Practice Test GeeksAZ-400 Practice Test
← All AZ-400 Flashcard Decks

Container and Microservices Deployment Flashcards

7 cards from real AZ-400 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Container and Microservices Deployment flashcards as text

  1. You need to configure canary deployments in AKS using NGINX Ingress. Which annotation controls the percentage of traffic routed to the canary deployment?

    Answer: nginx.ingress.kubernetes.io/canary-weight

    The canary-weight annotation specifies the integer percentage (0-100) of requests that NGINX Ingress forwards to the canary Ingress resource.

  2. When building Docker images in Azure Pipelines, what is the primary security benefit of using a multi-stage Dockerfile?

    Answer: The final image excludes build tools and intermediate artifacts, reducing attack surface

    Multi-stage builds copy only the compiled artifacts into a minimal final image, excluding compilers, SDKs, and build dependencies that could be exploited.

  3. Your microservices communicate over HTTP within AKS. You need mutual TLS (mTLS) between services without modifying application code. Which solution achieves this?

    Answer: Deploy a service mesh such as Istio or Linkerd with automatic sidecar injection

    Service meshes inject sidecar proxies that handle mTLS transparently, encrypting service-to-service traffic without requiring code changes.

  4. In Azure Container Apps, which scaling rule type allows the platform to scale based on the length of an Azure Service Bus queue?

    Answer: Azure Service Bus scaler (KEDA-based)

    Azure Container Apps uses KEDA under the hood, and the Service Bus scaler triggers scaling based on queue/topic message count or backlog.

  5. You are configuring Pod Disruption Budgets (PDB) for a critical microservice with 5 replicas. Setting minAvailable to 4 means:

    Answer: At least 4 pods must remain running during voluntary disruptions like node drains

    A PDB with minAvailable: 4 prevents voluntary disruptions (drains, evictions) from proceeding if they would leave fewer than 4 healthy pods.

  6. Which Azure DevOps pipeline task is used to run Trivy or similar vulnerability scans on a container image before pushing to ACR?

    Answer: A Bash or script task invoking the scanner CLI after the Docker build step

    Container image scanners like Trivy are invoked via a Bash/script task in the pipeline after building the image but before pushing, failing the pipeline if critical CVEs are found.

  7. A Helm release deployment fails midway. Which command reverts the AKS cluster to the last known good Helm release revision?

    Answer: helm rollback

    helm rollback atomically reverts a named release to a specified previous revision, restoring all managed Kubernetes resources to that state.