AZ-200 Azure App Service & Web Apps 2 — Questions and Answers
Question 1: What is the purpose of enabling Always On for an Azure Web App?
- Prevents the app from sleeping when idle (Correct answer)
- Enables 24/7 auto-scaling
- Forces HTTPS redirect
- Keeps deployment slots warm
Correct answer: Prevents the app from sleeping when idle
Always On keeps the app loaded so it does not unload after a period of inactivity, avoiding cold-start delays.
Question 2: Which Azure App Service feature allows you to swap a staging slot to production with zero downtime?
- Blue-green deployment via Traffic Manager
- Slot swap operation (Correct answer)
- Rolling update via Azure DevOps
- GitHub Actions deploy to production
Correct answer: Slot swap operation
The slot swap operation atomically routes traffic from staging to production, enabling zero-downtime deployments with instant rollback capability.
Question 3: What does the ARR Affinity setting control in Azure App Service?
- Application runtime version selection
- Session affinity routing to the same instance (Correct answer)
- Automatic resource reservation
- Application role routing
Correct answer: Session affinity routing to the same instance
ARR Affinity uses a cookie to route a client's requests to the same instance, maintaining session state in multi-instance deployments.
Question 4: Which App Service configuration stores sensitive values that are exposed as environment variables and not visible in the portal after saving?
- Application settings marked as deployment slot settings
- Connection strings
- App settings (Key Vault references) (Correct answer)
- Environment variables set in web.config
Correct answer: App settings (Key Vault references)
Key Vault references in App Service application settings allow sensitive values to be stored securely in Azure Key Vault and referenced without exposing the value.
Question 5: How can you limit network access so that an Azure App Service web app only accepts traffic from an Azure Virtual Network?
- Enable Private Endpoints for the web app (Correct answer)
- Set a firewall rule in the App Service Plan
- Configure VNET Integration only
- Use Application Gateway WAF policy
Correct answer: Enable Private Endpoints for the web app
Private Endpoints assign a private IP from your VNet to the App Service, making it accessible only from within the VNet and blocking public internet access.
Question 6: What is the function of VNet Integration in Azure App Service?
- Allows the web app to receive traffic from a VNet
- Allows the web app to make outbound calls into a VNet (Correct answer)
- Replaces the need for a VPN gateway
- Enables private DNS resolution globally
Correct answer: Allows the web app to make outbound calls into a VNet
VNet Integration enables outbound traffic from the App Service to reach resources inside an Azure Virtual Network, such as private databases.
AZ-200 Azure App Service & Web Apps 2
What is the purpose of enabling Always On for an Azure Web App?