AZ-104 Deploy and Manage Azure Compute Practice Question
Which three of the following statements about Azure App Service plans are correct? (Choose three.)
⚠ Common exam trap
Candidates often assume apps must be in the same resource group to share resources, but Azure App Service plans are resource-group-agnostic for compute sharing, and they also mistakenly think Free/Shared tiers include custom domains and SSL, which they do not.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Apps in the same App Service plan share the same compute resources, even if they are in different resource groups.
Apps in the same App Service plan share the same compute resources (VMs, memory, CPU) because the plan defines the underlying infrastructure. This is true even if the apps are in different resource groups, as the plan is the boundary for resource allocation, not the resource group.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Apps in the same App Service plan share the same compute resources, even if they are in different resource groups.
Why this is correct
Apps in the same App Service plan share the same underlying virtual machine instances, so they consume the same CPU, memory, and network resources regardless of which resource group they reside in. Resource groups are only logical containers for organizing Azure resources; they have no effect on compute isolation or performance. This sharing is intentional, enabling simplified management and consolidated scaling across multiple applications.
- ✓
You can scale out an App Service plan independently of the apps running within it.
Why this is correct
Scaling out an App Service plan increases the number of VM instances assigned to that plan, and every app hosted in the plan automatically runs on all of those instances. You do not need to configure or scale each app individually because the plan's instance count and tier govern the available compute capacity for all apps. This independence means that a single scale operation can increase the capacity of all applications sharing the plan.
- ✓
The Isolated tier provides network isolation and is designed for apps that require high security and scaling.
Why this is correct
The Isolated pricing tier runs apps on dedicated virtual machines within an Azure Virtual Network, providing complete network-level isolation from other customers. This tier is specifically designed for workloads that require strong security boundaries, such as those handling sensitive data or subject to strict compliance regulations. It also offers significant scaling capabilities, allowing you to grow capacity without leaving the dedicated network environment.
- ✗
Changing the pricing tier of an App Service plan always causes downtime for all apps in the plan.
Why it's wrong here
Changing the pricing tier of an App Service plan does not always cause downtime; the effect depends on the source and target tiers. For instance, scaling between tiers within the same scale unit, such as from Standard to Premium V3, is often performed as a seamless operation with no visible interruption. Even when a tier change requires reallocation, Azure typically uses rolling updates to maintain app availability, so the statement's blanket assertion is false.
- ✗
An App Service plan can only contain apps from the same region and the same resource group.
Why it's wrong here
While all apps in an App Service plan must be in the same region as the plan itself, they can absolutely belong to different resource groups. The resource group is a logical management boundary, not a technical constraint for App Service hosting. Therefore, the claim that apps must share both region and resource group is incorrect because it falsely conflates resource group membership with compute resource location.
- ✗
The Free and Shared tiers support custom domain names and SSL binding without additional cost.
Why it's wrong here
The Free tier does not support custom domain names at all, and the Shared tier, while supporting custom domains, does not offer custom-domain SSL binding. Even in tiers where SSL is available, binding a certificate to your domain typically requires a paid certificate or a Standard-tier plan at minimum. Thus, the assertion that Free and Shared tiers provide both custom domains and no-cost SSL binding is entirely inaccurate.
Go deeper
Related to this question
Learn chapter
Dynamic Membership Groups
Key term
Azure App Service
Azure App Service is a fully managed platform for building, deploying, and scaling web applications and APIs without managing the underlying infrastructure.
Key term
Resource group
A logical container in Microsoft Azure that holds related resources for an application or solution, enabling unified management, security, and billing.
About these practice questions
One of 1,049 original AZ-104 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.