Practice questions · IT & Cloud
Azure Developer Associate (AZ-204): Practice Questions
Original concept-check questions for the AZ-204 (Azure Developer Associate). They test the practical knowledge the exam assumes - compute, storage, security, integration and monitoring on Azure - with every answer explained, including why the others are wrong. Filter by skill area or difficulty. These are concept checks, not real exam questions.
Answered 0 · Correct 0
-
Azure Functions are best described as:
Correct answer: C. Azure Functions is an event-driven, serverless compute service that runs code in response to triggers. A container registry stores container images, a virtual network gateway connects networks, and a managed relational database is Azure SQL - none run serverless code. -
What starts an Azure Function running?
Correct answer: C. A trigger (HTTP, timer, queue message and so on) starts a Function. A binding passes data in or out; the other two are storage/Cosmos concepts. -
An input or output binding in Azure Functions is used to:
Correct answer: A. Bindings declaratively connect a Function to services for data in/out. The other options describe identity, networking and Key Vault. -
A deployment slot in Azure App Service lets you:
Correct answer: B. Slots provide staging environments you can swap into production with no downtime. The others are Key Vault, CDN and Cosmos concepts. -
Which service runs a single container quickly without orchestration?
Correct answer: C. Azure Container Instances runs a single container without an orchestrator. AKS orchestrates clusters; the others are not single-container container hosts. -
You need serverless containers with microservices features like revisions and scaling to zero. The best fit is:
Correct answer: C. Container Apps offers serverless microservices features (revisions, scale to zero). ACI is simpler single containers; a VM is not serverless; Blob storage is unrelated. -
Azure Functions on the Consumption plan scale by:
Correct answer: C. The Consumption plan scales automatically with demand and can scale to zero when idle. The other options describe non-serverless behaviour. -
Azure Event Grid is designed primarily for:
Correct answer: D. Event Grid routes discrete events (like 'file uploaded') to handlers. High-throughput streams are Event Hubs; the others are storage and CDN. -
For ingesting millions of telemetry events per second as a stream, use:
Correct answer: B. Event Hubs is built for high-throughput event streaming. Event Grid handles discrete events; Queue Storage is simple decoupling; Key Vault stores secrets. -
Azure Service Bus is best suited to:
Correct answer: B. Service Bus provides enterprise messaging (queues and topics) for reliable decoupling. The others are CDN, storage and identity. -
The main difference between Service Bus topics and queues is:
Correct answer: A. Topics support publish/subscribe, delivering a copy to multiple subscriptions, while a queue delivers each message to a single competing consumer. Topics do store messages, queues do not require Cosmos DB, and queues are not inherently faster than topics - those claims are false. -
Azure API Management is used to:
Correct answer: A. Azure API Management publishes, secures and throttles APIs behind a gateway. Storing binary blobs is Blob storage, running background jobs is done by Functions or WebJobs, and replicating databases across regions is a data-platform feature - none front and manage APIs. -
A rate-limiting policy in API Management primarily helps you:
Correct answer: A. Rate limiting throttles callers to protect backends. The others are encryption, Cosmos and App Service concepts. -
Azure Cosmos DB is:
Correct answer: B. Cosmos DB is a globally distributed NoSQL database with tunable consistency. The others describe SQL, Blob storage and queues. -
In Cosmos DB, the partition key mainly affects:
Correct answer: A. A good partition key spreads data and load evenly, which is critical to performance and scale. The portal's colour and the exam pass mark have nothing to do with it, and Key Vault is not required to choose a partition key. -
Choosing the 'strong' consistency level in Cosmos DB, versus 'eventual', generally means:
Correct answer: B. Strong consistency guarantees reads always return the most recent write, at the cost of higher latency. 'Lower latency and higher availability' actually describes eventual consistency; strong still replicates data; and it does not make storage cheaper - those options are false. -
Azure Blob storage is best for:
Correct answer: C. Blob storage holds unstructured object data. The others describe compute, Event Grid and identity. -
Moving rarely accessed blobs to the 'archive' access tier primarily:
Correct answer: B. The archive tier lowers storage cost but increases retrieval time (data must be rehydrated first). It does not convert blobs into Cosmos documents, does not speed up instant access (it is the slowest tier), and does not encrypt the data twice. -
A Shared Access Signature (SAS) token lets you:
Correct answer: A. A SAS token grants time-limited, scoped access to storage without sharing the account key. It does not define a Function trigger (that starts a Function), does not create an availability zone (a datacenter location), and does not replace Microsoft Entra (identity). -
Azure Key Vault is used to:
Correct answer: A. Key Vault securely stores secrets, keys and certificates. The other options describe App Service, Event Hubs and CDN. -
A Managed Identity is valuable because it lets an app:
Correct answer: A. A Managed Identity removes the need to store secrets in code; Azure manages the identity. It does not skip auth or bypass governance. -
The cleanest way for an Azure web app to read a secret from Key Vault is to:
Correct answer: B. A Managed Identity with access to the vault avoids storing any credential. The other options are insecure. -
Microsoft Entra primarily provides:
Correct answer: A. Microsoft Entra (formerly Azure AD) provides identity and access management for users and apps. A CDN caches content at the edge, object storage is Blob storage, and container orchestration is AKS - none handle identity. -
In OAuth 2.0 / OpenID Connect on Azure, an access token is:
Correct answer: D. An access token is a short-lived credential an app presents to call a protected API. It is not a Cosmos consistency level (a read guarantee), not a storage tier (blob cost setting), and not a permanent password - access tokens expire by design. -
Storing a database connection string as a secret in Key Vault, rather than in app settings in plain text, mainly improves:
Correct answer: A. Key Vault centralises and protects secrets, improving security. It does not change latency, weighting or throughput. -
Application Insights is used to:
Correct answer: C. Application Insights collects telemetry for performance monitoring and diagnostics. The others are Key Vault, networking and Functions. -
Adding Azure Cache for Redis in front of a database typically:
Correct answer: B. An in-memory cache like Azure Cache for Redis reduces latency by serving frequently accessed data from memory. It does not increase latency, does not replace durable storage (it is a cache, not the source of truth), and does not encrypt the database. -
A Content Delivery Network (CDN) improves performance by:
Correct answer: D. A CDN improves performance by caching content at edge locations close to users, cutting latency. It does not encrypt traffic twice, does not make the database run faster, and adding more Functions is unrelated to content delivery. -
To diagnose why a deployed API is intermittently slow, the most useful AZ-204 tool is:
Correct answer: B. Application Insights surfaces request, dependency and performance telemetry to find bottlenecks. The other options do not diagnose performance. -
Distributed tracing across services in Application Insights helps you:
Correct answer: C. Distributed tracing correlates a single request as it flows through multiple components, so you can locate where it fails or slows. Storing binary files is Blob storage, scheduling a CronJob is a job-scheduling task, and defining RBAC roles is access control - none trace requests.
Practice questions FAQ
- Are these real AZ-204 exam questions?
- No. These are original study questions written to test understanding. They are not real exam questions, exam dumps, or copied from any provider.
- How should I use these practice questions?
- Answer each one, read the explanation (including why the wrong options are wrong), and use the per-domain score below to focus your revision on weak areas. Revisit before exam day.
- How many questions should I do before the exam?
- Enough to score consistently across every domain, alongside full-length practice from official or reputable providers. Understanding why each answer is right matters more than raw volume.
- What score means I am ready?
- A good signal is consistently scoring around 80% or higher across all domains on questions you have not seen before, and being able to explain why the wrong options are wrong.
- Should I use exam dumps?
- No. Dumps (real or leaked questions) breach provider policy, can void your certification, and do not build the understanding the exam actually tests.