Exam AZ-201: Microsoft Azure Developer Advanced Solutions Practice Test
AZ-201 practice concerns advanced Azure application development: selecting managed compute, connecting application components, handling asynchronous work, and protecting data and credentials. The available practice questions use scenarios involving App Service, Azure Functions, containers, Cosmos DB, private access to Storage, messaging, and Microsoft Entra ID token validation. These examples emphasize choosing an Azure service or configuration to meet a stated application requirement.
Exam overview
About the Exam AZ-201: Microsoft Azure Developer Advanced Solutions Exam
Application design decisions in the question bank include choosing event-driven or scheduled execution, scaling HTTP workloads, and moving CPU-intensive tasks out of request handling. Data and integration scenarios call for selecting a Cosmos DB partition key to support query patterns, using private endpoints for network-restricted Storage access, and preserving message order within a customer-specific group. Security questions focus on centralized secret and certificate management, controlled access to credentials, and validating JWTs issued by Microsoft Entra ID. When working through these scenarios, identify the operational constraint first—such as scale-to-zero, private connectivity, ordered processing, or avoiding plaintext secrets—then compare the Azure services and features that address it. This reflects practical design work in which compute, data, networking, identity, and messaging choices must fit the application’s behavior.
Sample Practice Questions
Review a selection from this exam's published US Practice Tests practice bank.
An Azure App Service application needs to store a database password without placing it in application settings as plain text. Which approach best supports centralized secret management and controlled access?
Show answer
Correct answer: AAzure Key Vault is designed to protect and manage secrets. A managed identity lets the application authenticate to Key Vault without maintaining a separate credential in code or configuration.
A containerized application needs to run as a managed, event-driven workload that can scale to zero when idle. Which Azure service is a suitable fit?
Show answer
Correct answer: AAzure Container Apps is a managed platform for containerized applications and supports event-driven scaling, including scaling to zero in appropriate configurations.
An Azure Function must run on a fixed schedule, such as every weekday at 02:00 UTC, rather than in response to an incoming message. Which trigger is designed for this?
Show answer
Correct answer: BThe timer trigger invokes an Azure Function according to a schedule, commonly expressed as a CRON-style schedule. The other triggers respond to requests or incoming data.
A web application needs to handle short periods of much higher HTTP traffic without requiring the team to provision and manage virtual machines. Which Azure compute option is designed to scale web applications with managed infrastructure?
Show answer
Correct answer: BAzure App Service is a managed platform for hosting web applications and APIs, with scaling options that reduce infrastructure management. Virtual Machines require the team to manage the operating system and more of the underlying infrastructure.
A Cosmos DB container has a high request rate for a workload whose queries almost always filter by tenant ID. What partition-key choice is generally most appropriate?
Show answer
Correct answer: AA suitable partition key should support the access pattern and distribute storage and request load. A constant key creates a hot partition, while an unrelated or query-random key can make operations inefficient or impractical.
An Azure-hosted application must access an Azure Storage account over a private IP address from a virtual network. Which configuration most directly provides private connectivity to the storage service?
Show answer
Correct answer: AA private endpoint maps a service to a private IP address in a virtual network, allowing supported traffic to reach the service over private connectivity. An access key concerns authorization, not network path.
A web application needs to perform CPU-intensive work without delaying HTTP responses. The work can be submitted to a separate process and completed asynchronously. Which design is most appropriate?
Show answer
Correct answer: BMoving long-running work to a background worker keeps request handling responsive and lets the work be processed independently. The application can return an acknowledgment or status reference while processing continues.
How to use this practice test
Access the free AZ-201 practice bank for a session of up to 20 randomly selected questions. Work through each scenario by matching its requirement to an Azure service or design feature, then use the results shown after the session to identify decisions that need further review.
Preparation tips
- Compare App Service, Azure Functions, and container-based options against requirements for managed web scaling, scheduled execution, event-driven processing, and scale-to-zero behavior.
- For Cosmos DB scenarios, trace the stated query filters and access pattern before choosing a partition key; consider how the key affects data distribution and request routing.
- Distinguish private endpoints from other network controls, and map the requirement for a private IP path to the relevant virtual network and Storage configuration.
- Practice separating synchronous HTTP handling from CPU-intensive work, then identify how messaging can support asynchronous processing and ordered changes within a customer group.
- Review secure application access patterns: managed secrets and certificates, controlled access to keys, and JWT validation for issuer, audience, signature, and lifetime.