Microsoft AZ-104 Azure App Service Practice Test

 

Topic 13 focuses on Azure App Service Plans, Apps, Scaling, TLS, Networking, Backup, and Slots for the Microsoft Certified: Azure Administrator Associate certification and the AZ-104 exam, using Microsoft Azure administration scenarios. For broader exam preparation, review the Microsoft Azure Administrator AZ-104 Exam Dumps page. Each question includes a concise explanation of the correct answer and the technical reason the other choices are incorrect.

Question 1

To control the underlying App Service compute capacity and features used by web apps, which Azure configuration should be selected?

  1. App Service plan
  2. Slot swap
  3. Custom domain
  4. VNet integration

Correct Answer: A

 

Correct Answer

Answer A is correct because App Service plan is the compute-resource definition that supplies region, operating system, pricing tier, and capacity to one or more App Service apps. It directly supports the requirement to control the underlying App Service compute capacity and features used by web apps.

Incorrect Answers

Answer B is incorrect because Slot swap is used to promote a tested staging deployment to production with minimal interruption; it does not provide the capability described in the scenario.

Answer C is incorrect because Custom domain is used to present an organization-specific hostname instead of the default azurewebsites.net name; it does not provide the capability described in the scenario.

Answer D is incorrect because VNet integration is used to allow an App Service app to reach private resources in a connected VNet; it does not provide the capability described in the scenario.

 

Question 2

For App Service plan, which administrative outcome is expected?

  1. Control the underlying App Service compute capacity and features used by web apps
  2. Limit which network sources can reach the App Service public endpoint
  3. Enable HTTPS for eligible custom domains without managing a separate certificate lifecycle
  4. Promote a tested staging deployment to production with minimal interruption

Correct Answer: A

 

Correct Answer

Answer A is correct because App Service plan is the compute-resource definition that supplies region, operating system, pricing tier, and capacity to one or more App Service apps. Its intended administrative use is to control the underlying App Service compute capacity and features used by web apps.

Incorrect Answers

Answer B is incorrect because that outcome belongs to Access restrictions, which is used to limit which network sources can reach the App Service public endpoint; it is not the primary purpose of App Service plan.

Answer C is incorrect because that outcome belongs to App Service managed certificate, which is used to enable HTTPS for eligible custom domains without managing a separate certificate lifecycle; it is not the primary purpose of App Service plan.

Answer D is incorrect because that outcome belongs to Slot swap, which is used to promote a tested staging deployment to production with minimal interruption; it is not the primary purpose of App Service plan.

 

Question 3

To increase per-instance capability or unlock plan features, which Azure configuration should be selected?

  1. TLS configuration
  2. App Service plan
  3. Scale up
  4. Slot-specific setting

Correct Answer: C

 

Correct Answer

Answer C is correct because Scale up is changing an App Service plan to a different pricing tier or larger worker size. It directly supports the requirement to increase per-instance capability or unlock plan features.

Incorrect Answers

Answer A is incorrect because TLS configuration is used to protect client-to-app traffic with current encrypted transport settings; it does not provide the capability described in the scenario.

Answer B is incorrect because App Service plan is used to control the underlying App Service compute capacity and features used by web apps; it does not provide the capability described in the scenario.

Answer D is incorrect because Slot-specific setting is used to keep environment-specific configuration attached to its intended slot; it does not provide the capability described in the scenario.

 

Question 4

For Scale up, which administrative outcome is expected?

  1. Recover an App Service application after an unwanted change or data loss
  2. Stage a new application version separately from production before switching traffic
  3. Present an organization-specific hostname instead of the default azurewebsites.net name
  4. Increase per-instance capability or unlock plan features

Correct Answer: D

 

Correct Answer

Answer D is correct because Scale up is changing an App Service plan to a different pricing tier or larger worker size. Its intended administrative use is to increase per-instance capability or unlock plan features.

Incorrect Answers

Answer A is incorrect because that outcome belongs to App Service backup, which is used to recover an App Service application after an unwanted change or data loss; it is not the primary purpose of Scale up.

Answer B is incorrect because that outcome belongs to Deployment slot, which is used to stage a new application version separately from production before switching traffic; it is not the primary purpose of Scale up.

Answer C is incorrect because that outcome belongs to Custom domain, which is used to present an organization-specific hostname instead of the default azurewebsites.net name; it is not the primary purpose of Scale up.

 

Question 5

To add horizontal capacity so requests can be served by more instances, which Azure configuration should be selected?

  1. App Service web app
  2. Scale out
  3. TLS configuration
  4. VNet integration

Correct Answer: B

 

Correct Answer

Answer B is correct because Scale out is increasing the number of worker instances assigned to an App Service plan. It directly supports the requirement to add horizontal capacity so requests can be served by more instances.

Incorrect Answers

Answer A is incorrect because App Service web app is used to deploy web code without administering the underlying web server virtual machines; it does not provide the capability described in the scenario.

Answer C is incorrect because TLS configuration is used to protect client-to-app traffic with current encrypted transport settings; it does not provide the capability described in the scenario.

Answer D is incorrect because VNet integration is used to allow an App Service app to reach private resources in a connected VNet; it does not provide the capability described in the scenario.

 

Question 6

An App Service web app receives more concurrent requests, while its individual worker size remains unchanged. What outcome is expected when the administrator scales out the plan?

  1. Protect client-to-app traffic with current encrypted transport settings
  2. Add horizontal capacity so requests can be served by more instances
  3. Present an organization-specific hostname instead of the default azurewebsites.net name
  4. Control the underlying App Service compute capacity and features used by web apps

Correct Answer: B

 

Correct Answer

Answer B is correct because Scale out is increasing the number of worker instances assigned to an App Service plan. Its intended administrative use is to add horizontal capacity so requests can be served by more instances.

Incorrect Answers

Answer A is incorrect because that outcome belongs to TLS configuration, which is used to protect client-to-app traffic with current encrypted transport settings; it is not the primary purpose of Scale out.

Answer C is incorrect because that outcome belongs to Custom domain, which is used to present an organization-specific hostname instead of the default azurewebsites.net name; it is not the primary purpose of Scale out.

Answer D is incorrect because that outcome belongs to App Service plan, which is used to control the underlying App Service compute capacity and features used by web apps; it is not the primary purpose of Scale out.

 

Question 7

To deploy web code without administering the underlying web server virtual machines, which Azure configuration should be selected?

  1. App Service web app
  2. App Service backup
  3. Scale out
  4. App Service plan autoscale

Correct Answer: A

 

Correct Answer

Answer A is correct because App Service web app is a managed Azure hosting resource for web applications and HTTP APIs. It directly supports the requirement to deploy web code without administering the underlying web server virtual machines.

Incorrect Answers

Answer B is incorrect because App Service backup is used to recover an App Service application after an unwanted change or data loss; it does not provide the capability described in the scenario.

Answer C is incorrect because Scale out is used to add horizontal capacity so requests can be served by more instances; it does not provide the capability described in the scenario.

Answer D is incorrect because App Service plan autoscale is used to match web-app capacity to changing load automatically; it does not provide the capability described in the scenario.

 

Question 8

For App Service web app, which administrative outcome is expected?

  1. Protect client-to-app traffic with current encrypted transport settings
  2. Make inbound app access available privately without relying on the public endpoint
  3. Match web-app capacity to changing load automatically
  4. Deploy web code without administering the underlying web server virtual machines

Correct Answer: D

 

Correct Answer

Answer D is correct because App Service web app is a managed Azure hosting resource for web applications and HTTP APIs. Its intended administrative use is to deploy web code without administering the underlying web server virtual machines.

Incorrect Answers

Answer A is incorrect because that outcome belongs to TLS configuration, which is used to protect client-to-app traffic with current encrypted transport settings; it is not the primary purpose of App Service web app.

Answer B is incorrect because that outcome belongs to Private endpoint for App Service, which is used to make inbound app access available privately without relying on the public endpoint; it is not the primary purpose of App Service web app.

Answer C is incorrect because that outcome belongs to App Service plan autoscale, which is used to match web-app capacity to changing load automatically; it is not the primary purpose of App Service web app.

 

Question 9

To stage a new application version separately from production before switching traffic, which Azure configuration should be selected?

  1. App Service backup
  2. Scale up
  3. Deployment slot
  4. App Service managed certificate

Correct Answer: C

 

Correct Answer

Answer C is correct because Deployment slot is a live App Service deployment environment with its own hostname and configuration settings. It directly supports the requirement to stage a new application version separately from production before switching traffic.

Incorrect Answers

Answer A is incorrect because App Service backup is used to recover an App Service application after an unwanted change or data loss; it does not provide the capability described in the scenario.

Answer B is incorrect because Scale up is used to increase per-instance capability or unlock plan features; it does not provide the capability described in the scenario.

Answer D is incorrect because App Service managed certificate is used to enable HTTPS for eligible custom domains without managing a separate certificate lifecycle; it does not provide the capability described in the scenario.

 

Question 10

For Deployment slot, which administrative outcome is expected?

  1. Allow an App Service app to reach private resources in a connected VNet
  2. Stage a new application version separately from production before switching traffic
  3. Protect client-to-app traffic with current encrypted transport settings
  4. Deploy web code without administering the underlying web server virtual machines

Correct Answer: B

 

Correct Answer

Answer B is correct because Deployment slot is a live App Service deployment environment with its own hostname and configuration settings. Its intended administrative use is to stage a new application version separately from production before switching traffic.

Incorrect Answers

Answer A is incorrect because that outcome belongs to VNet integration, which is used to allow an App Service app to reach private resources in a connected VNet; it is not the primary purpose of Deployment slot.

Answer C is incorrect because that outcome belongs to TLS configuration, which is used to protect client-to-app traffic with current encrypted transport settings; it is not the primary purpose of Deployment slot.

Answer D is incorrect because that outcome belongs to App Service web app, which is used to deploy web code without administering the underlying web server virtual machines; it is not the primary purpose of Deployment slot.

 

Question 11

To promote a tested staging deployment to production with minimal interruption, which Azure configuration should be selected?

  1. Custom domain
  2. Deployment slot
  3. Slot swap
  4. App Service backup

Correct Answer: C

 

Correct Answer

Answer C is correct because Slot swap is an App Service operation that exchanges content and selected configuration between deployment slots. It directly supports the requirement to promote a tested staging deployment to production with minimal interruption.

Incorrect Answers

Answer A is incorrect because Custom domain is used to present an organization-specific hostname instead of the default azurewebsites.net name; it does not provide the capability described in the scenario.

Answer B is incorrect because Deployment slot is used to stage a new application version separately from production before switching traffic; it does not provide the capability described in the scenario.

Answer D is incorrect because App Service backup is used to recover an App Service application after an unwanted change or data loss; it does not provide the capability described in the scenario.

 

Question 12

For Slot swap, which administrative outcome is expected?

  1. Deploy web code without administering the underlying web server virtual machines
  2. Present an organization-specific hostname instead of the default azurewebsites.net name
  3. Promote a tested staging deployment to production with minimal interruption
  4. Make inbound app access available privately without relying on the public endpoint

Correct Answer: C

 

Correct Answer

Answer C is correct because Slot swap is an App Service operation that exchanges content and selected configuration between deployment slots. Its intended administrative use is to promote a tested staging deployment to production with minimal interruption.

Incorrect Answers

Answer A is incorrect because that outcome belongs to App Service web app, which is used to deploy web code without administering the underlying web server virtual machines; it is not the primary purpose of Slot swap.

Answer B is incorrect because that outcome belongs to Custom domain, which is used to present an organization-specific hostname instead of the default azurewebsites.net name; it is not the primary purpose of Slot swap.

Answer D is incorrect because that outcome belongs to Private endpoint for App Service, which is used to make inbound app access available privately without relying on the public endpoint; it is not the primary purpose of Slot swap.

 

Question 13

To present an organization-specific hostname instead of the default azurewebsites.net name, which Azure configuration should be selected?

  1. App Service plan autoscale
  2. Custom domain
  3. App Service web app
  4. App Service plan

Correct Answer: B

 

Correct Answer

Answer B is correct because Custom domain is a DNS name owned by the organization and mapped to an App Service app. It directly supports the requirement to present an organization-specific hostname instead of the default azurewebsites.net name.

Incorrect Answers

Answer A is incorrect because App Service plan autoscale is used to match web-app capacity to changing load automatically; it does not provide the capability described in the scenario.

Answer C is incorrect because App Service web app is used to deploy web code without administering the underlying web server virtual machines; it does not provide the capability described in the scenario.

Answer D is incorrect because App Service plan is used to control the underlying App Service compute capacity and features used by web apps; it does not provide the capability described in the scenario.

 

Question 14

For Custom domain, which administrative outcome is expected?

  1. Add horizontal capacity so requests can be served by more instances
  2. Promote a tested staging deployment to production with minimal interruption
  3. Deploy web code without administering the underlying web server virtual machines
  4. Present an organization-specific hostname instead of the default azurewebsites.net name

Correct Answer: D

 

Correct Answer

Answer D is correct because Custom domain is a DNS name owned by the organization and mapped to an App Service app. Its intended administrative use is to present an organization-specific hostname instead of the default azurewebsites.net name.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Scale out, which is used to add horizontal capacity so requests can be served by more instances; it is not the primary purpose of Custom domain.

Answer B is incorrect because that outcome belongs to Slot swap, which is used to promote a tested staging deployment to production with minimal interruption; it is not the primary purpose of Custom domain.

Answer C is incorrect because that outcome belongs to App Service web app, which is used to deploy web code without administering the underlying web server virtual machines; it is not the primary purpose of Custom domain.

 

Question 15

To enable HTTPS for eligible custom domains without managing a separate certificate lifecycle, which Azure configuration should be selected?

  1. Slot swap
  2. App Service plan
  3. TLS configuration
  4. App Service managed certificate

Correct Answer: D

 

Correct Answer

Answer D is correct because App Service managed certificate is an App Service-provided TLS certificate for supported custom-domain scenarios. It directly supports the requirement to enable HTTPS for eligible custom domains without managing a separate certificate lifecycle.

Incorrect Answers

Answer A is incorrect because Slot swap is used to promote a tested staging deployment to production with minimal interruption; it does not provide the capability described in the scenario.

Answer B is incorrect because App Service plan is used to control the underlying App Service compute capacity and features used by web apps; it does not provide the capability described in the scenario.

Answer C is incorrect because TLS configuration is used to protect client-to-app traffic with current encrypted transport settings; it does not provide the capability described in the scenario.

 

Question 16

For App Service managed certificate, which administrative outcome is expected?

  1. Promote a tested staging deployment to production with minimal interruption
  2. Stage a new application version separately from production before switching traffic
  3. Recover an App Service application after an unwanted change or data loss
  4. Enable HTTPS for eligible custom domains without managing a separate certificate lifecycle

Correct Answer: D

 

Correct Answer

Answer D is correct because App Service managed certificate is an App Service-provided TLS certificate for supported custom-domain scenarios. Its intended administrative use is to enable HTTPS for eligible custom domains without managing a separate certificate lifecycle.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Slot swap, which is used to promote a tested staging deployment to production with minimal interruption; it is not the primary purpose of App Service managed certificate.

Answer B is incorrect because that outcome belongs to Deployment slot, which is used to stage a new application version separately from production before switching traffic; it is not the primary purpose of App Service managed certificate.

Answer C is incorrect because that outcome belongs to App Service backup, which is used to recover an App Service application after an unwanted change or data loss; it is not the primary purpose of App Service managed certificate.

 

Question 17

To protect client-to-app traffic with current encrypted transport settings, which Azure configuration should be selected?

  1. Scale out
  2. App Service backup
  3. TLS configuration
  4. Scale up

Correct Answer: C

 

Correct Answer

Answer C is correct because TLS configuration is App Service settings controlling HTTPS and supported TLS behavior for the application endpoint. It directly supports the requirement to protect client-to-app traffic with current encrypted transport settings.

Incorrect Answers

Answer A is incorrect because Scale out is used to add horizontal capacity so requests can be served by more instances; it does not provide the capability described in the scenario.

Answer B is incorrect because App Service backup is used to recover an App Service application after an unwanted change or data loss; it does not provide the capability described in the scenario.

Answer D is incorrect because Scale up is used to increase per-instance capability or unlock plan features; it does not provide the capability described in the scenario.

 

Question 18

For TLS configuration, which administrative outcome is expected?

  1. Protect client-to-app traffic with current encrypted transport settings
  2. Increase per-instance capability or unlock plan features
  3. Limit which network sources can reach the App Service public endpoint
  4. Make inbound app access available privately without relying on the public endpoint

Correct Answer: A

 

Correct Answer

Answer A is correct because TLS configuration is App Service settings controlling HTTPS and supported TLS behavior for the application endpoint. Its intended administrative use is to protect client-to-app traffic with current encrypted transport settings.

Incorrect Answers

Answer B is incorrect because that outcome belongs to Scale up, which is used to increase per-instance capability or unlock plan features; it is not the primary purpose of TLS configuration.

Answer C is incorrect because that outcome belongs to Access restrictions, which is used to limit which network sources can reach the App Service public endpoint; it is not the primary purpose of TLS configuration.

Answer D is incorrect because that outcome belongs to Private endpoint for App Service, which is used to make inbound app access available privately without relying on the public endpoint; it is not the primary purpose of TLS configuration.

 

Question 19

To recover an App Service application after an unwanted change or data loss, which Azure configuration should be selected?

  1. Private endpoint for App Service
  2. App Service backup
  3. App Service managed certificate
  4. VNet integration

Correct Answer: B

 

Correct Answer

Answer B is correct because App Service backup is a scheduled or on-demand backup of supported app content, configuration, and connected data according to backup capabilities. It directly supports the requirement to recover an App Service application after an unwanted change or data loss.

Incorrect Answers

Answer A is incorrect because Private endpoint for App Service is used to make inbound app access available privately without relying on the public endpoint; it does not provide the capability described in the scenario.

Answer C is incorrect because App Service managed certificate is used to enable HTTPS for eligible custom domains without managing a separate certificate lifecycle; it does not provide the capability described in the scenario.

Answer D is incorrect because VNet integration is used to allow an App Service app to reach private resources in a connected VNet; it does not provide the capability described in the scenario.

 

Question 20

For App Service backup, which administrative outcome is expected?

  1. Increase per-instance capability or unlock plan features
  2. Present an organization-specific hostname instead of the default azurewebsites.net name
  3. Recover an App Service application after an unwanted change or data loss
  4. Enable HTTPS for eligible custom domains without managing a separate certificate lifecycle

Correct Answer: C

 

Correct Answer

Answer C is correct because App Service backup is a scheduled or on-demand backup of supported app content, configuration, and connected data according to backup capabilities. Its intended administrative use is to recover an App Service application after an unwanted change or data loss.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Scale up, which is used to increase per-instance capability or unlock plan features; it is not the primary purpose of App Service backup.

Answer B is incorrect because that outcome belongs to Custom domain, which is used to present an organization-specific hostname instead of the default azurewebsites.net name; it is not the primary purpose of App Service backup.

Answer D is incorrect because that outcome belongs to App Service managed certificate, which is used to enable HTTPS for eligible custom domains without managing a separate certificate lifecycle; it is not the primary purpose of App Service backup.

 

Question 21

To allow an App Service app to reach private resources in a connected VNet, which Azure configuration should be selected?

  1. TLS configuration
  2. Slot swap
  3. VNet integration
  4. Private endpoint for App Service

Correct Answer: C

 

Correct Answer

Answer C is correct because VNet integration is App Service networking that lets an app make outbound connections into a virtual network. It directly supports the requirement to allow an App Service app to reach private resources in a connected VNet.

Incorrect Answers

Answer A is incorrect because TLS configuration is used to protect client-to-app traffic with current encrypted transport settings; it does not provide the capability described in the scenario.

Answer B is incorrect because Slot swap is used to promote a tested staging deployment to production with minimal interruption; it does not provide the capability described in the scenario.

Answer D is incorrect because Private endpoint for App Service is used to make inbound app access available privately without relying on the public endpoint; it does not provide the capability described in the scenario.

 

Question 22

For VNet integration, which administrative outcome is expected?

  1. Stage a new application version separately from production before switching traffic
  2. Allow an App Service app to reach private resources in a connected VNet
  3. Make inbound app access available privately without relying on the public endpoint
  4. Deploy web code without administering the underlying web server virtual machines

Correct Answer: B

 

Correct Answer

Answer B is correct because VNet integration is App Service networking that lets an app make outbound connections into a virtual network. Its intended administrative use is to allow an App Service app to reach private resources in a connected VNet.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Deployment slot, which is used to stage a new application version separately from production before switching traffic; it is not the primary purpose of VNet integration.

Answer C is incorrect because that outcome belongs to Private endpoint for App Service, which is used to make inbound app access available privately without relying on the public endpoint; it is not the primary purpose of VNet integration.

Answer D is incorrect because that outcome belongs to App Service web app, which is used to deploy web code without administering the underlying web server virtual machines; it is not the primary purpose of VNet integration.

 

Question 23

To make inbound app access available privately without relying on the public endpoint, which Azure configuration should be selected?

  1. Access restrictions
  2. App Service managed certificate
  3. Slot-specific setting
  4. Private endpoint for App Service

Correct Answer: D

 

Correct Answer

Answer D is correct because Private endpoint for App Service is Private Link connectivity that gives an App Service app a private IP endpoint inside a virtual network for inbound access. It directly supports the requirement to make inbound app access available privately without relying on the public endpoint.

Incorrect Answers

Answer A is incorrect because Access restrictions is used to limit which network sources can reach the App Service public endpoint; it does not provide the capability described in the scenario.

Answer B is incorrect because App Service managed certificate is used to enable HTTPS for eligible custom domains without managing a separate certificate lifecycle; it does not provide the capability described in the scenario.

Answer C is incorrect because Slot-specific setting is used to keep environment-specific configuration attached to its intended slot; it does not provide the capability described in the scenario.

 

Question 24

For Private endpoint for App Service, which administrative outcome is expected?

  1. Make inbound app access available privately without relying on the public endpoint
  2. Deploy web code without administering the underlying web server virtual machines
  3. Enable HTTPS for eligible custom domains without managing a separate certificate lifecycle
  4. Recover an App Service application after an unwanted change or data loss

Correct Answer: A

 

Correct Answer

Answer A is correct because Private endpoint for App Service is Private Link connectivity that gives an App Service app a private IP endpoint inside a virtual network for inbound access. Its intended administrative use is to make inbound app access available privately without relying on the public endpoint.

Incorrect Answers

Answer B is incorrect because that outcome belongs to App Service web app, which is used to deploy web code without administering the underlying web server virtual machines; it is not the primary purpose of Private endpoint for App Service.

Answer C is incorrect because that outcome belongs to App Service managed certificate, which is used to enable HTTPS for eligible custom domains without managing a separate certificate lifecycle; it is not the primary purpose of Private endpoint for App Service.

Answer D is incorrect because that outcome belongs to App Service backup, which is used to recover an App Service application after an unwanted change or data loss; it is not the primary purpose of Private endpoint for App Service.

 

Question 25

To limit which network sources can reach the App Service public endpoint, which Azure configuration should be selected?

  1. Access restrictions
  2. Deployment slot
  3. App Service web app
  4. App Service plan autoscale

Correct Answer: A

 

Correct Answer

Answer A is correct because Access restrictions is App Service rules that allow or deny inbound requests based on sources such as IP ranges, service tags, or virtual network subnets. It directly supports the requirement to limit which network sources can reach the App Service public endpoint.

Incorrect Answers

Answer B is incorrect because Deployment slot is used to stage a new application version separately from production before switching traffic; it does not provide the capability described in the scenario.

Answer C is incorrect because App Service web app is used to deploy web code without administering the underlying web server virtual machines; it does not provide the capability described in the scenario.

Answer D is incorrect because App Service plan autoscale is used to match web-app capacity to changing load automatically; it does not provide the capability described in the scenario.

 

Question 26

For Access restrictions, which administrative outcome is expected?

  1. Present an organization-specific hostname instead of the default azurewebsites.net name
  2. Limit which network sources can reach the App Service public endpoint
  3. Stage a new application version separately from production before switching traffic
  4. Promote a tested staging deployment to production with minimal interruption

Correct Answer: B

 

Correct Answer

Answer B is correct because Access restrictions is App Service rules that allow or deny inbound requests based on sources such as IP ranges, service tags, or virtual network subnets. Its intended administrative use is to limit which network sources can reach the App Service public endpoint.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Custom domain, which is used to present an organization-specific hostname instead of the default azurewebsites.net name; it is not the primary purpose of Access restrictions.

Answer C is incorrect because that outcome belongs to Deployment slot, which is used to stage a new application version separately from production before switching traffic; it is not the primary purpose of Access restrictions.

Answer D is incorrect because that outcome belongs to Slot swap, which is used to promote a tested staging deployment to production with minimal interruption; it is not the primary purpose of Access restrictions.

 

Question 27

To match web-app capacity to changing load automatically, which Azure configuration should be selected?

  1. TLS configuration
  2. Custom domain
  3. Private endpoint for App Service
  4. App Service plan autoscale

Correct Answer: D

 

Correct Answer

Answer D is correct because App Service plan autoscale is metric- or schedule-based scaling that adjusts the number of App Service plan instances. It directly supports the requirement to match web-app capacity to changing load automatically.

Incorrect Answers

Answer A is incorrect because TLS configuration is used to protect client-to-app traffic with current encrypted transport settings; it does not provide the capability described in the scenario.

Answer B is incorrect because Custom domain is used to present an organization-specific hostname instead of the default azurewebsites.net name; it does not provide the capability described in the scenario.

Answer C is incorrect because Private endpoint for App Service is used to make inbound app access available privately without relying on the public endpoint; it does not provide the capability described in the scenario.

 

Question 28

For App Service plan autoscale, which administrative outcome is expected?

  1. Match web-app capacity to changing load automatically
  2. Keep environment-specific configuration attached to its intended slot
  3. Protect client-to-app traffic with current encrypted transport settings
  4. Increase per-instance capability or unlock plan features

Correct Answer: A

 

Correct Answer

Answer A is correct because App Service plan autoscale is metric- or schedule-based scaling that adjusts the number of App Service plan instances. Its intended administrative use is to match web-app capacity to changing load automatically.

Incorrect Answers

Answer B is incorrect because that outcome belongs to Slot-specific setting, which is used to keep environment-specific configuration attached to its intended slot; it is not the primary purpose of App Service plan autoscale.

Answer C is incorrect because that outcome belongs to TLS configuration, which is used to protect client-to-app traffic with current encrypted transport settings; it is not the primary purpose of App Service plan autoscale.

Answer D is incorrect because that outcome belongs to Scale up, which is used to increase per-instance capability or unlock plan features; it is not the primary purpose of App Service plan autoscale.

 

Question 29

To keep environment-specific configuration attached to its intended slot, which Azure configuration should be selected?

  1. Slot-specific setting
  2. Deployment slot
  3. App Service managed certificate
  4. App Service backup

Correct Answer: A

 

Correct Answer

Answer A is correct because Slot-specific setting is an App Service application or connection-string setting marked to remain with a deployment slot during swap. It directly supports the requirement to keep environment-specific configuration attached to its intended slot.

Incorrect Answers

Answer B is incorrect because Deployment slot is used to stage a new application version separately from production before switching traffic; it does not provide the capability described in the scenario.

Answer C is incorrect because App Service managed certificate is used to enable HTTPS for eligible custom domains without managing a separate certificate lifecycle; it does not provide the capability described in the scenario.

Answer D is incorrect because App Service backup is used to recover an App Service application after an unwanted change or data loss; it does not provide the capability described in the scenario.

 

Question 30

For Slot-specific setting, which administrative outcome is expected?

  1. Match web-app capacity to changing load automatically
  2. Keep environment-specific configuration attached to its intended slot
  3. Make inbound app access available privately without relying on the public endpoint
  4. Add horizontal capacity so requests can be served by more instances

Correct Answer: B

 

Correct Answer

Answer B is correct because Slot-specific setting is an App Service application or connection-string setting marked to remain with a deployment slot during swap. Its intended administrative use is to keep environment-specific configuration attached to its intended slot.

Incorrect Answers

Answer A is incorrect because that outcome belongs to App Service plan autoscale, which is used to match web-app capacity to changing load automatically; it is not the primary purpose of Slot-specific setting.

Answer C is incorrect because that outcome belongs to Private endpoint for App Service, which is used to make inbound app access available privately without relying on the public endpoint; it is not the primary purpose of Slot-specific setting.

Answer D is incorrect because that outcome belongs to Scale out, which is used to add horizontal capacity so requests can be served by more instances; it is not the primary purpose of Slot-specific setting.

 

img