100% Latest & Updated Microsoft AZ-104 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 530
A Container Apps secret was rotated using the application’s Secrets settings. A running revision still reads the old secret through an environment-variable secret reference. No new image needs deployment. What action makes that revision use the updated value?
- Expect all running containers to update their environment variables immediately in place
- Change only the ingress traffic-split percentages and leave the revision running
- Increase the Container App revision's maximum replica count and assume that refreshes environment variables in the already-running replicas
- Restart the active revision or deploy a replacement revision so its container environment picks up the rotated secret
Explanation
Correct Answer
D:App secrets are application-scope settings, but already-running containers need their revision restarted or replaced to receive changed environment-variable values. Secret rotation alone does not create a revision.
Incorrect Answers
A:Process environment variables are set when the container starts. Updating the shared secret definition does not automatically replace their in-memory values.
B:Traffic splitting changes request routing across revisions; it does not restart the existing container process or refresh an already-read environment variable.
C:Changing the maximum replica limit does not force all existing containers to restart or reload their process environment. After rotating an app secret used via environment variables, restart the active revision or deploy an appropriate new revision.
Question 531
A Container Apps workload runs in multiple-revision mode. Its old revision has no planned traffic or background processing, but it still has active replicas. Operators want to stop that old revision's containers while retaining the revision so it can be reactivated if a rollback is needed. Which lifecycle operation fits?
- Set the old revision's ingress traffic weight to zero and assume that deactivates its idle or background replicas
- Deactivate only the unused old revision, keeping it available for later activation
- Change just the application's ingress toggle and assume every historical revision is shut down
- Remove a hostname label from the old revision without changing its Active status
Explanation
Correct Answer
B:In multiple-revision mode, Azure Container Apps permits operators to activate and deactivate individual revisions. Deactivation stops that revision's running containers while keeping the revision record available for supported reactivation, allowing a controlled rollback without leaving unused replicas running.
Incorrect Answers
A:A zero traffic allocation stops HTTP routing to a revision but does not necessarily stop its active containers or background workloads. Deactivate that specific revision to stop its replicas while retaining rollback ability.
C:Ingress settings are application-scoped and changing them doesn't selectively deactivate one particular revision's containers. It could alter routing to every active revision while leaving the unused revision active; use the revision lifecycle control instead.
D:Revision labels are routing metadata, not its lifecycle state. A revision left active may keep replicas running even if it no longer has a label or production traffic.
Question 532
A Container Apps worker has an event-driven scale rule but must keep at least one replica alive for a continuously initialized connection. The team does not want the app to scale to zero during quiet periods. Which scale configuration should be changed?
- Raise the revision maximum replica count to two but leave minimum replicas at zero
- Set the revision minimum replica count to at least one
- Reduce the maximum replica count to zero
- Remove the scale rule but retain the default minimum of zero
Explanation
Correct Answer
B:The minimum replica count is the floor on active replicas. A value of one prevents ordinary scale-to-zero and maintains a running worker while event-driven scaling handles additional load.
Incorrect Answers
A:A higher maximum only permits additional replicas when events arrive. With the minimum still zero, scaling can return the app to no running replicas during quiet periods. Set minReplicas to at least one to maintain the warm connection.
C:A zero maximum cannot provide an always-on worker and may be invalid when configuring scaling bounds.
D:Removing the trigger does not establish a guaranteed always-running replica. The minimum value controls that requirement explicitly.
Question 533
A Container App runs two active revisions with production traffic weighted entirely to revision B. QA needs a stable test URL reaching revision A without changing public traffic percentages. Which feature best supports that workflow?
- Assign a revision label to revision A and use its label-specific URL
- Increase revision A traffic to 50 percent for all production users
- Disable ingress globally and expect the label URL to remain publicly usable
- Append revision A's name as a query-string parameter to the app's shared production ingress URL and assume it bypasses traffic weights
Explanation
Correct Answer
A:In multiple-revision mode, labels can expose a stable route to a particular revision separately from main application traffic splitting. QA can validate A without redirecting production calls.
Incorrect Answers
B:Changing the traffic weights would expose unapproved code to ordinary users. The requirement is a targeted QA route.
C:Application-level ingress affects availability of endpoints. Disabling it does not create the selective test path requested.
D:A query-string label on the shared Container App URL is not a revision-routing primitive. The shared hostname still follows configured production traffic weights; an assigned revision label exposes its own stable hostname for QA to reach A without redirecting ordinary traffic.
Question 534
A team changes an image tag on a Container App configured for single revision mode. Deployment succeeds, but engineers expect the old revision to keep receiving some production requests automatically. Which mode behavior explains the actual result?
- The storage account firewall automatically deactivates old revisions
- Single revision mode routes to the current active revision rather than retaining concurrent active revisions for weighted traffic
- Every image change must be an application-scope change that never creates a revision
- Azure Container Apps never supports two active revisions
Explanation
Correct Answer
B:A container template change produces a new revision, while single revision mode manages which one remains active. To split traffic between old and new, the application needs multiple revision mode.
Incorrect Answers
A:The container-app revision mode, not unrelated storage network rules, governs which revision is active after image deployment.
C:Container image settings belong to the revision template. Image changes are revision-scoped and can cause a new revision.
D:Multiple revision mode exists for controlled concurrent versions and traffic splitting. The stated app is in the narrower single revision mode.
Question 535
A Container Apps revision starts a process immediately but needs 40 seconds to load its model before it can safely answer user requests. Calls arriving during that period fail. Which container health configuration should the team add?
- Use only a startup probe for process initialization, but keep readiness successful as soon as the HTTP port accepts connections
- Set the liveness probe initial delay to 40 seconds but leave readiness permanently successful
- A readiness probe that reports success only after the application can serve requests
- A liveness probe that immediately kills the process during every initialization
Explanation
Correct Answer
C:Readiness probes communicate whether a running replica is prepared for traffic. Keeping it unready during initialization prevents the ingress controller from forwarding requests prematurely.
Incorrect Answers
A:A startup probe protects slow initialization from premature liveness restarts. If readiness already passes while the model is still loading, that signal alone does not prevent requests from reaching a replica that cannot yet answer them. Readiness must reflect application serving capability.
B:A delayed liveness check can avoid restarting a healthy startup, but it is not a traffic-admission signal. A replica can still receive and fail user requests while liveness is delayed if readiness reports success too early.
D:Liveness tests detect unrecoverable unhealthy processes; an aggressive probe can create restart loops instead of waiting for normal application startup.
Question 536
A Container App has an external ingress endpoint configured with target port 8080, but its container image starts an HTTP server listening only on port 5000. The revision is healthy locally but public requests cannot connect. Which setting must match the actual listening socket?
- Configure the Container App ingress target port to the port on which the application listens
- Increase the maximum replica count without changing either port
- Change only the Dockerfile EXPOSE metadata to 8080 while leaving the running HTTP process on 5000 and Container Apps ingress targetPort at 8080
- Disable external ingress and expect Internet clients to connect directly to the container IP
Explanation
Correct Answer
A:The platform routes requests to the declared target port inside the running revision. A mismatch between ingress configuration and the container's listening socket prevents connections even if the image has started.
Incorrect Answers
B:More replicas repeat the same listener/target mismatch. Horizontal scale cannot make a process listen on an unconfigured port.
C:EXPOSE is image metadata and does not cause the process to listen on 8080. With the application actually bound to 5000, ingress targetPort must target 5000 or the process itself must be reconfigured to listen on 8080.
D:Disabling ingress removes the intended public routing path. It does not expose the container process on the correct port.
Question 537
A Container App revision has a health probe that checks whether the process is still functioning. A deadlocked worker remains running but never responds, and the platform must restart it rather than merely avoid sending traffic to it. Which probe purpose fits this requirement?
- Configure only a startup probe that succeeds once the container initializes, then assume it detects deadlocks later
- Configure a suitable liveness probe against an endpoint that detects the deadlock
- Use only a readiness probe and assume it always restarts the container
- Increase the revision's replica traffic weight so the failed replica is eventually restarted by traffic balancing
Explanation
Correct Answer
B:Liveness probes assess whether a running container should be restarted. Readiness probes primarily control whether it receives traffic, so liveness directly addresses recovery from a stuck process.
Incorrect Answers
A:A startup probe validates initialization and stops running once startup succeeds. It does not monitor a later deadlock; a liveness probe must continuously check whether the process remains healthy.
C:A readiness failure typically removes a container from serving requests; it does not express the same restart-on-unhealthy behavior as liveness.
D:Traffic weighting distributes requests among revisions and does not establish a failed-process restart policy. A liveness failure is the signal to restart an unresponsive container.
Question 538
A queue-processing Container App is configured with a KEDA scale rule that raises replica count with queue backlog. Management requires an upper bound of 20 replicas for cost control, even during a huge queue spike. Which configuration provides that cap?
- Disable the app's managed identity to prevent extra replicas
- Increase minReplicas to 20 and leave maxReplicas unlimited
- Set the Container App scale rule's maximum replicas to the approved ceiling
- Set the queue message time-to-live to 20 seconds and expect a 20-replica cap
Explanation
Correct Answer
C:An event scaler determines desired capacity from incoming metrics, but the app's maximum replica limit bounds how far that demand can scale out. It is separate from the queue trigger and minimum count.
Incorrect Answers
A:Managed identity supports resource authentication and is not the cost ceiling for scaling. Disabling it may break access to the queue rather than bound replicas.
B:A minimum defines a floor, not an upper bound. The app could still scale above the permitted instance count during large backlogs.
D:Message expiration changes workload data behavior, not the number of Container App replicas allowed. It can discard messages while scaling remains uncontrolled.
Question 539
An Azure App Service application has enough memory per worker but experiences increasing concurrent requests. The administrator wants additional worker instances without changing the per-instance CPU and memory SKU. Which capacity operation is most appropriate?
- Scale up the App Service plan
- Scale out the App Service plan
- Enable more worker threads in one App Service process without adding worker instances
- Change the App Service plan to a larger per-instance memory SKU
Explanation
Correct Answer
B:Scaling out adds worker instances to the App Service plan. It increases concurrent serving capacity while preserving the selected instance size, subject to workload and plan limits.
Incorrect Answers
A:Scaling up moves to a larger per-instance plan SKU, which changes worker resources rather than the requested number of similarly sized instances.
C:More threads can change concurrency inside a single worker but do not add the independent App Service plan instances that the capacity requirement specifies.
D:A larger worker can help memory-bound operations but is a scale-up change, not additional workers of the current SKU. That differs from the requested horizontal capacity.
Question 540
An App Service worker repeatedly runs out of RAM on a single request even when overall traffic is low. Increasing the number of parallel workers would not increase the memory available to that individual request. What should the team change?
- Scale out with more identical workers
- Scale up to a plan SKU with more memory per worker
- Increase the App Service plan maximum autoscale instance count but not its worker size
- Enable 64-bit mode without confirming the worker’s memory capacity is sufficient
Explanation
Correct Answer
B:Scaling up selects a larger per-instance capacity profile. This can provide enough RAM for an individual memory-heavy operation, directly addressing the per-worker bottleneck.
Incorrect Answers
A:More workers spread requests across instances but each instance still has the original memory limit. A request that is too large for one worker can continue failing.
C:Autoscale adds parallel instances of the same SKU. A memory-heavy request still runs within one worker and can exhaust its unchanged RAM allocation.
D:The process architecture can alter address-space limits, but does not guarantee the underlying plan has more physical RAM. The case identifies the per-worker memory SKU as insufficient.
Microsoft Azure Administrator (AZ-104) Practice Tests