Develop Azure compute solutions
AZ-204 · 89 questions
- A harbor-ferry ticketing team rebuilds the same Node image after every one-line route change and waits while package installs run again. Which Dockerfile change keeps the expensive OS and package layers cached across those frequent app edits?
- A municipal compost lab has a working image, but the container exits immediately because nothing declares the process the runtime should start. Which instruction family defines the default executable for the container?
- A seed-catalog API compiles with a heavy SDK image, then the team ships that entire SDK image to production and wonders why pulls are huge. What image-management approach shrinks the runtime artifact?
- A community-radio playlist service lists port 8080 in the Dockerfile, yet the host still cannot reach the listener. What does EXPOSE actually do versus what still must be configured at run time?
- A credit-union batch image must always start the same scanner binary, but testers want to override only the folder argument without rebuilding. How should ENTRYPOINT and CMD be assigned?
- A botanical-garden kiosk team says they “deployed the registry” after only tagging a local image, then later says “the image is running” when they mean a live instance. Which statement keeps image, container, and registry correctly apart?
- A folk-festival box-office service pins every environment to :latest, then a rollback cannot find the last good bits because the tag moved. Which image-management practice restores a reliable artifact pointer?
- A regional blood-bank courier app COPY-includes a .env file that holds a storage account key, and that layer is now in every registry replica. What is the correct image-hygiene fix at build time?
- A maple-syrup cooperative pushes a grader API image to Azure Container Registry and then waits for HTTPS traffic that never arrives. What role does ACR play versus the compute host?
- A county-clerk filing API builds locally as clerk-api:dev and docker push fails because the tag is not under the registry login server. What publish sequence should the developer follow?
- An oyster-farm sensor laptop has no local Docker daemon, but the team still needs the image in Azure Container Registry. Which approach builds and lands the image without a local daemon?
- A snow-plow depot’s Container Apps revision stores the ACR admin username and password in the app definition so every intern can read them. How should the host authenticate to pull from ACR instead?
- A public-library consortium wants the same container repository available in two Azure regions so App Service pulls stay local. Which ACR capability unlocks that multi-region pull pattern?
- A ferry-kiosk team created an Azure Container Registry, but ACI still cannot find ticket-ui because nothing matches the pull reference the host was given. What is the publish contract the runtime uses?
- A compost-lab CI job pushes a unique tag every hour and the Azure Container Registry balloons. Which developer hygiene control cleans up old published artifacts inside ACR?
- A botanical-garden team wants a Container Apps revision to refresh when a new tag lands in Azure Container Registry. What can ACR contribute, and what can it not do alone?
- A folk-festival needs a one-off Linux container this weekend to generate wristband PDFs, with no scale-out story and no cluster to operate. Which Azure compute choice fits best?
- A blood-bank nightly label job in Azure Container Instances must run once and stay stopped on success, but should retry if the process exits non-zero. Which restart policy matches that contract?
- A maple-grade API in Azure Container Instances needs GRADEREGION=north without rebuilding the image for every region. How should that value be supplied?
- A clerk-office scanner plus a tiny log sidecar must start and stop together and share one private network namespace on Azure Container Instances. How should the containers be deployed?
- The compost lab wants a Fluent Bit-style logging sidecar next to its grader container without adopting Kubernetes. What is the supporting-role pattern on Azure Container Instances?
- An oyster-farm importer writes nightly CSVs that disappear when the Azure Container Instances group restarts because the filesystem was ephemeral. How should the developer keep that state?
- A ferry kiosk bookmarks the Azure Container Instances public IP, then the group restarts during platform maintenance and the IP changes. What should clients use instead for a stabler public address?
- The snow-plow image lives in a private Azure Container Registry, and the Azure Container Instances group definition currently embeds the ACR admin password. How should the group authenticate for the pull instead?
- A public-radio newsroom wants several HTTP microservices that scale with traffic and require no node-pool administration. Which Azure container host should the developer choose?
- A credit-union team wants a public demo Container App to call Dapr building blocks used by the production card-dispute API. They propose placing the demo in the same Container Apps environment so both apps can “share Dapr.” What should the developer do?
- A botanical-garden ticketing API on Azure Container Apps must send 10 percent of live HTTP traffic to a new build while 90 percent stays on the last good revision. Which approach meets the requirement?
- A botanical garden’s public storefront Container App must be reachable on HTTPS from the Internet, while the pricing engine behind it must accept calls only from other apps in the same environment. How should ingress be configured?
- A folk-festival merch API on Azure Container Apps is idle most of the year and should scale to zero when there is no traffic. A second worker in the same environment must scale only on CPU utilization. Which statement is correct?
- A compost lab needs a container that processes a drop folder and exits, three times a day. The team does not want a 24×7 HTTP process with a minimum replica count. Which Azure Container Apps feature should they use?
- A blood-bank courier Container App still embeds the storage account key in a Dockerfile ENV instruction. The team needs to rotate the key without rebuilding image layers. What should the developer do?
- A municipal newsroom’s microservices on Azure Container Apps need service invocation and pub/sub without each team writing a custom HTTP client mesh. What is the appropriate way to add those building blocks?
- A county extension office creates a .NET Web App in the Azure portal and is surprised that deployment slots and certain scale options are missing. What did the team overlook?
- A seed-catalog team has a ready Linux image in Azure Container Registry and also a raw ASP.NET repository. At App Service create time, how should they choose the hosting model?
- A harbor-ferry schedule site on a lower-tier App Service plan sleeps after idle periods, so the first morning commuter hits a long cold start. What should the developer enable, and what constraint applies?
- A public-library catalog is a conventional multi-page web app that needs a custom domain, deployment slots, and app settings in the IIS-style App Service model. Which Azure compute option should the developer choose?
- A clerk-office team tries to host a Windows-only .NET Framework site on a Linux App Service plan, and the runtime never starts. What create-time decision caused the failure?
- A maple cooperative hosts its public storefront and an overnight import site on the same small App Service plan to save money. During imports the storefront becomes CPU-starved. What should the developer explain?
- A folk-festival box office on App Service shows HTTP 500 entries in the platform web-server log, but the ASP.NET exception text written through ILogger never appears. What should the developer enable?
- A blood-bank courier App Service site fails only while a tester is clicking through a multi-step form. The developer needs to watch application output during that live repro. Which approach fits best?
- One /renew path on a library catalog App Service site returns HTTP 500, and the ordinary HTTP log shows only the status code. Which App Service diagnostic should the developer enable for that failing request?
- A compost lab left App Service application logging on the local filesystem, filled the worker disk, and the site began returning errors. What should the developer change?
- A ferry team enables App Service diagnostic logging and claims their Domain 4 monitoring work is complete. How should a developer correct that claim?
- A county-extension .NET site has a published output folder and no container workflow. Which App Service deployment approach should the developer use?
- A seed-catalog Linux image already lives in Azure Container Registry. The team wants App Service to run that image. What should the developer configure?
- A garden ticketing container on App Service listens on port 3000, but the platform probes 80/8080 and marks the site unhealthy. What should the developer set?
- A radio newsroom connects an App Service web app to a GitHub repository so each push publishes the site. How should the developer describe that capability on the exam?
- A clerk-office zip extract left a half-written wwwroot after a failed copy, and users saw mixed old and new DLLs. Which App Service deployment approach avoids that partial-update problem?
- A maple cooperative pushes a new image over the same :latest tag in ACR, but the App Service container web app still runs yesterday’s bits. What should the developer do?
- A blood-bank App Service site stores DbPassword in a text file on the worker and CatalogEndpoint in source code. How should the developer store that configuration instead?
- A municipal ferry schedule site is live on the default azurewebsites.net hostname, but riders need schedule.harbor.example over HTTPS. What should the developer configure on the App Service web app?
- A credit-union auditor reports that outdated TLS 1.0 clients can still negotiate to the municipal dispute portal hosted on App Service. Which App Service setting should the developer raise to block those clients?
- A botanical garden SPA hosted on a different origin calls a JSON API on App Service, but the browser blocks the response. Which App Service configuration should the developer update first?
- An extension-office App Service web app must reach a backing Azure store without committing a raw connection secret into source control. Which App Service feature should the developer use to wire that dependency?
- A city library catalog must serve static documentation from a /docs virtual path and a REST API from the same App Service site. Which site-level configuration should the developer use instead of a second App Service plan?
- On folk-festival ticket-sale morning the App Service site saturates. One teammate wants a larger plan SKU; another wants more instances on the same plan. How should the developer distinguish those two App Service scale actions?
- A compost-lab public dashboard on App Service spikes CPU every weekday at 08:00 when sensors flush. Which autoscale approach should the developer implement?
- A festival box-office App Service app is slammed Friday 16:00–22:00 and nearly idle otherwise. What autoscale configuration should the developer add so capacity is ready before the rush?
- A clerk-office Free-tier App Service plan has no autoscale blade, and a teammate files a platform bug. What should the developer conclude?
- While tuning a city permits portal on App Service, a study guide still pairs “optimize” with Azure Cache for Redis. For Domain 1 autoscaling on this web app, what should the developer implement?
- The harbor-ferry App Service site cannot go dark during weekday deploys, and the team needs a warm staging URL before production sees the build. What should the developer create?
- QA signed off on the staging deployment slot for the municipal permits site. The team wants that build to become production while the public production URL stays unchanged. What should the developer do?
- The staging slot for a clerk-office web app must keep ENVIRONMENT=qa and a QA database connection through a swap so production never points at QA. How should the developer mark those app settings?
- A library Shared App Service plan shows no Slots blade. What should the developer know about enabling deployment slots?
- A blood-bank App Service site JIT-compiles on first request, so a cold swap still caused a rider-visible pause. Which swap technique should the developer use so the destination worker warms before cutover?
- A maple-coop intern created eight separate Function apps for eight tiny related HTTP routes and now manages eight hosting identities. What should the developer recommend instead?
- A ferry webhook Function is idle most nights and can tolerate cold starts, while a clerk-office Function must join a VNet and stay pre-warmed. How should the developer match Azure Functions hosting plans?
- A compost-lab Azure Functions app was created without a linked storage account, and triggers never coordinate correctly. Which required application setting must the developer supply for host internal state?
- A newsroom developer stores a storage connection in local.settings.json and expects it in Azure after deploy, but the cloud function app has no connection. What should the developer understand about these files?
- A botanical public weather HTTP function should be callable without a key, while a blood-bank donor-update HTTP function must require the function key. Which Functions configuration distinguishes those endpoints?
- A seed-catalog Python function targets an unsupported Functions host, and extensions fail to load. What should the developer select when creating the function app?
- A clerk-office JavaScript Azure Functions app adds a Cosmos DB output binding, but the host cannot resolve the binding extension. What should the developer enable on the function app?
- A credit-union .NET Azure Function must run so the host and the app do not share one process. Which create/configure choice should the developer select?
- A festival Azure Function should run on a schedule, read a blob, and write a Cosmos DB item. How should the developer assign trigger and binding roles?
- An HTTP donor-intake Azure Function must enqueue a work item for a later processor. Which approach matches the Functions bindings skill?
- A county flood-camera function runs when a new video lands in Blob Storage and must process the bytes of that same blob. How should the function obtain the triggering blob’s content?
- A municipal soil-lab webhook Function accepts a soil-sample JSON body and must persist one Cosmos DB document per call. The team wants to avoid constructing a Cosmos SDK client inside the function. What should they add?
- A city radio-archive Function needs a Blob Storage API that the available input binding does not expose. A teammate insists every Blob call must go through a binding. What is the correct guidance?
- A compost-yard Function’s queue binding currently embeds the storage account key directly in function.json. What change correctly supplies the connection?
- A harbor ferry /delay webhook Function must return HTTP 202 to the caller and also enqueue a notification message for staff. How should the developer structure outputs on that single function?
- During a parks department review, a teammate asks for a Timer output binding and a SendGrid trigger on Azure Functions. What should the candidate explain about binding directions?
- A public library wants an Azure Function to run at 02:15 every night, but a pasted five-field Linux crontab never fires. What schedule format should the timer trigger use?
- A third-party tide API will POST storm alerts to a URL the municipal harbor owns. Which Azure Functions trigger best implements that webhook?
- When a cooperative grower drops a harvest CSV into a Blob Storage container, a county Function should start processing immediately. Which trigger should the developer choose?
- Work items for a city permits desk already land on an Azure Storage queue from another function’s output binding. The processor Function should run when a message appears. Which trigger fits?
- A clerk-office Azure Function must run whenever a new item is inserted into a Cosmos DB container. Which Functions trigger should the team select?
- A water-utility team needs blob-created notifications to reach a Function quickly without a timer scanning the container every five minutes. What approach should they prefer?
- A transit teammate wants one Azure Function that is both HTTP-triggered and timer-triggered to save a file. What is the correct design?
- A municipal IT backlog lists three needs: nightly cleanup at 01:00, a partner system that POSTs incidents, and a reaction when a monitored queue message appears. How should the team map Azure Functions triggers?