Get Your CertAZ-104PlayCompete
‹ All AZ-104 questions

AZ-104 Practice Question 57: Custom Script Extension Deploy

Microsoft Azure Administrator Associate (AZ-104) · Test 6 · question 7 of 10

Computeeasy

An ARM template deploys ten Windows Server VMs. As part of the same deployment, a PowerShell script stored in a blob container must run on every VM to install and configure IIS, and nobody should have to sign in to the VMs afterwards.

What should be added to the template?

Select one answer
Show answer and explanation

Answer:

  • B. A Custom Script Extension resource on each VM that points to the script

The Custom Script Extension downloads a script from a location such as Azure Storage and runs it on the VM after it is provisioned. Declared as an extension resource in the template, it runs as part of the deployment on every VM, so the configuration is repeatable and no one needs to connect.

Option A can run the script, but as a manual step that operators have to remember and repeat for each VM. It is not part of the deployment, which is what the requirement asks for.

Option C only opens a network path. It does not run anything, and it adds attack surface for a task that needs no inbound connectivity at all.

Option D provides interactive access for a person. Connecting to ten VMs to run a script by hand is exactly the manual work the team wants to avoid, and Bastion does not add anything to the template that runs the script.

Reference: Use the Azure Custom Script Extension with Windows VMs

Practice Test 6 ›

Study guides for AZ-104

Azure Administrator (AZ-104): jobs, salary and the examAzure administrator role, jobs and pay data, and the AZ-104 exam: five domains, 100 minutes, US$165 / ₹4,865, AZ-900 first or not, and what next.
AZ-400 exam guide: DevOps Engineer Expert in 2026AZ-400 exam guide: the DevOps Engineer Expert prerequisites now that AZ-204 is retired, the five skill areas, price, renewal and a study plan.
Azure certification path 2026: AZ-900, AZ-104, AZ-305The Azure certification path for 2026 - AZ-900, AZ-104 and AZ-305 in order, what each covers, the AZ-305 prerequisite, renewal and what to skip.
Azure RBAC vs Azure Policy vs Entra roles vs resource locksHow Azure RBAC, Azure Policy, Microsoft Entra roles and resource locks differ, how scope inheritance works, and when deny beats audit.
Azure Storage redundancy - LRS, ZRS, GRS, GZRS and failoverHow LRS, ZRS, GRS, RA-GRS, GZRS and RA-GZRS differ, what failover does to your account, and how access tiers interact with redundancy.