AZ-104: Storage
Storage is one of the skill areas tested on the Azure Administrator (AZ-104) exam. Below are free AZ-104 practice questions with worked answers and a concept diagram — each with a plain-language explanation. Practice the first 10 questions of AZ-104 free, no signup.
The concept, in one picture
2 free AZ-104 Storage questions
A teammate deployed a virtual machine and a new Azure Storage account into a resource group by running a single Azure Resource Manager (ARM) template. You now need to open and review the exact ARM template that was submitted for that deployment. In the Azure portal, where do you go?
- ✓ Open the resource group and select the Deployments blade, then open the deployment to view its template
- Open the storage account, select the blob Container blade, and inspect the container contents
- Open the storage account and select the File shares blade
- Open the virtual machine and select the Properties blade
When an ARM template is deployed, Azure records it as a named deployment on the target resource group. Opening Resource group > Deployments and selecting the deployment lets you view (and redownload) the exact template and parameters that were submitted. The blob Container and File shares blades only expose stored data objects, not deployment history, and a VM's Properties blade shows the VM's own configuration, not the template that created it.
A storage account named saproddata1 sits in a resource group named rg-prod. You grant a user, Amina, the Reader role inherited from rg-prod, plus the Storage Blob Data Contributor role assigned directly at the scope of saproddata1. No other role assignments apply to Amina. Which two actions can Amina perform? Each correct answer is a complete solution.
- Grant Storage Blob Data Reader to another user on saproddata1
- ✓ Write a new block blob into a container in saproddata1
- Change the networking (firewall and virtual network) rules of saproddata1
- ✓ Read the contents of blobs stored in saproddata1
- Read the contents of files in a file share on saproddata1
Storage Blob Data Contributor is a data-plane role that permits read, write, and delete of blob data, so Amina can both upload (write) a new blob and read existing blob contents. Granting a role to another user requires Owner, User Access Administrator, or Role Based Access Control Administrator, which Reader does not include. Modifying firewall/network rules is a management-plane write that requires Contributor-level access on the account, not Reader. Reading file share contents needs a Storage File Data role (for example, Storage File Data SMB Share Reader); the Blob role does not cover Azure Files.
Practice AZ-104 free
The first 10 questions of every exam are free. No signup, no email wall.
Start practicing →Get a free AZ-104 study plan by email
A short plan to work through AZ-104 by skill area, plus a note when we add new questions. Optional — the practice above stays free. No spam, unsubscribe anytime.