AZ-204 Practice Question: Connect to and consume Azure services and third-party services
A microservices application deployed on Azure Kubernetes Service (AKS) needs to securely store and retrieve configuration settings. The configuration should be updated without redeploying containers. Which Azure service should be used?
⚠ Common exam trap
Test-takers frequently confuse Azure Key Vault with a general configuration store, but Key Vault is strictly for secrets and does not support dynamic configuration reloading or feature flags, which are core requirements for the scenario described.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure App Configuration
Azure App Configuration is purpose-built for managing configuration settings for microservices applications. It provides a centralized store for key-value pairs and feature flags, supports dynamic configuration updates without requiring container restarts or redeployments, and integrates natively with AKS via the App Configuration Kubernetes Provider or the Azure SDK. This enables live configuration changes that are automatically picked up by running containers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Azure App Configuration
Why this is correct
Azure App Configuration is purpose-built for managing application settings and feature flags in modern distributed architectures like microservices on Azure Kubernetes Service. It centralizes configuration, allowing dynamic updates to be pushed to running services without requiring redeployments, which is crucial for agility. This service significantly simplifies feature management, A/B testing, and ensures configuration consistency across numerous service instances.
- ✗
Azure Cosmos DB
Why it's wrong here
Azure Cosmos DB is a globally distributed, multi-model database service designed for high-performance transactional and analytical workloads. While it can store any JSON document, using it as a primary configuration store for application settings and feature flags is an anti-pattern. It lacks the specialized features for dynamic configuration delivery, versioning, and change management that a dedicated configuration service provides, making it an overly complex and expensive solution for this specific problem.
- ✗
Azure Key Vault
Why it's wrong here
Azure Key Vault is a cloud service for securely storing and managing sensitive information such as cryptographic keys, secrets, and certificates. Its primary role is protecting credentials and sensitive data, not serving general application configuration or managing feature flags. While some configuration values might be sensitive, Key Vault lacks the dynamic update capabilities, hierarchical organization, and feature flag evaluation features required for comprehensive application settings management across a microservices landscape.
- ✗
Azure Blob Storage
Why it's wrong here
Azure Blob Storage is an object storage solution optimized for storing massive amounts of unstructured data, like files or media. Although configuration files could technically be stored here, it offers no native mechanism for dynamic configuration updates to running applications, feature flag evaluation, or versioning and rollback capabilities. Implementing such features would require significant custom development, including polling logic and change detection, making it an inefficient and complex choice for centralized configuration management in a microservices environment.
Go deeper
Related to this question
Learn chapter
Azure Functions Development
Key term
Blob Storage SDK
The Blob Storage SDK is a set of libraries and tools that lets developers write code to store, access, and manage unstructured data in Microsoft Azure's blob storage service.
Key term
Azure App Configuration
Azure App Configuration is a managed Azure service that stores and manages application settings and feature flags separately from your code, allowing you to update them without redeploying or restarting your application.
About these practice questions
This AZ-204 question is part of Courseiva's 881-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.