Microsoft AZ-104 - Microsoft Azure Administrator - Deploy and manage Azure Compute Resources - Automate Deployments - Review Questions

Azure deployments: ARM, Bicep, and Git

1. An administrator deploys a Bicep file using Azure CLI. What happens to the Bicep definition before Azure Resource Manager processes the deployment?

A. It is converted into a PowerShell script.

B. It is converted into Kubernetes YAML.

C. It is executed directly by each resource provider.

D. It is compiled into an ARM JSON template.

2. You need to deploy the same infrastructure to development and production, using different resource names and SKUs. What is the best approach?

A. Maintain unrelated templates for every environment.

B. Use a shared template with separate environment parameter files.

C. Edit hard-coded values manually before each deployment.

D. Change the resource provider API version for each environment.

3. An ARM resource definition contains an apiVersion property. What does that property identify?

A. The resource provider API contract used for that resource.

B. The application's installed software version.

C. The Git commit used to deploy the template.

D. The administrator's version number for the template.

4. A Bicep file must reference an existing virtual network without creating or updating it. Which feature should you use?

A. An output containing the virtual network name only.

B. A resource declaration using the existing keyword.

C. A resource declaration with a new symbolic name only.

D. An explicit dependsOn declaration only.

5. You want to preview which resources a template deployment is expected to create, modify, or delete. Which operation should you run?

A. Export the resource group template.

B. Compile the Bicep file to JSON only.

C. Commit the template to Git.

D. Run the deployment what-if operation.

6. A resource group contains VM1 and VM2. An incremental deployment defines only VM1. What happens to VM2 solely because it is omitted from the template?

A. VM2 is moved into another resource group.

B. VM2 is stopped and deallocated.

C. VM2 remains in the resource group.

D. VM2 is automatically deleted.

7. An administrator needs a template representing supported current resource configuration, including changes made after the original deployment. Which source should they export?

A. The current resource group or selected resources.

B. The resource group's Azure Activity Log.

C. The original template's earliest Git commit.

D. The original deployment's template from deployment history.

8. You have an existing ARM JSON template named main.json and want to convert it to Bicep. Which Azure CLI command should you use?

A. az bicep decompile --file main.json

B. az group export --name RG1

C. az deployment group create --template-file main.json --resource-group RG1

D. az bicep build --file main.json

9. You edited main.bicep locally. You want to record the changes in the local Git repository and then send them to GitHub. Which sequence is appropriate?

A. git add → git commit → git push

B. git push → git add → git commit

C. git pull → git push → git add

D. git commit → git clone → git pull

10. A team wants reviewed Bicep changes to deploy automatically through GitHub Actions without storing a long-lived Azure client secret. Which design best meets the requirement?

A. Commit the Bicep file and rely on Git to update Azure directly.

B. Give the repository public access and deploy anonymously.

C. Require pull request checks, then deploy using OIDC federation and scoped Azure RBAC.

D. Store an administrator password in the Bicep parameter file.

Question	Answer	Explanation
1	B	Bicep compiles into ARM JSON. Both formats use Azure Resource Manager for deployment.
2	C	A shared template with separate parameter files provides consistent infrastructure while allowing environment-specific settings.
3	A	apiVersion selects the resource provider API contract. It differs from the template’s contentVersion.
4	D	Bicep’s existing keyword references a resource without creating or updating it.
5	B	What-if previews expected changes. Compilation checks and produces deployment definitions but does not compare them with Azure’s current state.
6	C	Incremental mode leaves omitted resources in place. Removing a resource from the template does not automatically delete it.
7	A	Export current resources to capture supported present configuration. Deployment history preserves the previously submitted template. Neither export is a data backup.
8	D	decompile converts ARM JSON to Bicep; build converts Bicep to ARM JSON. Review converted files before reuse.
9	B	Add → commit → push means stage changes, record them locally, then publish commits to the remote repository.
10	C	GitHub Actions runs the deployment. OIDC federation provides authentication without a stored client secret; Azure RBAC determines the identity’s permitted actions.