Microsoft Certified: Azure Developer Associate practice questions

Question 1

A platform team is rolling out an HTTP-triggered Azure Function whose executions occasionally run longer than the functionTimeout value set in host.json, and an SRE is being asked what the runtime does when a single execution exceeds that duration. Per the Azure Functions scale and hosting documentation, which option matches?

Accepted Answer

The execution stops with a timeout error and the language worker process restarts, ending the call.

Answer

The execution is checkpointed and automatically resumed on a new worker until it eventually completes.

Answer

The execution is moved to a lower-priority queue and retried later at a reduced billing rate.

Answer

The execution keeps running past the limit while the plan scales out to add more compute instances.

Question 2

An organization is designing a public-facing product in Azure API Management, and a developer needs some products to be callable without a subscription key (open) while others stay protected. Which configuration determines whether a subscription key is required to call a product's APIs?

Accepted Answer

The Requires subscription option, which makes the product protected when set and open when it is left off

Answer

The product State setting toggles between protected and open access for the product's published APIs

Answer

The Consumption tier setting removes the subscription-key requirement across every product in the instance

Answer

The developer portal visibility setting decides whether a subscription key must accompany API calls

Question 3

A production team is rolling out a Blob Storage lifecycle policy and a sysadmin needs to set expectations for when newly edited rules actually begin acting on data. Per the lifecycle management overview, what should the team expect after they add or edit the policy rules?

Accepted Answer

It can take up to 24 hours for the changes to take effect and for the first policy execution to start

Answer

Tier transitions begin within roughly five minutes, and editing a rule immediately cancels any in-progress run

Answer

Rules act only on blobs created after the policy is saved, so older existing blobs are excluded for good

Answer

Each rule must be triggered manually per blob before any transition or deletion action will run for it

Question 4

An engineer is designing the rollout, and a senior backend developer is being asked which secret material types Azure Key Vault stores on behalf of Azure applications and users. Per the Key Vault overview, which option matches?

Accepted Answer

Azure Key Vault enables Microsoft Azure applications and users to store and use several types of secret and key data: keys, secrets, and certificates.

Answer

Azure Key Vault is limited to storing only application connection strings and does not support cryptographic keys or certificates.

Answer

Azure Key Vault is exclusively a hardware HSM front-end that stores only symmetric encryption keys and rejects both secrets and certificates.

Answer

Azure Key Vault stores only X.509 certificates and does not support keys or arbitrary secrets such as API tokens.

Question 5

A platform team is rolling out instrumentation for a SaaS API tier and the tech lead must explain what Azure Monitor Application Insights actually is. Per the App Insights overview, which option matches?

Accepted Answer

Azure Monitor Application Insights is an application performance monitoring (APM) feature of Azure Monitor.

Answer

Azure Monitor Application Insights is a self-contained log shipping daemon that runs only on the customer's on-premises servers and is unrelated to Azure Monitor.

Answer

Azure Monitor Application Insights is a Microsoft Entra ID role that is granted to APM administrators and is not a feature of Azure Monitor.

Answer

Azure Monitor Application Insights is an Azure DevOps work-item template used for tracking outages and is not an application performance monitoring feature.

Question 6

A developer is deploying an Azure Functions app and finds that new triggers are not recognized after deploying from an external package URL, so the team must know which deployment options require triggers to be synced manually. Per the Azure Functions deployment technologies documentation, which option matches?

Accepted Answer

Triggers must be synced manually when deploying via external package URL, Local Git, or FTPS.

Answer

Triggers must be synced manually when deploying via zip deploy, Azure Pipelines, or Actions.

Answer

Triggers must be synced manually when deploying via ARM templates, Bicep, or the Azure CLI.

Answer

Triggers must be synced manually when deploying via container images, Terraform, or the REST API.

Question 7

A platform team is rolling out this design, and a senior backend developer is being asked what API Management does when an API consumer sends an HTTP request without a valid subscription key. Per the API Management subscriptions documentation, which option matches?

Accepted Answer

Without a valid subscription key, the calls are: Rejected immediately by the API Management gateway. Not forwarded to the back-end services.

Answer

API Management caches the request for up to one hour and forwards it to the back end once a subscription key becomes available for the consumer.

Answer

API Management forwards every request to the back-end services regardless of whether the consumer provided a valid subscription key and applies key validation only at the back end.

Answer

Without a valid subscription key, API Management converts the request into an anonymous public call and always forwards it to the back end with elevated privileges.

Question 8

An engineer is designing the rollout, and a tech lead is being asked what unit Cosmos DB uses to normalize the cost of database operations across queries, reads, and writes. Per the request units documentation, which option matches?

Accepted Answer

Azure Cosmos DB normalizes the cost of all database operations using Request Units (or RUs, for short) and measures cost based on throughput (Request Units per second, RU/s).

Answer

Azure Cosmos DB uses no normalized cost unit; each operation is billed differently based on the SDK language used by the developer.

Answer

Azure Cosmos DB normalizes the cost of database operations using CPU cores per second and bills based on kernel-time milliseconds rather than Request Units.

Answer

Azure Cosmos DB normalizes operations using a fixed dollar cost per call regardless of payload size or throughput at the container level.

Question 9

A platform team is being asked what managed identities for Azure resources actually provide for an Azure service and how authentication to other Azure services is delivered. Per the supported services list, which option matches?

Accepted Answer

Managed identities for Azure resources provide an automatically managed identity in Microsoft Entra ID, enabling secure, credential-free authentication to Azure services.

Answer

Managed identities for Azure resources are still in preview in every Azure region and are not yet documented as supporting any Azure service.

Answer

Managed identities for Azure resources require a customer-managed certificate in Key Vault and do not deliver any credential-free authentication path.

Answer

Managed identities for Azure resources are a feature exclusively for on-premises Active Directory and cannot authenticate to Azure services.

Question 10

A team runs a read-heavy product catalog API whose backing database is far too large to load entirely into memory, so they want Azure Cache for Redis to populate entries only when they are first requested and refresh them when the underlying data changes. Which caching approach matches this requirement?

Accepted Answer

The cache-aside pattern, which loads data into the cache only as it is requested

Answer

Content caching, which stores templated static page fragments such as headers and footers

Answer

Write-behind caching, where writes hit the cache first and flush to the database later

Answer

Read-through caching, where the cache provider itself fetches and refreshes every record

Question 11

A company is migrating workloads into Azure, and an integrations engineer is being asked what a repository inside an Azure container registry actually contains and how images are grouped within it. Per the Azure Container Registry documentation, which option matches?

Accepted Answer

A repository is a collection of container images or other artifacts in a registry that have the same name, but different tags.

Answer

A repository in a container registry is a per-region geo-replica of the registry itself and never holds individual images or artifacts in its own right.

Answer

A repository in a container registry is the same concept as a Git source-code repository and exists primarily to store Dockerfile source rather than built container images.

Answer

A repository in a container registry must contain only one image per tag namespace and cannot share a name across more than a single image artifact.

Question 12

A platform team is rolling out an Event Grid push-delivery pipeline that fans events out to an Azure Storage Queue handler, and a developer needs to understand the delivery guarantee for that handler type. Until what point does Event Grid retry delivery to a Storage Queue handler?

Accepted Answer

Until the Queue service successfully processes the message push into the target Storage Queue

Answer

Until the Storage Queue handler returns an HTTP 200 OK acknowledging the event over the push channel

Answer

Until the configured dead-letter Storage Queue rejects the event after the retry window elapses

Answer

Until the event's time-to-live expires, after which the message is silently dropped from the queue

Question 13

An engineer is designing a cold-archive path for years-old compliance records that are almost never read, and is evaluating the Archive access tier before committing the data. Per the access tiers documentation, what must the engineer account for when an archived blob eventually needs to be read?

Accepted Answer

The blob must first be rehydrated to an online tier, a process that can take up to roughly 15 hours

Answer

Archived blobs are served instantly at hot-tier latency as soon as a read request reaches the account

Answer

Archived blobs can be read in place after a 30-day minimum, so no rehydration step is ever required

Answer

Archived blob data and metadata both become unreadable until the storage account is failed over

Question 14

An organization is designing this rollout, so a senior backend developer is being asked which three Shared Access Signature types Azure Storage actually supports for delegating limited access. Per the SAS overview, which option matches?

Accepted Answer

Azure Storage supports three types of shared access signatures: User delegation SAS, Service SAS, Account SAS.

Answer

Azure Storage supports only a single Universal SAS that combines user delegation, service, and account scopes without distinguishing between them.

Answer

Azure Storage supports only Service SAS and Account SAS; User delegation SAS is not a documented SAS type.

Answer

Azure Storage supports two SAS types: Anonymous SAS and Managed Identity SAS, and rejects any other named SAS variant.

Question 15

An architect is evaluating the configuration, and a tech lead is being asked whether OpenTelemetry sampling is on by default in the Application Insights OpenTelemetry distros or whether it must be explicitly enabled. Per the sampling documentation, which option matches?

Accepted Answer

Sampling is not enabled by default in Application Insights OpenTelemetry distros. You must explicitly enable and configure sampling to manage your telemetry volume.

Answer

Sampling in Application Insights is mandatory and there is no documented option to enable or disable it; the platform decides on the developer's behalf.

Answer

Sampling is enabled by default in Application Insights OpenTelemetry distros at a fixed 5% rate and cannot be turned off or reconfigured.

Answer

Application Insights OpenTelemetry distros do not support sampling at all and the developer must drop telemetry at the application code level instead.

Microsoft Certified: Azure Developer Associate

Sample questions

Sources

Similar exams