Topic 10 Practice Test 1 covers Azure App Service for Microsoft Azure Administrator AZ-104 and maps to the objective: Create and configure Azure App Service. For broader exam preparation, review the Microsoft AZ-104 Exam Dumps. Every option includes focused technical reasoning explaining both the Azure concept and its fit to the scenario.
Question 1
Northwind Traders has reached the memory limit of its current workers and needs larger worker capacity. Which action fits? Choose ONE.
- Scale up the App Service plan to a larger pricing tier
- Scale out the App Service plan to more instances
- Configure autoscale rules for the App Service plan
- Place compatible apps in the same App Service plan
Correct Answer: A
Correct Answer
Answer A is correct because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Northwind Traders must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. The service behavior matches the constraint.
Incorrect Answers
Answer B is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Northwind Traders must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. This does not satisfy that condition.
Answer C is incorrect because Autoscale changes the instance count in response to configured metrics and thresholds, within minimum, maximum, and default capacity settings. Northwind Traders must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. It would leave the requirement unmet.
Answer D is incorrect because Apps in the same App Service plan share the plan worker instances and the plan defines operating system, region, VM size, instance count, and pricing tier. Northwind Traders must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. Its function is different in this case.
Question 2
An Azure administrator at Woodgrove Bank learns that the organization must unlock a higher App Service feature tier without increasing the number of worker instances. What should the administrator do? Choose ONE.
- Scale out the App Service plan to more instances
- Scale up the App Service plan to a larger pricing tier
- Configure autoscale rules for the App Service plan
- Place compatible apps in the same App Service plan
Correct Answer: B
Correct Answer
Answer B is correct because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Woodgrove Bank must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. This meets the stated administration goal.
Incorrect Answers
Answer A is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Woodgrove Bank must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. Its purpose differs from that need.
Answer C is incorrect because Autoscale changes the instance count in response to configured metrics and thresholds, within minimum, maximum, and default capacity settings. Woodgrove Bank must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. That behavior does not fit here.
Answer D is incorrect because Apps in the same App Service plan share the plan worker instances and the plan defines operating system, region, VM size, instance count, and pricing tier. Woodgrove Bank must give an existing App Service plan more CPU, memory, or tier-gated platform features by changing its SKU. The option targets another design goal.
Question 3
Wingtip Toys must add worker instances while keeping the current App Service plan SKU. Which option is appropriate? Choose ONE.
- Scale up the App Service plan to a larger pricing tier
- Configure autoscale rules for the App Service plan
- Scale out the App Service plan to more instances
- Place compatible apps in the same App Service plan
Correct Answer: C
Correct Answer
Answer C is correct because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Wingtip Toys must increase the number of App Service worker instances without changing the worker size. It aligns with the required Azure outcome.
Incorrect Answers
Answer A is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Wingtip Toys must increase the number of App Service worker instances without changing the worker size. Its function is different in this case.
Answer B is incorrect because Autoscale changes the instance count in response to configured metrics and thresholds, within minimum, maximum, and default capacity settings. Wingtip Toys must increase the number of App Service worker instances without changing the worker size. The feature solves a different problem.
Answer D is incorrect because Apps in the same App Service plan share the plan worker instances and the plan defines operating system, region, VM size, instance count, and pricing tier. Wingtip Toys must increase the number of App Service worker instances without changing the worker size. This is not the requested capability.
Question 4
A cloud engineer at Lucerne Publishing is working with an environment that does not want administrators manually changing the worker count throughout the day. Select the correct configuration. Choose ONE.
- Scale out the App Service plan to more instances
- Scale up the App Service plan to a larger pricing tier
- Place compatible apps in the same App Service plan
- Configure autoscale rules for the App Service plan
Correct Answer: D
Correct Answer
Answer D is correct because Autoscale changes the instance count in response to configured metrics and thresholds, within minimum, maximum, and default capacity settings. Lucerne Publishing must change the App Service instance count automatically in response to a monitored workload metric. The option supplies the needed behavior.
Incorrect Answers
Answer A is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Lucerne Publishing must change the App Service instance count automatically in response to a monitored workload metric. The option targets another design goal.
Answer B is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Lucerne Publishing must change the App Service instance count automatically in response to a monitored workload metric. This does not satisfy that condition.
Answer C is incorrect because Apps in the same App Service plan share the plan worker instances and the plan defines operating system, region, VM size, instance count, and pricing tier. Lucerne Publishing must change the App Service instance count automatically in response to a monitored workload metric. It would leave the requirement unmet.
Question 5
In Northwind Traders’s Azure environment, the organization must test a new application build with production-like settings before a controlled cutover. What is required? Choose ONE.
- Deploy the new version to a staging deployment slot and swap it into production
- Scale up the App Service plan to a larger pricing tier
- Configure App Service backup and a backup schedule
- Route a small percentage of production traffic to the staging slot
Correct Answer: A
Correct Answer
Answer A is correct because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Northwind Traders must validate a new App Service release in an isolated warm environment before making it the production version. This is the precise operational fit.
Incorrect Answers
Answer B is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Northwind Traders must validate a new App Service release in an isolated warm environment before making it the production version. This is not the requested capability.
Answer C is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Northwind Traders must validate a new App Service release in an isolated warm environment before making it the production version. Its purpose differs from that need.
Answer D is incorrect because App Service traffic routing can send a controlled percentage of client traffic to a nonproduction slot for gradual validation before a full swap. Northwind Traders must validate a new App Service release in an isolated warm environment before making it the production version. That behavior does not fit here.
Question 6
At Woodgrove Bank, the organization is replacing in-place deployment with a staged release workflow that can be validated before activation. What should be configured? Choose ONE.
- Scale up the App Service plan to a larger pricing tier
- Deploy the new version to a staging deployment slot and swap it into production
- Configure App Service backup and a backup schedule
- Route a small percentage of production traffic to the staging slot
Correct Answer: B
Correct Answer
Answer B is correct because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Woodgrove Bank must validate a new App Service release in an isolated warm environment before making it the production version. That capability fits the scenario directly.
Incorrect Answers
Answer A is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Woodgrove Bank must validate a new App Service release in an isolated warm environment before making it the production version. It would leave the requirement unmet.
Answer C is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Woodgrove Bank must validate a new App Service release in an isolated warm environment before making it the production version. Its function is different in this case.
Answer D is incorrect because App Service traffic routing can send a controlled percentage of client traffic to a nonproduction slot for gradual validation before a full swap. Woodgrove Bank must validate a new App Service release in an isolated warm environment before making it the production version. The feature solves a different problem.
Question 7
Wingtip Toys is troubleshooting a staging swap where the app content should move but the production secret reference must remain tied to production. Choose the best change. Choose TWO.
- Mark the environment-specific app setting as a deployment slot setting
- Leave the app setting as a normal swappable setting
- Configure App Service backup and a backup schedule
- Deploy the new version to a staging deployment slot and swap it into production
- Scale out the App Service plan to more instances
Correct Answers: A, D
Correct Answers
Answer A is correct because A deployment slot setting stays with its slot during a swap, which is appropriate for environment-specific values that must not move between staging and production. Wingtip Toys must keep the production-only configuration value in production while using a staging slot for the release. It therefore matches the requested outcome.
Answer D is correct because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Wingtip Toys must keep the production-only configuration value in production while using a staging slot for the release. The option supplies the needed behavior.
Incorrect Answers
Answer B is incorrect because Normal app settings generally move with application content during a slot swap unless they are explicitly configured to stick to a slot. Wingtip Toys must keep the production-only configuration value in production while using a staging slot for the release. The option targets another design goal.
Answer C is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Wingtip Toys must keep the production-only configuration value in production while using a staging slot for the release. This does not satisfy that condition.
Answer E is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Wingtip Toys must keep the production-only configuration value in production while using a staging slot for the release. It would leave the requirement unmet.
Question 8
An Azure administrator at Lucerne Publishing learns that the organization controls a delegated DNS zone and needs a conventional record for mapping a non-apex custom host name. What should the administrator do? Choose ONE.
- Create the required asuid TXT record for domain ownership validation
- Create an App Service managed certificate and bind it to the custom hostname
- Enable HTTPS Only and configure an appropriate minimum TLS version
- Create a CNAME record from the subdomain to the app hostname
Correct Answer: D
Correct Answer
Answer D is correct because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Lucerne Publishing must map a custom subdomain such as app.contoso.com to the App Service default hostname. It is the strongest fit here.
Incorrect Answers
Answer A is incorrect because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Lucerne Publishing must map a custom subdomain such as app.contoso.com to the App Service default hostname. The feature solves a different problem.
Answer B is incorrect because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Lucerne Publishing must map a custom subdomain such as app.contoso.com to the App Service default hostname. This is not the requested capability.
Answer C is incorrect because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Lucerne Publishing must map a custom subdomain such as app.contoso.com to the App Service default hostname. Its purpose differs from that need.
Question 9
Northwind Traders is adding a custom hostname and App Service requires a DNS ownership check before accepting the mapping. Which option is appropriate? Choose ONE.
- Create the required asuid TXT record for domain ownership validation
- Create a CNAME record from the subdomain to the app hostname
- Create an App Service managed certificate and bind it to the custom hostname
- Enable HTTPS Only and configure an appropriate minimum TLS version
Correct Answer: A
Correct Answer
Answer A is correct because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Northwind Traders must prove ownership of the custom domain to App Service using the asuid validation record. The service behavior matches the constraint.
Incorrect Answers
Answer B is incorrect because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Northwind Traders must prove ownership of the custom domain to App Service using the asuid validation record. This does not satisfy that condition.
Answer C is incorrect because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Northwind Traders must prove ownership of the custom domain to App Service using the asuid validation record. It would leave the requirement unmet.
Answer D is incorrect because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Northwind Traders must prove ownership of the custom domain to App Service using the asuid validation record. Its function is different in this case.
Question 10
Woodgrove Bank is automating custom-hostname onboarding and must create the validation record expected by App Service. Which Azure feature fits? Choose ONE.
- Create a CNAME record from the subdomain to the app hostname
- Create the required asuid TXT record for domain ownership validation
- Create an App Service managed certificate and bind it to the custom hostname
- Enable HTTPS Only and configure an appropriate minimum TLS version
Correct Answer: B
Correct Answer
Answer B is correct because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Woodgrove Bank must prove ownership of the custom domain to App Service using the asuid validation record. This meets the stated administration goal.
Incorrect Answers
Answer A is incorrect because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Woodgrove Bank must prove ownership of the custom domain to App Service using the asuid validation record. Its purpose differs from that need.
Answer C is incorrect because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Woodgrove Bank must prove ownership of the custom domain to App Service using the asuid validation record. That behavior does not fit here.
Answer D is incorrect because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Woodgrove Bank must prove ownership of the custom domain to App Service using the asuid validation record. The option targets another design goal.
Question 11
Wingtip Toys is removing a manually renewed public certificate from a supported custom hostname. Which action fits? Choose ONE.
- Enable HTTPS Only and configure an appropriate minimum TLS version
- Create the required asuid TXT record for domain ownership validation
- Create an App Service managed certificate and bind it to the custom hostname
- Create a CNAME record from the subdomain to the app hostname
Correct Answer: C
Correct Answer
Answer C is correct because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Wingtip Toys must enable TLS on a supported App Service custom hostname without operating an external certificate renewal process. It aligns with the required Azure outcome.
Incorrect Answers
Answer A is incorrect because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Wingtip Toys must enable TLS on a supported App Service custom hostname without operating an external certificate renewal process. Its function is different in this case.
Answer B is incorrect because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Wingtip Toys must enable TLS on a supported App Service custom hostname without operating an external certificate renewal process. The feature solves a different problem.
Answer D is incorrect because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Wingtip Toys must enable TLS on a supported App Service custom hostname without operating an external certificate renewal process. This is not the requested capability.
Question 12
At Lucerne Publishing, the organization is hardening the web endpoint after a security review found HTTP access still available. What should be configured? Choose ONE.
- Create an App Service managed certificate and bind it to the custom hostname
- Create a CNAME record from the subdomain to the app hostname
- Create the required asuid TXT record for domain ownership validation
- Enable HTTPS Only and configure an appropriate minimum TLS version
Correct Answer: D
Correct Answer
Answer D is correct because HTTPS Only redirects HTTP requests to HTTPS, while the minimum TLS setting controls the oldest TLS protocol version accepted by the app endpoint. Lucerne Publishing must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. The option supplies the needed behavior.
Incorrect Answers
Answer A is incorrect because App Service can issue and manage a certificate for supported custom domains, reducing certificate renewal administration while enabling TLS on that hostname. Lucerne Publishing must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. The option targets another design goal.
Answer B is incorrect because For a subdomain, a CNAME can map the custom name to the App Service default hostname while App Service validates and binds the custom domain. Lucerne Publishing must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. This does not satisfy that condition.
Answer C is incorrect because The asuid TXT record is used by App Service to validate ownership of a custom domain and helps protect the mapping against domain takeover scenarios. Lucerne Publishing must force clients to use HTTPS and prevent negotiation of older TLS protocol versions below the configured minimum. It would leave the requirement unmet.
Question 13
Northwind Traders must connect from application code to a private database endpoint in a virtual network. Choose the best change. Choose ONE.
- Configure App Service virtual network integration
- Create an App Service private endpoint and configure private DNS
- Configure App Service access restrictions for the public endpoint
- Use a private endpoint and disable public network access
Correct Answer: A
Correct Answer
Answer A is correct because App Service virtual network integration provides outbound access from the app into resources reachable through an Azure virtual network; it does not make the app inbound endpoint private by itself. Northwind Traders must give the App Service application outbound access to resources reachable through an Azure virtual network. This is the precise operational fit.
Incorrect Answers
Answer B is incorrect because An App Service private endpoint provides inbound connectivity through a private IP in the virtual network; DNS must resolve the app hostname to that private endpoint address. Northwind Traders must give the App Service application outbound access to resources reachable through an Azure virtual network. This is not the requested capability.
Answer C is incorrect because App Service access restrictions control inbound requests to the public app endpoint using ordered allow and deny rules based on network sources and related criteria. Northwind Traders must give the App Service application outbound access to resources reachable through an Azure virtual network. Its purpose differs from that need.
Answer D is incorrect because A private endpoint can coexist with public access; disabling public network access is the additional step that makes private connectivity the only supported inbound path. Northwind Traders must give the App Service application outbound access to resources reachable through an Azure virtual network. That behavior does not fit here.
Question 14
A cloud engineer at Woodgrove Bank is working with an environment that needs the application egress path integrated with a virtual network while preserving the normal public app endpoint. Select the correct configuration. Choose ONE.
- Create an App Service private endpoint and configure private DNS
- Configure App Service virtual network integration
- Configure App Service access restrictions for the public endpoint
- Use a private endpoint and disable public network access
Correct Answer: B
Correct Answer
Answer B is correct because App Service virtual network integration provides outbound access from the app into resources reachable through an Azure virtual network; it does not make the app inbound endpoint private by itself. Woodgrove Bank must give the App Service application outbound access to resources reachable through an Azure virtual network. That capability fits the scenario directly.
Incorrect Answers
Answer A is incorrect because An App Service private endpoint provides inbound connectivity through a private IP in the virtual network; DNS must resolve the app hostname to that private endpoint address. Woodgrove Bank must give the App Service application outbound access to resources reachable through an Azure virtual network. It would leave the requirement unmet.
Answer C is incorrect because App Service access restrictions control inbound requests to the public app endpoint using ordered allow and deny rules based on network sources and related criteria. Woodgrove Bank must give the App Service application outbound access to resources reachable through an Azure virtual network. Its function is different in this case.
Answer D is incorrect because A private endpoint can coexist with public access; disabling public network access is the additional step that makes private connectivity the only supported inbound path. Woodgrove Bank must give the App Service application outbound access to resources reachable through an Azure virtual network. The feature solves a different problem.
Question 15
In Wingtip Toys’s Azure environment, the organization is designing Private Link inbound access to the App Service app while keeping the application FQDN usable. What is required? Choose ONE.
- Configure App Service virtual network integration
- Configure App Service access restrictions for the public endpoint
- Create an App Service private endpoint and configure private DNS
- Use a private endpoint and disable public network access
Correct Answer: C
Correct Answer
Answer C is correct because An App Service private endpoint provides inbound connectivity through a private IP in the virtual network; DNS must resolve the app hostname to that private endpoint address. Wingtip Toys must provide inbound App Service access through a private IP address in a virtual network and resolve the app hostname privately. It therefore matches the requested outcome.
Incorrect Answers
Answer A is incorrect because App Service virtual network integration provides outbound access from the app into resources reachable through an Azure virtual network; it does not make the app inbound endpoint private by itself. Wingtip Toys must provide inbound App Service access through a private IP address in a virtual network and resolve the app hostname privately. That behavior does not fit here.
Answer B is incorrect because App Service access restrictions control inbound requests to the public app endpoint using ordered allow and deny rules based on network sources and related criteria. Wingtip Toys must provide inbound App Service access through a private IP address in a virtual network and resolve the app hostname privately. The option targets another design goal.
Answer D is incorrect because A private endpoint can coexist with public access; disabling public network access is the additional step that makes private connectivity the only supported inbound path. Wingtip Toys must provide inbound App Service access through a private IP address in a virtual network and resolve the app hostname privately. This does not satisfy that condition.
Question 16
Lucerne Publishing must schedule backups to a storage account and retain recovery points according to policy. Which Azure feature fits? Choose ONE.
- Restore the App Service app from a selected backup
- Deploy the new version to a staging deployment slot and swap it into production
- Scale up the App Service plan to a larger pricing tier
- Configure App Service backup and a backup schedule
Correct Answer: D
Correct Answer
Answer D is correct because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Lucerne Publishing must capture App Service content and supported configuration on a recurring schedule for later recovery. It is the strongest fit here.
Incorrect Answers
Answer A is incorrect because Restoring from an App Service backup returns supported backed-up content and configuration to the chosen app or slot according to the restore operation. Lucerne Publishing must capture App Service content and supported configuration on a recurring schedule for later recovery. The feature solves a different problem.
Answer B is incorrect because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Lucerne Publishing must capture App Service content and supported configuration on a recurring schedule for later recovery. This is not the requested capability.
Answer C is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Lucerne Publishing must capture App Service content and supported configuration on a recurring schedule for later recovery. Its purpose differs from that need.
Question 17
Northwind Traders has a valid backup from before a bad deployment and needs to recover the app state. Which action fits? Choose ONE.
- Restore the App Service app from a selected backup
- Configure App Service backup and a backup schedule
- Deploy the new version to a staging deployment slot and swap it into production
- Scale up the App Service plan to a larger pricing tier
Correct Answer: A
Correct Answer
Answer A is correct because Restoring from an App Service backup returns supported backed-up content and configuration to the chosen app or slot according to the restore operation. Northwind Traders must recover the App Service application from a previously created App Service backup. The service behavior matches the constraint.
Incorrect Answers
Answer B is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Northwind Traders must recover the App Service application from a previously created App Service backup. This does not satisfy that condition.
Answer C is incorrect because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Northwind Traders must recover the App Service application from a previously created App Service backup. It would leave the requirement unmet.
Answer D is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Northwind Traders must recover the App Service application from a previously created App Service backup. Its function is different in this case.
Question 18
An Azure administrator at Woodgrove Bank learns that the organization has confirmed the backup set is intact and now needs the recovery operation rather than creating another backup. What should the administrator do? Choose ONE.
- Configure App Service backup and a backup schedule
- Restore the App Service app from a selected backup
- Deploy the new version to a staging deployment slot and swap it into production
- Scale up the App Service plan to a larger pricing tier
Correct Answer: B
Correct Answer
Answer B is correct because Restoring from an App Service backup returns supported backed-up content and configuration to the chosen app or slot according to the restore operation. Woodgrove Bank must recover the App Service application from a previously created App Service backup. This meets the stated administration goal.
Incorrect Answers
Answer A is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Woodgrove Bank must recover the App Service application from a previously created App Service backup. Its purpose differs from that need.
Answer C is incorrect because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Woodgrove Bank must recover the App Service application from a previously created App Service backup. That behavior does not fit here.
Answer D is incorrect because Scaling up changes the App Service plan SKU to provide more CPU, memory, storage, or tier-gated features such as deployment slots, backups, and autoscaling. Woodgrove Bank must recover the App Service application from a previously created App Service backup. The option targets another design goal.
Question 19
Wingtip Toys is troubleshooting why a client is blocked by App Service networking before the request reaches application code. Which option is appropriate? Choose ONE.
- Create an App Service private endpoint and configure private DNS
- Configure App Service virtual network integration
- Configure App Service access restrictions for the public endpoint
- Use a private endpoint and disable public network access
Correct Answer: C
Correct Answer
Answer C is correct because App Service access restrictions control inbound requests to the public app endpoint using ordered allow and deny rules based on network sources and related criteria. Wingtip Toys must restrict requests arriving at the App Service public endpoint according to ordered network-source rules. It aligns with the required Azure outcome.
Incorrect Answers
Answer A is incorrect because An App Service private endpoint provides inbound connectivity through a private IP in the virtual network; DNS must resolve the app hostname to that private endpoint address. Wingtip Toys must restrict requests arriving at the App Service public endpoint according to ordered network-source rules. Its function is different in this case.
Answer B is incorrect because App Service virtual network integration provides outbound access from the app into resources reachable through an Azure virtual network; it does not make the app inbound endpoint private by itself. Wingtip Toys must restrict requests arriving at the App Service public endpoint according to ordered network-source rules. The feature solves a different problem.
Answer D is incorrect because A private endpoint can coexist with public access; disabling public network access is the additional step that makes private connectivity the only supported inbound path. Wingtip Toys must restrict requests arriving at the App Service public endpoint according to ordered network-source rules. This is not the requested capability.
Question 20
A cloud engineer at Lucerne Publishing is working with an environment that needs gradual exposure of a staging slot without immediately swapping all traffic. Select the correct configuration. Choose ONE.
- Deploy the new version to a staging deployment slot and swap it into production
- Scale out the App Service plan to more instances
- Configure App Service backup and a backup schedule
- Route a small percentage of production traffic to the staging slot
Correct Answer: D
Correct Answer
Answer D is correct because App Service traffic routing can send a controlled percentage of client traffic to a nonproduction slot for gradual validation before a full swap. Lucerne Publishing must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. The option supplies the needed behavior.
Incorrect Answers
Answer A is incorrect because Deployment slots let an App Service app warm and validate a new version separately before swapping the selected slot with production. Lucerne Publishing must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. The option targets another design goal.
Answer B is incorrect because Scaling out increases the number of worker instances in the App Service plan so application load can be distributed horizontally. Lucerne Publishing must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. This does not satisfy that condition.
Answer C is incorrect because App Service backup captures supported app content and configuration to a storage account according to the configured schedule and retention settings, enabling later restore. Lucerne Publishing must send only a small controlled percentage of production client traffic to a nonproduction deployment slot. It would leave the requirement unmet.
