Community Q&A

AZ-204 — frequently asked questions

Community-vetted answers to 35 common questions about this exam, each traced back to a specific practice question.

Questions from real practice questions

Each Q&A comes from a specific question — follow the link for the full analysis

How to Deploy Azure Container Apps Updates Without Downtime?

Why isn't multiple revision mode the correct answer for zero downtime?

Multiple revision mode enables traffic splitting and canary testing, but single revision mode is the documented Azure Container Apps zero-downtime deployment mechanism.

Does external HTTP ingress change which revision mode I should choose?

No. With ingress enabled, single revision mode keeps the existing revision serving 100% of traffic until the new revision is ready, which is exactly the zero-downtime behavior required.

Can Enabling Ingress and a Custom Scale Rule Fix Container App Access?

Why does enabling ingress alone fix the scaled-to-zero Container App?

With ingress enabled, the app receives HTTP traffic and can scale from zero automatically when a request arrives, so it becomes accessible without a custom scale rule.

Is a custom scale rule required when ingress is enabled?

No, but it doesn't hurt; a custom scale rule can be used with or without ingress, but enabling ingress is the key fix for accessibility.

Does enabling ingress with minReplicas 1 fix Container Apps scale-to-zero?

Why does a Container App scale to zero when ingress is disabled?

With ingress disabled and no minReplicas or custom scale rule defined, Container Apps has no HTTP traffic trigger and defaults to zero replicas, leaving no way for the app to start back up.

Why not just set minReplicas to 1 without enabling ingress?

A running instance alone is not enough — users still need the ingress endpoint to reach the app, so the outage would persist for external callers.

Which Files Fit the Cosmos DB for NoSQL 2 MB Item Limit?

Does the Cosmos DB for NoSQL 2 MB limit apply per document or to the whole upload batch?

It applies per item (per document), measured as UTF-8 JSON length. Stored-procedure and transactional batch requests are also capped at 2 MB, but that does not reduce the size allowed for a single document.

Why do some learners answer File1 only for this 413 error?

They treat 2 MB as a shared budget for the whole batch, so File1 plus File2 would exceed it. Because the cap is per document, File2 is valid on its own and option E is too restrictive.

Could these larger files be stored in Cosmos DB for MongoDB instead?

Yes. Cosmos DB for MongoDB supports documents up to 16 MB, which is one reason the NoSQL API's 2 MB per-item limit surprises candidates who have only used the MongoDB API.

Which Cosmos DB consistency level avoids out-of-order writes in multi-region reads?

Why isn't bounded staleness the best choice for multi-region Cosmos DB reads?

Bounded staleness also prevents out-of-order reads, but it adds a staleness window that is stronger than the question requires. Consistent prefix meets the only stated ordering guarantee while maximizing read concurrency.

Does session consistency prevent out-of-order reads across all Azure regions?

No. Session consistency guarantees ordering and read-your-writes only within a single client session, so clients in other sessions or regions are not covered by that ordering guarantee.

How to share a Cosmos DB session token between App1 nodes?

Why is FeedOptions not the answer for App1's reads and writes?

FeedOptions is used for queries (e.g., CreateDocumentQuery) and also exposes SessionToken, but App1 requires point reads and writes, which use RequestOptions.

Can ConnectionPolicy be used to share a Cosmos DB session token?

No. ConnectionPolicy configures connection mode, retry, and timeout settings; it has no SessionToken property for session consistency.

How Should Munson's Secure Its Corporate Website in Azure?

Why is Azure CDN not sufficient to secure the corporate website?

CDN provides HTTPS and geo-filtering but lacks a Web Application Firewall, which is needed to meet the security requirements and protect against common exploits.

How does Application Gateway WAF restrict content by country/region?

WAF supports geo-match custom rules that allow or block traffic based on the source country/region, satisfying the compliance requirement.

How Do You Increase Read Cache in Azure Cache for Redis?

Why isn't volatile-lru the right Maxmemory policy change for redis1?

Azure Cache for Redis Standard tier already defaults to volatile-lru, so selecting it changes nothing on the instance. The extra read cache must come from lowering the maxmemory-reserved reservation instead.

What happens if maxmemory-reserved is decreased too far?

You free memory for cached data, but the reservation also covers non-cache work such as replication during failover. Setting it too low risks instability, so lower it gradually and monitor evictions and latency.

How Do You Mitigate Azure Cache for Redis Maintenance Performance Issues?

Why is raising maxmemory-reserved and maxfragmentationmemory-reserved wrong here?

Those settings reserve memory for non-cache operations and fragmentation; they do not reduce the connection spike and server load caused when a Redis node fails over during maintenance.

Why does rebooting the app help after Azure Cache for Redis maintenance?

A failover moves all client connections onto the surviving node and server load spikes; recreating the connections redistributes them across both nodes.

How to Reduce Application Insights Telemetry Volume While Preserving Correlation?

Why is fixed-rate sampling chosen over adaptive sampling for throttled telemetry?

Fixed-rate sampling sets an explicit SampleRate so the volume reduction is predictable and statistically consistent, and it synchronizes client and server sampling so related page views and HTTP requests still correlate.

Why doesn't a daily cap on the Log Analytics workspace solve the problem?

A daily cap simply stops telemetry ingestion once the limit is reached, so data is lost instead of sampled, costs are not truly reduced, and no client-server correlation is preserved.

Azure Event Grid Domain vs Custom Topic for Scaling

Why is an Event Domain better than a custom topic for this scenario?

Event Domains support up to 100,000 topics and provide a single publishing endpoint, making them ideal for managing thousands of customers efficiently.

Can I use Event Subscriptions for filtering with Event Domains?

Yes, you can create event subscriptions on domain topics to filter events by type before processing, meeting the filtering requirement.

Event Grid Custom Topic for Thousands of Customers: Does It Meet the Goal?

Why do per-customer event subscriptions fail on an Event Grid custom topic?

A custom topic supports a maximum of 500 event subscriptions, so thousands of customers would exceed that quota.

What is the recommended Event Grid alternative for thousands of customers?

Event Grid domains allow up to 100,000 topics with per-customer subscriptions and filtering, making them the documented multi-tenant pattern.

Which HTTP Header Enables Microsoft Graph Evolvable Enumerations?

Why does the Accept header not enable unknown members in a Microsoft Graph GET?

Accept only negotiates the response media type, such as application/json. It signals nothing about evolvable enumeration members, so the service will still omit enum values your app was not built for.

When should I use If-Match instead of Prefer in a Microsoft Graph request?

If-Match carries an ETag for optimistic concurrency, protecting against lost updates on writes. Prefer expresses an optional behavior such as include-unknown-enum-members on reads.

Which Application Insights API aggregates distributor API telemetry?

Why does TrackMetric support aggregation better than TrackEvent for distributor API calls?

TrackMetric accepts pre-aggregated metric telemetry with min, max, and standard deviation, while TrackEvent logs each occurrence as a separate custom event, increasing volume and cost.

How does pre-aggregated metric telemetry reduce Application Insights data and storage costs?

You combine many measurements into a single telemetry item before sending, so fewer items are ingested and stored while statistical analysis remains valid.

How Do You Filter Classic Availability Tests in Application Insights?

Why not filter on $_.Type -eq "ping" to find classic availability tests?

The web test objects returned by Get-AzApplicationInsightsWebTest express the test generation through WebTestKind, not Type, so a Type filter matches nothing and the classic tests are never removed.

What is the difference between WebTestKind "ping" and "standard"?

"ping" identifies legacy classic URL ping tests, while "standard" identifies the newer standard availability tests that support more validation features and are the migration target.

Do Azure Monitor Workbooks Trigger Function1 From appinsights1 Alerts?

Why doesn't an Azure Monitor Insights workbook make Function1 run?

A workbook only queries and renders Application Insights data. It has no alert-action binding, so the appinsights1 alert still sends email without invoking the function.

What should I configure so each WebApp1 alert calls Function1?

Add an action group to the alert rule and include a Function (HTTP trigger) action targeting Function1's endpoint; the alert payload is then POSTed to the function.

How Do Failed App Insights Availability Tests Email Subscription Owners?

Why isn't an action group alone enough to email the subscription owners?

An action group only defines who is contacted and how; it needs an alert rule as the trigger. Without a rule watching AI1's failed availability results, nothing ever fires and no email is sent.

Do standard availability tests email owners without an alert rule?

The failing App1 test results by themselves notify no one. Azure Monitor delivers the owner email through the alert rule configured over those AI1 availability results.