Azure AZ-204 Practice Test

AZ-204 practice test: what's covered

• Azure Developer Associate

Free AZ-204 sample questions

1. Your team is deploying a containerized REST API that must scale to zero instances when idle and automatically scale out based on incoming HTTP request volume, without managing any cluster infrastructure. Which Azure service best fits these requirements?

   • A. Azure Container Apps with HTTP-based autoscaling
   • B. Azure Kubernetes Service with a node pool
   • C. Azure Container Instances with a single group
   • D. App Service plan running a Linux container
   Show answer

   Correct: A. Azure Container Apps uses the KEDA scaler to scale to zero and scale out on HTTP traffic with no cluster to manage. AKS is incorrect because it requires you to operate nodes and never scales the cluster to zero by default. Container Instances cannot scale to zero or autoscale on HTTP. App Service is code-centric and its plan keeps at least one instance warm rather than dropping to zero.

2. A finance function app suffers from latency spikes on the first invocation after periods of inactivity, and it also needs to reach a database over a private virtual network. Which Azure Functions hosting plan should you choose to eliminate cold starts and support VNet integration?

   • A. The Premium (Elastic Premium) plan
   • B. The Consumption (serverless) plan
   • C. The free F1 shared plan
   • D. A Logic Apps Standard plan
   Show answer

   Correct: A. The Premium plan keeps pre-warmed instances ready and supports regional VNet integration, so it removes cold starts and reaches private resources. The Consumption plan is incorrect because it deallocates idle instances, causing cold starts, and has limited networking. The free shared plan does not run Functions workloads at scale, and Logic Apps Standard is a different product, not a Functions hosting plan.

3. You must implement a serverless workflow in Azure Functions that coordinates several activity functions in sequence, waits for an external approval, and survives host restarts while preserving execution state. Which approach should you use?

   • A. A Durable Functions orchestrator function
   • B. A standard HTTP-triggered function chain
   • C. A timer-triggered function loop
   • D. A queue-triggered fan-out function only
   Show answer

   Correct: A. Durable Functions provide stateful orchestration through the orchestrator and activity pattern, replaying history via event sourcing so execution survives restarts and can await external events. A plain HTTP chain is incorrect because it is stateless and loses progress on restart. A timer loop does not coordinate dependent steps, and a queue fan-out alone cannot maintain ordered, resumable orchestration state.

4. Your web team wants to release a new version of an App Service web app safely, validating it under production configuration before sending live traffic, with the ability to roll back instantly. Which deployment slot capabilities support this goal? (Choose TWO)

   • A. Warming up the staging slot before a slot swap
   • B. Performing a slot swap that reroutes traffic without downtime
   • C. Manually copying files over FTP into production
   • D. Restarting the production instance after each deploy
   • E. Deleting the production app and recreating it
   Show answer

   Correct: A and B. Slots are full app copies; pre-warming staging then swapping reroutes requests instantly with no downtime, and swapping back gives instant rollback. FTP copying is incorrect because it skips validation and risks partial deploys. Restarting production causes downtime, and deleting then recreating the app destroys availability rather than enabling a safe, reversible release.

5. Your container images are stored in Azure Container Registry, and a pod in Azure Container Apps must pull them without storing any registry credentials in configuration. Which authentication mechanism should you configure for the pull?

   • A. A managed identity granted the AcrPull role
   • B. An admin user account with stored password
   • C. A shared access signature on the registry
   • D. An anonymous public pull endpoint
   Show answer

   Correct: A. A managed identity assigned the AcrPull role lets the app authenticate to ACR with no secrets in configuration. The admin account is incorrect because it stores a static password and is discouraged for production. SAS tokens apply to storage, not registry image pulls, and anonymous pull would expose private images publicly, which violates the no-credential-yet-secure requirement.

Last updated: 2026-10-19

AZ-204 practice test FAQ

Related practice tests

• Azure AZ-104 practice test
• Azure AZ-400 practice test
• Azure AZ-305 practice test
• Microsoft AI-102 practice test
• AWS DVA-C02 practice test
• Azure AZ-900 practice test