Question 390 A developer has a containerized nightly task and wants a simple way to run a container without administering an orchestrator. Which Azure service fits? Azure Virtual Desktop Azure Key Vault alone Azure Container Instances Provision a long-running VM solely to execute one short containerized batch Explanation Correct Answer C:ACI runs containers without managing VM hosts or a full Kubernetes cluster. Incorrect Answers A:AVD publishes interactive desktops, not generic containers. B:A secrets service is not a container runtime. D:An always-on VM adds infrastructure lifecycle overhead relative to supported short-lived container instances.
Question 391 A test team runs a container for a short integration-test window, then discards it. What hosting property matters? Manual deployment of an entire VM cluster solely to run one image Changing a storage account's access tier A permanent set of remote desktop sessions On-demand container execution with resource allocation and stop lifecycle Explanation Correct Answer D:Azure Container Instances can host isolated short-lived workloads. Incorrect Answers A:This adds avoidable orchestration effort. B:Blob temperature does not run tests. C:Desktops don't provide the intended container execution service.
Question 392 A platform team operates dozens of container microservices needing rolling deployments and service discovery. Which Azure product provides managed Kubernetes control-plane capabilities? Azure Data Box Azure Blob lifecycle management Azure Virtual Desktop Azure Kubernetes Service Explanation Correct Answer D:AKS helps manage Kubernetes clusters and orchestrate containerized workloads. Incorrect Answers A:An offline transport appliance is unrelated to Kubernetes. B:Blob policies can't schedule pods. C:Remote desktops do not orchestrate container services.
Question 393 An AKS application has pending pods because its worker nodes lack CPU. Which capacity layer must be addressed? Kubernetes node-pool capacity and appropriate scaling A Microsoft Purview collection scan Increase only the Kubernetes control-plane label count while leaving insufficient worker nodes A policy exemption description Explanation Correct Answer A:Pods require schedulable compute resources in the node pool. Incorrect Answers B:Data catalog scans do not schedule containers. C:Pod capacity depends on actual node and workload resources, not labels on the control plane. D:Governance notes do not allocate nodes.
Question 394 A team wants a simple one-off container and is about to build an AKS cluster. What trade-off should it recognize? ACI always provides identical Kubernetes orchestration semantics AKS brings orchestration capability and operational complexity that ACI may not require All containers must run in Azure Virtual Desktop AKS has no ability to deploy more than one container Explanation Correct Answer B:A single simple container can be run without Kubernetes management. Incorrect Answers A:ACI is not a full AKS replacement. C:Desktop virtualization is not required for containers. D:Kubernetes is designed for many workloads.
Question 395 An organization needs a private registry of trusted container images for AKS workloads. Which Azure service supports it? Azure Policy tags Azure Container Registry Azure VPN Gateway Azure Files snapshots only Explanation Correct Answer B:ACR stores and distributes container images under controlled access. Incorrect Answers A:Tags and policies are not an image repository. C:VPN carries network traffic but does not distribute images. D:Snapshots are not a container registry.
Question 396 Developers push images to Azure Container Registry and expect applications to run immediately. What is missing? A runtime service such as AKS, Container Apps, or ACI Store the container image only on an application server's temporary local disk A storage account invoice Another image tag only Explanation Correct Answer A:A registry stores images; it does not execute them on its own. Incorrect Answers B:An ephemeral local copy is not a managed image registry for multiple deployments. C:Billing data does not provide compute. D:A tag identifies an image version but isn't a running container.
Question 397 A startup wants a containerized API that scales with HTTP traffic without managing Kubernetes nodes. Which Azure option is relevant? A resource lock on an image repository An unmanaged VM scale set with no deployed container runtime Azure Files without compute Azure Container Apps with its supported scaling configuration Explanation Correct Answer D:Container Apps provides managed container hosting and event-driven scaling. Incorrect Answers A:Locks don't run or scale containers. B:VMs alone don't supply a ready managed container application platform. C:Shared files don't execute APIs.
Question 398 A team has a queue-driven container worker and wants a managed container platform that responds to events. Which capability should it evaluate? Azure Container Apps event-driven scaling Use a static storage container instead of a compute service for a background worker A static network security group alone Azure Backup of the queue Explanation Correct Answer A:Workloads can scale based on configured external triggers rather than dedicated fixed VMs. Incorrect Answers B:Data storage cannot execute the requested background processing code. C:NSG rules don't start container workers. D:Backups don't consume messages.
Question 399 An application needs custom Kubernetes admission controllers and deep node-pool configuration. Which hosting model better fits that control requirement? Azure Storage Explorer Azure Container Apps alone for every custom cluster extension Azure Kubernetes Service Azure Static Web Apps Explanation Correct Answer C:AKS exposes Kubernetes orchestration controls that managed Container Apps abstracts away. Incorrect Answers A:A desktop client cannot provide a Kubernetes control plane. B:Container Apps isn't a full Kubernetes API/control-plane replacement. D:Static hosting offers no node-pool administration.
Question 400 A private backend microservice should not be exposed directly as a public website. What should designers evaluate in managed container hosting? Disabling all container health reporting Making the image repository public as the access control Increasing the image tag length Internal ingress and network access controls supported by the chosen service Explanation Correct Answer D:Traffic exposure should match the backend's private consumer requirements. Incorrect Answers A:Missing diagnostics won't enforce private ingress. B:Registry visibility is different from runtime ingress security. C:Tag naming doesn't set network exposure.
