Question 420 An App Service deployment succeeds but the website fails when an external SQL database is unavailable. What does this illustrate? Successful deployment means every backend request will work Managed web hosting does not guarantee availability of independent application dependencies The web app can function without its required database by definition App Service deploys the SQL database automatically for every website Explanation Correct Answer B:Application reliability also requires reachable backend services. Incorrect Answers A:Code deployment and runtime dependencies are separate. C:Application behavior depends on its architecture. D:A web deployment doesn't necessarily provision external databases.
Question 421 A company hosts development and production web apps with different performance needs. Which resource placement can isolate their compute costs? Put both apps in the same plan with more resource tags Assign different deployment slot labels while sharing unchanged workers Use separate App Service plans for distinct capacity boundaries Move only the production app to another resource group Explanation Correct Answer C:Different plans allow separate sizing and billing for the environments. Incorrect Answers A:Tags don't isolate worker capacity. B:Slots are staging boundaries, not necessarily independent plan compute. D:Resource group placement alone doesn't separate its App Service plan.
Question 422 A team runs a small cleanup task every night at 02:00 without maintaining a scheduler VM. Which Azure Functions trigger is relevant? A public IP assignment An Azure Files access tier A policy deny assignment A timer trigger with an appropriate schedule expression Explanation Correct Answer D:Timer triggers invoke function code according to a configured schedule. Incorrect Answers A:An IP does not call code on a schedule. B:File shares don't schedule execution. C:Governance enforcement isn't a function scheduling trigger.
Question 423 A function should react to object-created notifications from a supported event source instead of polling a directory continuously. Which integration concept applies? A storage account tag containing 'events' A permanent VM that scans every container on a tight loop A VM availability set An Event Grid subscription delivering relevant events to a function handler Explanation Correct Answer D:Event-driven notifications can invoke code only when an event arrives. Incorrect Answers A:Tags don't emit or route event messages. B:Polling is an alternative with unnecessary idle work for a supported event pattern. C:Compute fault-domain placement isn't event delivery.
Question 424 A function has an HTTP trigger and must not be anonymously callable. Which setting should developers assess? The storage account's blob access tier An application tag named Private The region pair's friendly name The trigger's authorization level and supported identity/front-door controls Explanation Correct Answer D:HTTP function access should match intended callers rather than default to a public assumption. Incorrect Answers A:Blob temperature is not HTTP function authentication. B:A resource label doesn't enforce an HTTP token check. C:Geography labels can't authenticate a caller.
Question 425 A business needs an event-triggered function with dedicated always-allocated hosting capacity and controlled network features. Which hosting choice may be relevant? A supported Functions hosting plan with dedicated or premium capacity Every Function must use a pure consumption plan A virtual network alone without a function host A storage account lifecycle rule instead of a runtime plan Explanation Correct Answer A:Functions can run on different plans depending on capacity and networking needs. Incorrect Answers B:Plan selection isn't restricted to one pricing model. C:Networking does not execute the code. D:Lifecycle automation isn't a general Functions compute host.
Question 426 A critical Azure Function intermittently throws exceptions after a release. Which telemetry capability should the team enable or inspect? The account's subscription display name Rely only on a function invocation's success status without collecting its dependency telemetry A resource group's alphabetical location Application Insights telemetry integrated with the function Explanation Correct Answer D:Request and exception telemetry can expose failing executions. Incorrect Answers A:Billing labels aren't invocation traces. B:Execution status does not show complete function timing or downstream failure details. C:Group sorting doesn't reveal call exceptions.
Question 427 A team deploys a new Container Apps revision and wants to test it with limited traffic before sending all users. Which platform capability is relevant? Deleting the previous revision before testing A storage account replication tier Revision traffic splitting where supported Changing the Azure region name in deployment labels Explanation Correct Answer C:The platform can route portions of ingress traffic between eligible revisions. Incorrect Answers A:Immediate removal prevents staged comparison and rollback. B:Blob copies don't split runtime HTTP requests. D:Labels don't implement weighted routing.
Question 428 A containerized service needs an API connection setting that varies between test and production. What approach supports portability? Use a resource lock as a substitute for configuration Supply environment-specific configuration at deployment rather than hardcoding it into the image Rebuild the image with embedded passwords for every stage Expect the image tag to read the correct database automatically Explanation Correct Answer B:The same image can be reused with different approved settings. Incorrect Answers A:Locks don't supply application connection values. C:Hardcoded secrets increase risk and reduce image reuse. D:Image tags don't discover deployment credentials.
Question 429 Operations wants to prevent deploying an unreviewed image that happens to share a mutable tag. Which image reference supports stronger version traceability? Only the mutable 'latest' tag in every environment An immutable content digest or otherwise pinned approved image version A container registry resource group display name An unrelated VM snapshot Explanation Correct Answer B:Pinning avoids silently changing the deployed bits when a tag is reused. Incorrect Answers A:A mutable tag cannot prove which image was deployed later. C:Resource groups don't identify image bytes. D:VM disk snapshots are not version identities for container images.
Question 430 A team asks whether managed AKS means Microsoft deploys and secures all code and worker workloads automatically. What remains the customer's responsibility? Configure and secure cluster workloads, permissions and appropriate node pools Treat every AKS worker node as the cluster control-plane API endpoint All user application authorization is automatically granted by Microsoft AKS automatically patches every custom image's third-party packages Explanation Correct Answer A:Managed Kubernetes reduces control-plane work but does not remove tenant application responsibility. Incorrect Answers B:AKS separates managed orchestration control plane components from tenant worker nodes. C:Application identities and privileges remain customer decisions. D:Image maintenance requires appropriate supply-chain controls.
