delete retains deleted or overwritten blobs for a configured period, allowing them to be restored during that retention window. The other options address hosting, cross-origin requests, or delegated access.
A team wants to grant a user permission to manage resources in one resource group without granting access to other resource groups. Which approach best meets this requirement?
Show answer
Correct answer: AAzure RBAC assignments can be scoped to a resource group. A role assigned at that scope grants permissions within the resource group and its resources, without granting the same permissions across the subscription.
How to use this practice test
The free AZ-103 practice session draws up to 20 random questions from the available 50-question bank. Answer each scenario by matching its operational requirement—such as scoped access, managed connectivity, or data protection—to the Azure service or configuration described. Results appear after the session, helping you identify which decisions to revisit.
Preparation tips
- Compare resource groups, tags, and role-based access control: distinguish lifecycle grouping, metadata classification, and permission assignment.
- For virtual machine access scenarios, contrast Azure Bastion-style browser connectivity with exposing a public IP, and note the management protocols involved.
- Review how network security groups control inbound and outbound traffic at subnet or network-interface scope, and trace connectivity needed for domain joins.
- Separate availability-set fault-domain placement from monitoring and backup functions; identify what each setting or service protects.
- Match blob retention and recovery requirements to storage protection features, then distinguish them from VM performance and event-log collection.