Implement Azure App Service Web Apps AZ-204 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A developer deploys a containerized app to Azure App Service for Containers. The container needs to read a secret from Azure Key Vault. The developer has enabled the system-assigned managed identity and granted it 'Key Vault Secrets User' access. However, the app fails to start because it cannot read the secret. What is the most likely cause?

   • AThe secret name is incorrect in the application settings.
   • BThe container image is not configured to use the managed identity.
   • CThe Key Vault is behind a firewall and does not allow access from the App Service.
   • DThe managed identity is not enabled in the container's startup command.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company hosts a public-facing web app on Azure App Service. Security policy requires that all client traffic use TLS 1.2 or higher. The app currently accepts TLS 1.0 and 1.1. What should the developer do to enforce the policy?

   • AAdd a redirect rule in `web.config` to forward HTTP to HTTPS.
   • BSet the 'Minimum TLS version' to 1.2 in the App Service TLS/SSL settings.
   • CEnable 'HTTPS Only' in the App Service configuration.
   • DUpload a custom SSL certificate and bind it to the app.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   When deploying a containerized app to Azure App Service, which of the following must you provide?

   • AKubernetes configuration file
   • BA Docker Compose file
   • CAn Azure Container Registry instance
   • DDocker image name and registry URL
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has an Azure App Service web app with a custom domain. They have uploaded a custom SSL certificate and bound it to the custom domain. However, when users access the site via the custom domain, they receive a certificate error. The default `*.azurewebsites.net` domain works fine. What is the most likely cause?

   • AThe certificate's subject name does not match the custom domain.
   • BThe certificate is bound to the wrong slot.
   • CThe certificate is not trusted by the client's browser.
   • DThe 'HTTPS Only' setting is disabled.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A team uses deployment slots for a web app. They have a staging slot and a production slot. The staging slot has application settings that are marked as slot settings. During a swap, they expect the staging slot's code to go to production, but they want the production slot to keep its own application settings. What is the correct configuration?

   • AMark the settings that should stay with the production slot as slot settings.
   • BMark all application settings as slot settings.
   • CUse the 'swap with preview' feature to manually move settings.
   • DDo not mark any settings as slot settings.
   Reveal Solution Discussion Select an answer first