Microsoft Azure Administrator AZ-104 Azure App Service Practice Test 3
Topic 10 Practice Test 3 covers Azure App Service for Microsoft Azure Administrator AZ-104 and maps to the objective: Create and configure Azure App Service. For broader exam preparation, review the Microsoft AZ-104 Exam Dumps. Every option includes focused technical reasoning explaining both the Azure concept and its fit to the scenario.
Question 1
Tailspin Toys has enough instances but each worker is CPU constrained and must move to a larger compute size. Choose the best change. Choose ONE.
- Scale up the App Service plan to a larger pricing tier
- Scale out the App Service plan to more instances
- Configure autoscale rules for the App Service plan
- Place compatible apps in the same App Service plan
Correct Answer: A
Correct Answer
Answer A is correct because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Tailspin Toys must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. The service behavior matches the constraint.
Incorrect Answers
Answer B is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Tailspin Toys must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. This does not satisfy that condition.
Answer C is incorrect because Autoscale changes the instance count in response to configured metrics and thresholds, within minimum, maximum, and default capacity settings. Tailspin Toys must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. It would leave the requirement unmet.
Answer D is incorrect because Apps in the same App Service plan share the plan worker instances and the plan defines operating system, region, VM size, instance count, and pricing tier. Tailspin Toys must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. Its function is different in this case.
Question 2
An Azure administrator at Litware learns that the organization has adequate per-instance CPU and memory but requires additional concurrent capacity. What should the administrator do? Choose ONE.
- Scale up the App Service plan to a larger pricing tier
- Scale out the App Service plan to more instances
- Configure autoscale rules for the App Service plan
- Place compatible apps in the same App Service plan
Correct Answer: B
Correct Answer
Answer B is correct because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Litware must increase the number of App Service worker instances without changing the worker size. This meets the stated administration goal.
Incorrect Answers
Answer A is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Litware must increase the number of App Service worker instances without changing the worker size. Its purpose differs from that need.
Answer C is incorrect because Autoscale changes the instance count in response to configured metrics and thresholds, within minimum, maximum, and default capacity settings. Litware must increase the number of App Service worker instances without changing the worker size. That behavior does not fit here.
Answer D is incorrect because Apps in the same App Service plan share the plan worker instances and the plan defines operating system, region, VM size, instance count, and pricing tier. Litware must increase the number of App Service worker instances without changing the worker size. The option targets another design goal.
Question 3
Fourth Coffee has predictable traffic spikes and wants instance count to adjust automatically when CPU crosses a threshold. Which option is appropriate? Choose ONE.
- Scale out the App Service plan to more instances
- Scale up the App Service plan to a larger pricing tier
- Configure autoscale rules for the App Service plan
- Place compatible apps in the same App Service plan
Correct Answer: C
Correct Answer
Answer C is correct because Autoscale changes the instance count in response to configured metrics and thresholds, within minimum, maximum, and default capacity settings. Fourth Coffee must change the App Service instance count automatically in response to a monitored workload metric. It aligns with the required Azure outcome.
Incorrect Answers
Answer A is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Fourth Coffee must change the App Service instance count automatically in response to a monitored workload metric. Its function is different in this case.
Answer B is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Fourth Coffee must change the App Service instance count automatically in response to a monitored workload metric. The feature solves a different problem.
Answer D is incorrect because Apps in the same App Service plan share the plan worker instances and the plan defines operating system, region, VM size, instance count, and pricing tier. Fourth Coffee must change the App Service instance count automatically in response to a monitored workload metric. This is not the requested capability.
Question 4
Fabrikam needs metric-driven horizontal scaling rather than a one-time manual scale-out. Which Azure feature fits? Choose ONE.
- Scale out the App Service plan to more instances
- Scale up the App Service plan to a larger pricing tier
- Place compatible apps in the same App Service plan
- Configure autoscale rules for the App Service plan
Correct Answer: D
Correct Answer
Answer D is correct because Autoscale changes the instance count in response to configured metrics and thresholds, within minimum, maximum, and default capacity settings. Fabrikam must change the App Service instance count automatically in response to a monitored workload metric. The option supplies the needed behavior.
Incorrect Answers
Answer A is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Fabrikam must change the App Service instance count automatically in response to a monitored workload metric. The option targets another design goal.
Answer B is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Fabrikam must change the App Service instance count automatically in response to a monitored workload metric. This does not satisfy that condition.
Answer C is incorrect because Apps in the same App Service plan share the plan worker instances and the plan defines operating system, region, VM size, instance count, and pricing tier. Fabrikam must change the App Service instance count automatically in response to a monitored workload metric. It would leave the requirement unmet.
Question 5
Tailspin Toys needs a rollback-friendly release process where the previous production content remains in the other slot after cutover. Which action fits? Choose ONE.
- Deploy the new version to a staging deployment slot and swap it into production
- Scale up the App Service plan to a larger pricing tier
- Configure App Service backup and a backup schedule
- Route a small percentage of production traffic to the staging slot
Correct Answer: A
Correct Answer
Answer A is correct because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Tailspin Toys must validate a new App Service release in an isolated warm environment before making it the production version. This is the precise operational fit.
Incorrect Answers
Answer B is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Tailspin Toys must validate a new App Service release in an isolated warm environment before making it the production version. This is not the requested capability.
Answer C is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Tailspin Toys must validate a new App Service release in an isolated warm environment before making it the production version. Its purpose differs from that need.
Answer D is incorrect because App Service traffic routing can send a controlled percentage of client traffic to a nonproduction slot for gradual validation before a full swap. Tailspin Toys must validate a new App Service release in an isolated warm environment before making it the production version. That behavior does not fit here.
Question 6
At Litware, the organization uses different API endpoints in staging and production and wants a slot-based release without exchanging those environment-specific values. What should be configured? Choose TWO.
- Leave the app setting as a normal swappable setting
- Mark the environment-specific app setting as a deployment slot setting
- Configure App Service backup and a backup schedule
- Deploy the new version to a staging deployment slot and swap it into production
- Scale out the App Service plan to more instances
Correct Answers: B, D
Correct Answers
Answer B is correct because A deployment slot setting stays with its slot during a swap, which is appropriate for environment-specific values that must not move between staging and production. Litware must keep the production-only configuration value in production while using a staging slot for the release. That capability fits the scenario directly.
Answer D is correct because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Litware must keep the production-only configuration value in production while using a staging slot for the release. It aligns with the required Azure outcome.
Incorrect Answers
Answer A is incorrect because Normal app settings generally move with application content during a slot swap unless they are explicitly configured to stick to a slot. Litware must keep the production-only configuration value in production while using a staging slot for the release. Its function is different in this case.
Answer C is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Litware must keep the production-only configuration value in production while using a staging slot for the release. The feature solves a different problem.
Answer E is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Litware must keep the production-only configuration value in production while using a staging slot for the release. This is not the requested capability.
Question 7
Fourth Coffee is adding a friendly subdomain for a web app and wants DNS to alias that name to the Azure app hostname. Choose the best change. Choose ONE.
- Create the required asuid TXT record for domain ownership validation
- Create an App Service managed certificate and bind it to the custom hostname
- Create a CNAME record from the subdomain to the app hostname
- Enable HTTPS Only and configure an appropriate minimum TLS version
Correct Answer: C
Correct Answer
Answer C is correct because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Fourth Coffee must map a custom subdomain such as app.contoso.com to the App Service default hostname. It therefore matches the requested outcome.
Incorrect Answers
Answer A is incorrect because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Fourth Coffee must map a custom subdomain such as app.contoso.com to the App Service default hostname. That behavior does not fit here.
Answer B is incorrect because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Fourth Coffee must map a custom subdomain such as app.contoso.com to the App Service default hostname. The option targets another design goal.
Answer D is incorrect because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Fourth Coffee must map a custom subdomain such as app.contoso.com to the App Service default hostname. This does not satisfy that condition.
Question 8
A cloud engineer at Fabrikam is working with an environment that has completed domain ownership validation and now needs the subdomain to resolve through the App Service hostname. Select the correct configuration. Choose ONE.
- Create the required asuid TXT record for domain ownership validation
- Create an App Service managed certificate and bind it to the custom hostname
- Enable HTTPS Only and configure an appropriate minimum TLS version
- Create a CNAME record from the subdomain to the app hostname
Correct Answer: D
Correct Answer
Answer D is correct because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Fabrikam must map a custom subdomain such as app.contoso.com to the App Service default hostname. It is the strongest fit here.
Incorrect Answers
Answer A is incorrect because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Fabrikam must map a custom subdomain such as app.contoso.com to the App Service default hostname. The feature solves a different problem.
Answer B is incorrect because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Fabrikam must map a custom subdomain such as app.contoso.com to the App Service default hostname. This is not the requested capability.
Answer C is incorrect because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Fabrikam must map a custom subdomain such as app.contoso.com to the App Service default hostname. Its purpose differs from that need.
Question 9
In Tailspin Toys’s Azure environment, the organization has the traffic record in DNS but domain validation is still incomplete because the ownership record is missing. What is required? Choose ONE.
- Create the required asuid TXT record for domain ownership validation
- Create a CNAME record from the subdomain to the app hostname
- Create an App Service managed certificate and bind it to the custom hostname
- Enable HTTPS Only and configure an appropriate minimum TLS version
Correct Answer: A
Correct Answer
Answer A is correct because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Tailspin Toys must prove ownership of the custom domain to App Service using the asuid validation record. The service behavior matches the constraint.
Incorrect Answers
Answer B is incorrect because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Tailspin Toys must prove ownership of the custom domain to App Service using the asuid validation record. This does not satisfy that condition.
Answer C is incorrect because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Tailspin Toys must prove ownership of the custom domain to App Service using the asuid validation record. It would leave the requirement unmet.
Answer D is incorrect because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Tailspin Toys must prove ownership of the custom domain to App Service using the asuid validation record. Its function is different in this case.
Question 10
Litware wants Azure App Service to issue and renew the certificate for an eligible custom domain. Which Azure feature fits? Choose ONE.
- Enable HTTPS Only and configure an appropriate minimum TLS version
- Create an App Service managed certificate and bind it to the custom hostname
- Create the required asuid TXT record for domain ownership validation
- Create a CNAME record from the subdomain to the app hostname
Correct Answer: B
Correct Answer
Answer B is correct because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Litware must enable TLS on a supported App Service custom hostname without operating an external certificate renewal process. This meets the stated administration goal.
Incorrect Answers
Answer A is incorrect because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Litware must enable TLS on a supported App Service custom hostname without operating an external certificate renewal process. Its purpose differs from that need.
Answer C is incorrect because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Litware must enable TLS on a supported App Service custom hostname without operating an external certificate renewal process. That behavior does not fit here.
Answer D is incorrect because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Litware must enable TLS on a supported App Service custom hostname without operating an external certificate renewal process. The option targets another design goal.
Question 11
Fourth Coffee must redirect plain HTTP requests and enforce a stronger minimum transport protocol for the app. Which action fits? Choose ONE.
- Create an App Service managed certificate and bind it to the custom hostname
- Create a CNAME record from the subdomain to the app hostname
- Enable HTTPS Only and configure an appropriate minimum TLS version
- Create the required asuid TXT record for domain ownership validation
Correct Answer: C
Correct Answer
Answer C is correct because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Fourth Coffee must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. It aligns with the required Azure outcome.
Incorrect Answers
Answer A is incorrect because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Fourth Coffee must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. Its function is different in this case.
Answer B is incorrect because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Fourth Coffee must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. The feature solves a different problem.
Answer D is incorrect because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Fourth Coffee must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. This is not the requested capability.
Question 12
An Azure administrator at Fabrikam learns that the organization has a valid certificate but still needs platform settings that enforce encrypted client connections. What should the administrator do? Choose ONE.
- Create an App Service managed certificate and bind it to the custom hostname
- Create a CNAME record from the subdomain to the app hostname
- Create the required asuid TXT record for domain ownership validation
- Enable HTTPS Only and configure an appropriate minimum TLS version
Correct Answer: D
Correct Answer
Answer D is correct because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Fabrikam must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. The option supplies the needed behavior.
Incorrect Answers
Answer A is incorrect because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Fabrikam must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. The option targets another design goal.
Answer B is incorrect because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Fabrikam must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. This does not satisfy that condition.
Answer C is incorrect because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Fabrikam must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. It would leave the requirement unmet.
Question 13
Tailspin Toys is troubleshooting why an App Service app cannot reach a private address that is reachable from a delegated integration subnet. Which option is appropriate? Choose ONE.
- Configure App Service virtual network integration
- Create an App Service private endpoint and configure private DNS
- Configure App Service access restrictions for the public endpoint
- Use a private endpoint and disable public network access
Correct Answer: A
Correct Answer
Answer A is correct because App Service virtual network integration provides outbound access from the app into resources reachable through an Azure virtual network; it does not make the app inbound endpoint private by itself. Tailspin Toys must give the App Service application outbound access to resources reachable through an Azure virtual network. This is the precise operational fit.
Incorrect Answers
Answer B is incorrect because An App Service private endpoint provides inbound connectivity through a private IP in the virtual network; DNS must resolve the app hostname to that private endpoint address. Tailspin Toys must give the App Service application outbound access to resources reachable through an Azure virtual network. This is not the requested capability.
Answer C is incorrect because App Service access restrictions control inbound requests to the public app endpoint using ordered allow and deny rules based on network sources and related criteria. Tailspin Toys must give the App Service application outbound access to resources reachable through an Azure virtual network. Its purpose differs from that need.
Answer D is incorrect because A private endpoint can coexist with public access; disabling public network access is the additional step that makes private connectivity the only supported inbound path. Tailspin Toys must give the App Service application outbound access to resources reachable through an Azure virtual network. That behavior does not fit here.
Question 14
A cloud engineer at Litware is working with an environment that needs the app hostname to resolve to an address from a private endpoint subnet for internal consumers. Select the correct configuration. Choose ONE.
- Configure App Service virtual network integration
- Create an App Service private endpoint and configure private DNS
- Configure App Service access restrictions for the public endpoint
- Use a private endpoint and disable public network access
Correct Answer: B
Correct Answer
Answer B is correct because An App Service private endpoint provides inbound connectivity through a private IP in the virtual network; DNS must resolve the app hostname to that private endpoint address. Litware must provide inbound App Service access through a private IP address in a virtual network and resolve the app hostname privately. That capability fits the scenario directly.
Incorrect Answers
Answer A is incorrect because App Service virtual network integration provides outbound access from the app into resources reachable through an Azure virtual network; it does not make the app inbound endpoint private by itself. Litware must provide inbound App Service access through a private IP address in a virtual network and resolve the app hostname privately. It would leave the requirement unmet.
Answer C is incorrect because App Service access restrictions control inbound requests to the public app endpoint using ordered allow and deny rules based on network sources and related criteria. Litware must provide inbound App Service access through a private IP address in a virtual network and resolve the app hostname privately. Its function is different in this case.
Answer D is incorrect because A private endpoint can coexist with public access; disabling public network access is the additional step that makes private connectivity the only supported inbound path. Litware must provide inbound App Service access through a private IP address in a virtual network and resolve the app hostname privately. The feature solves a different problem.
Question 15
In Fourth Coffee’s Azure environment, the organization has a recovery requirement to retain periodic restorable copies of the web application. What is required? Choose ONE.
- Restore the App Service app from a selected backup
- Deploy the new version to a staging deployment slot and swap it into production
- Configure App Service backup and a backup schedule
- Scale up the App Service plan to a larger pricing tier
Correct Answer: C
Correct Answer
Answer C is correct because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Fourth Coffee must capture App Service content and supported configuration on a recurring schedule for later recovery. It therefore matches the requested outcome.
Incorrect Answers
Answer A is incorrect because Restoring from an App Service backup returns supported backed-up content and configuration to the chosen app or slot according to the restore operation. Fourth Coffee must capture App Service content and supported configuration on a recurring schedule for later recovery. That behavior does not fit here.
Answer B is incorrect because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Fourth Coffee must capture App Service content and supported configuration on a recurring schedule for later recovery. The option targets another design goal.
Answer D is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Fourth Coffee must capture App Service content and supported configuration on a recurring schedule for later recovery. This does not satisfy that condition.
Question 16
At Fabrikam, the organization needs a supported backup set that can later be selected for an App Service restore operation. What should be configured? Choose ONE.
- Restore the App Service app from a selected backup
- Deploy the new version to a staging deployment slot and swap it into production
- Scale up the App Service plan to a larger pricing tier
- Configure App Service backup and a backup schedule
Correct Answer: D
Correct Answer
Answer D is correct because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Fabrikam must capture App Service content and supported configuration on a recurring schedule for later recovery. It is the strongest fit here.
Incorrect Answers
Answer A is incorrect because Restoring from an App Service backup returns supported backed-up content and configuration to the chosen app or slot according to the restore operation. Fabrikam must capture App Service content and supported configuration on a recurring schedule for later recovery. The feature solves a different problem.
Answer B is incorrect because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Fabrikam must capture App Service content and supported configuration on a recurring schedule for later recovery. This is not the requested capability.
Answer C is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Fabrikam must capture App Service content and supported configuration on a recurring schedule for later recovery. Its purpose differs from that need.
Question 17
Tailspin Toys is testing disaster recovery by applying an existing App Service backup to a target app or slot. Choose the best change. Choose ONE.
- Restore the App Service app from a selected backup
- Configure App Service backup and a backup schedule
- Deploy the new version to a staging deployment slot and swap it into production
- Scale up the App Service plan to a larger pricing tier
Correct Answer: A
Correct Answer
Answer A is correct because Restoring from an App Service backup returns supported backed-up content and configuration to the chosen app or slot according to the restore operation. Tailspin Toys must recover the App Service application from a previously created App Service backup. The service behavior matches the constraint.
Incorrect Answers
Answer B is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Tailspin Toys must recover the App Service application from a previously created App Service backup. This does not satisfy that condition.
Answer C is incorrect because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Tailspin Toys must recover the App Service application from a previously created App Service backup. It would leave the requirement unmet.
Answer D is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Tailspin Toys must recover the App Service application from a previously created App Service backup. Its function is different in this case.
Question 18
An Azure administrator at Litware learns that the organization wants inbound public access controlled by source-based allow and deny rules without moving the app to a private endpoint. What should the administrator do? Choose ONE.
- Create an App Service private endpoint and configure private DNS
- Configure App Service access restrictions for the public endpoint
- Configure App Service virtual network integration
- Use a private endpoint and disable public network access
Correct Answer: B
Correct Answer
Answer B is correct because App Service access restrictions control inbound requests to the public app endpoint using ordered allow and deny rules based on network sources and related criteria. Litware must restrict requests arriving at the App Service public endpoint according to ordered network-source rules. This meets the stated administration goal.
Incorrect Answers
Answer A is incorrect because An App Service private endpoint provides inbound connectivity through a private IP in the virtual network; DNS must resolve the app hostname to that private endpoint address. Litware must restrict requests arriving at the App Service public endpoint according to ordered network-source rules. Its purpose differs from that need.
Answer C is incorrect because App Service virtual network integration provides outbound access from the app into resources reachable through an Azure virtual network; it does not make the app inbound endpoint private by itself. Litware must restrict requests arriving at the App Service public endpoint according to ordered network-source rules. That behavior does not fit here.
Answer D is incorrect because A private endpoint can coexist with public access; disabling public network access is the additional step that makes private connectivity the only supported inbound path. Litware must restrict requests arriving at the App Service public endpoint according to ordered network-source rules. The option targets another design goal.
Question 19
Fourth Coffee wants to canary a new build with a limited real-user audience before a full release. Which option is appropriate? Choose ONE.
- Deploy the new version to a staging deployment slot and swap it into production
- Scale out the App Service plan to more instances
- Route a small percentage of production traffic to the staging slot
- Configure App Service backup and a backup schedule
Correct Answer: C
Correct Answer
Answer C is correct because App Service traffic routing can send a controlled percentage of client traffic to a nonproduction slot for gradual validation before a full swap. Fourth Coffee must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. It aligns with the required Azure outcome.
Incorrect Answers
Answer A is incorrect because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Fourth Coffee must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. Its function is different in this case.
Answer B is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Fourth Coffee must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. The feature solves a different problem.
Answer D is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Fourth Coffee must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. This is not the requested capability.
Question 20
Fabrikam must compare two slot versions with a controlled traffic allocation before deciding on a full cutover. Which Azure feature fits? Choose ONE.
- Deploy the new version to a staging deployment slot and swap it into production
- Scale out the App Service plan to more instances
- Configure App Service backup and a backup schedule
- Route a small percentage of production traffic to the staging slot
Correct Answer: D
Correct Answer
Answer D is correct because App Service traffic routing can send a controlled percentage of client traffic to a nonproduction slot for gradual validation before a full swap. Fabrikam must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. The option supplies the needed behavior.
Incorrect Answers
Answer A is incorrect because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Fabrikam must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. The option targets another design goal.
Answer B is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Fabrikam must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. This does not satisfy that condition.
Answer C is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Fabrikam must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. It would leave the requirement unmet.
