IT Certifications · AZ-202

Exam AZ-202: Microsoft Azure Developer Certification Transition Practice Test

AZ-202 practice questions explore Azure application development and resource configuration. The question bank samples tasks involving secure access to Blob Storage, Azure resource inventory, SQL backup retention, authorization, event routing, secrets management, content delivery, and custom domains. These scenarios connect Azure service selection with common developer decisions about application data, access, and delivery.

Exam overview

Exam providerMicrosoft
Exam codeAZ-202
CategoryIT Certifications

About the Exam AZ-202: Microsoft Azure Developer Certification Transition Exam

The available scenarios call for distinguishing services by the job they perform. A shared access signature can provide time-limited access to a blob without exposing an account key, while role-based access control (RBAC) assigns narrowly scoped permissions to identities. Resource Graph supports querying Azure resource inventory; Event Grid routes events to subscribers; and Key Vault manages secrets and certificates. Other decisions involve choosing Azure SQL Database for relational transactions, configuring long-term backup retention, and using a content delivery network to cache static assets near users. Custom-domain questions involve the DNS and application-side configuration needed to direct traffic correctly. Practicing these distinctions helps developers map application requirements—such as least privilege, retention, event handling, and low-latency delivery—to suitable Azure capabilities.

Sample Practice Questions

Review a selection from this exam's published US Practice Tests practice bank.

Question 1

A service stores user-uploaded files in Azure Blob Storage. The application should grant a user temporary, limited access to download one blob without sharing the storage account key. What should it issue?

  1. AA shared access signature scoped to the blob with read permission and an expiration
  2. BThe storage account access key in a query parameter
  3. CA permanent public access setting for the entire storage account
  4. DA database connection string with blob read permissions
Show answerCorrect answer: A

A shared access signature can grant delegated, time-limited permissions to a specific resource. Restricting its scope and permissions, and setting an appropriate expiry, reduces exposure compared with sharing an account key or making data public.

Question 2

A developer wants to run a query against Azure Resource Manager resources using a query language across a subscription. Which service is intended for this inventory and exploration task?

  1. AAzure Resource Graph
  2. BAzure SignalR Service
  3. CAzure Backup
  4. DAzure Batch
Show answerCorrect answer: A

Azure Resource Graph supports querying resource metadata across Azure environments, making it useful for inventory and large-scale exploration. The other services support real-time messaging, backups, or batch computing.

Question 3

An application must retain database backups for several years to meet a retention requirement. Which Azure SQL Database capability is designed to support long-term backup retention?

  1. ALong-term retention (LTR)
  2. BQuery Store
  3. CPrivate endpoint
  4. DAutomatic tuning
Show answerCorrect answer: A

Azure SQL Database long-term retention lets an organization retain full backups for extended periods, potentially for years, according to configured retention policies.

Question 4

A developer needs to grant an application access to a specific Azure resource while limiting permissions to only the actions it needs. Which Azure authorization mechanism should be configured?

  1. ARole-based access control (RBAC)
  2. BA DNS CNAME record
  3. CA storage lifecycle policy
  4. DA virtual network peering connection
Show answerCorrect answer: A

Azure RBAC assigns roles to identities at a chosen scope, such as a resource or resource group. Selecting a least-privilege role limits the permissions granted to the application.

Question 5

A developer needs to determine which Azure role assignments grant a user permissions on a resource. Where should the developer inspect this access configuration?

  1. AThe resource's Azure role assignments (IAM)
  2. BThe resource's deployment history
  3. CThe resource's diagnostic settings
  4. DThe resource's availability zones
Show answerCorrect answer: A

Azure role assignments associate security principals with roles at a scope, determining authorized actions. Deployment history, diagnostic settings, and availability zones address different concerns.

Question 6

An application must serve static images globally with low latency and cache them close to users. Which Azure service is intended to provide this content-delivery capability?

  1. AAzure Content Delivery Network
  2. BAzure Key Vault
  3. CAzure Database Migration Service
  4. DAzure Policy
Show answerCorrect answer: A

Azure Content Delivery Network caches content at distributed edge locations to improve delivery latency for users. The other services manage secrets, database migrations, and resource governance.

Question 7

A team wants to receive notifications when selected Azure resource events occur, such as a resource being created or deleted, and route those events to handlers. Which service is designed for this event-routing pattern?

  1. AAzure Event Grid
  2. BAzure Files
  3. CAzure Load Testing
  4. DAzure Virtual Desktop
Show answerCorrect answer: A

Azure Event Grid routes events from Azure services and other sources to subscribed handlers, making it suitable for event-driven reactions to resource changes. The other services provide file shares, load testing, and hosted desktops.

How to use this practice test

Access the free AZ-202 practice set to answer up to 20 randomly selected questions from the 50-question bank in a session. After submitting, review the results to identify which Azure service distinctions or configuration decisions need further attention.

Preparation tips

  • Compare shared access signatures with storage account keys, focusing on scope, expiry, and how each controls blob access.
  • Practice tracing RBAC role assignments at different Azure scopes and identifying the least-privilege choice for an application identity.
  • Distinguish Azure Resource Graph inventory queries from event-routing services such as Event Grid; note the task each service handles.
  • Review how Azure SQL long-term retention differs from routine backup retention, and match each to the stated recovery or compliance need.
  • For delivery scenarios, separate CDN caching of static content from configuring DNS and an application endpoint for a custom domain.
Official sourceOfficial exam page ↗