How many Troubleshooting Scenario Questions questions are on this page?

This page has 7 Troubleshooting Scenario Questions scenario questions for the AZ-204 exam, each with detailed explanations and wrong-answer analysis.

How should I approach AZ-204 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Microsoft Azure Developer Associate AZ-204 questions

Scenario-based practice

Troubleshooting Scenario Questions

Practise Microsoft Azure Developer Associate AZ-204 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

AZ-204

exam code

Microsoft

vendor

Scenario guide

How to approach troubleshooting scenario questions

These questions describe a network symptom and ask you to identify the root cause or the correct fix. They appear across all certification exams and reward systematic thinking over memorisation. The best candidates follow a consistent troubleshooting framework even under time pressure.

Quick answer

Troubleshooting Scenario Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1mediummultiple choice

Full question →

You are troubleshooting an Azure Function that intermittently throws exceptions. You have enabled Application Insights. You need to capture the exact line of code that caused the exception, even for exceptions that occur during high load. Which feature should you use?

A
Snapshot Debugger
Correct. Snapshot Debugger automatically collects debug snapshots on exceptions, providing the call stack and local variables at the moment of failure.
B
Application Insights Profiler
Why wrong: Incorrect. Profiler traces performance of requests but does not capture exception context or source code lines for errors.
C
Live Metrics Stream
Why wrong: Incorrect. Live Metrics shows real-time performance data but does not capture detailed exception snapshots.
D
SQL Insights
Why wrong: Incorrect. SQL Insights is for monitoring database queries, not application exceptions.

Full breakdown with real-world context →

Question 2mediummultiple choice

Full question →

Your Azure Function app uses an event-driven architecture with Azure Event Hubs. You need to ensure that if the function fails to process an event, the event is retried up to three times and then sent to a dead-letter queue. What should you configure?

A
Use Durable Functions to orchestrate retries and dead-lettering.
Why wrong: Durable Functions add unnecessary complexity for simple retries.
B
Implement a try-catch block in the function code and manually re-queue the event.
Why wrong: Manual re-queuing is not recommended; built-in retry is simpler.
C
Configure the retry policy in the function's host.json file.
The retry policy in host.json allows setting maxRetryCount and dead-lettering.
D
Set the 'enableRetry' property on the Event Hub namespace.
Why wrong: Event Hubs does not have a retry property; retry is handled by the consumer.

Full breakdown with real-world context →

Question 3mediummultiple choice

Full question →

You deploy the above ARM template resource for a web app. The web app reads the connection string from the 'DefaultConnection' name. However, the web app fails to connect to the database with an error 'Login failed for user 'myuser'. What is the most likely cause?

Exhibit

Refer to the exhibit.

```json
{
  "type": "Microsoft.Web/sites/config",
  "apiVersion": "2022-09-01",
  "name": "myApp/connectionstrings",
  "properties": {
    "DefaultConnection": {
      "value": "Server=tcp:myserver.database.windows.net;Database=mydb;User ID=myuser;Password=mypassword;Encrypt=True;",
      "type": "SQLAzure"
    }
  }
}
```

A
The user ID does not have access to the database.
Why wrong: The error 'Login failed' indicates the login itself failed, not access to a specific database.
B
The connection string type should be 'SQLServer' instead of 'SQLAzure'.
Why wrong: For Azure SQL Database, 'SQLAzure' is the correct type.
C
The SQL server is configured to use Microsoft Entra authentication only, not SQL authentication.
If the server only allows Microsoft Entra authentication, SQL authentication will fail.
D
The connection string is missing 'Trusted_Connection=True;'.
Why wrong: Trusted_Connection is not used with SQL authentication.

Full breakdown with real-world context →

Question 4hardmultiple choice

Full question →

You are troubleshooting a containerized application running on Azure Kubernetes Service (AKS). The application logs indicate that it cannot connect to an Azure SQL Database using a managed identity. The pod is configured with a user-assigned managed identity. Which step is most likely missing?

A
The Azure SQL Database firewall is blocking the pod IP
Why wrong: Wrong: Managed identity uses a token, not the pod IP.
B
The pod's service account is not linked to the managed identity
Why wrong: Wrong: That is part of the configuration, but the missing add-on is the root cause.
C
The managed identity is not in the same Microsoft Entra ID tenant as the AKS cluster
Why wrong: Wrong: The identity must be in the same tenant.
D
The AKS cluster does not have the Azure AD Pod Identity add-on enabled
Correct: The add-on is required to assign the identity to pods.

Full breakdown with real-world context →

Question 5mediummultiple choice

Full question →

A company stores sensitive data in Azure Blob Storage. They require that all access to the storage account be authenticated via Microsoft Entra ID and that users must have the 'Storage Blob Data Reader' role assigned. A developer reports being unable to read blobs using the Azure portal despite having the role assigned. What is the most likely cause?

A
The storage account firewall is blocking the user's IP address.
Why wrong: This would affect all access, not just the portal.
B
The user does not have the Azure RBAC Reader role on the storage account's resource group to view the storage account in the portal.
The portal requires Reader role to list resources, in addition to data permissions.
C
The storage account is using a system-assigned managed identity for authentication.
Why wrong: Managed identity is not used for portal access.
D
The role is assigned at the storage account scope but the user is trying to access a different storage account.
Why wrong: The user would not have the role on the different account.

Full breakdown with real-world context →

Question 6mediummultiple choice

Full question →

A web app running on Azure App Service must integrate with Microsoft Graph API to read user profiles. The app is registered in Microsoft Entra ID and uses the OAuth 2.0 authorization code flow. However, after deployment, the app fails to acquire tokens. What is the most likely cause?

A
The API permission for User.Read is not granted
Why wrong: Lack of permissions would cause a 403 error, not token acquisition failure.
B
The app is using the client credentials flow instead of authorization code flow
Why wrong: The app is designed for authorization code flow; using client credentials would not require user interaction.
C
The redirect URI is not configured in the app registration
The reply URL must match exactly for the authorization code flow to complete.
D
The client secret is expired
Why wrong: If the secret were expired, token acquisition would fail with a different error.

Full breakdown with real-world context →

Question 7mediummulti select

Full question →

Which TWO Azure Monitor features can help troubleshoot a web app that returns slow response times intermittently?

A
Sentinel incidents
Why wrong: Security incidents.
B
Advisor recommendations
Why wrong: Cost optimization and best practices.
C
Live Metrics
Real-time monitoring of response times.
D
Application Map
Shows dependency call latency.
E
Policy compliance
Why wrong: Azure Policy compliance.

Full breakdown with real-world context →

These AZ-204 practice questions are part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style AZ-204 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

Troubleshooting Scenario Questions

How to approach troubleshooting scenario questions

Quick answer

Related AZ-204 topic practice pages

Develop Azure compute solutions practice questions

Develop for Azure storage practice questions

Implement Azure security practice questions

Connect to and consume Azure services and third-party services practice questions

Monitor, troubleshoot, and optimize Azure solutions practice questions

AZ-204 fundamentals practice questions

AZ-204 scenario practice questions

AZ-204 troubleshooting practice questions

Practice scenarios

You are troubleshooting an Azure Function that intermittently throws exceptions. You have enabled Application Insights. You need to capture the exact line of code that caused the exception, even for exceptions that occur during high load. Which feature should you use?

Your Azure Function app uses an event-driven architecture with Azure Event Hubs. You need to ensure that if the function fails to process an event, the event is retried up to three times and then sent to a dead-letter queue. What should you configure?

You deploy the above ARM template resource for a web app. The web app reads the connection string from the 'DefaultConnection' name. However, the web app fails to connect to the database with an error 'Login failed for user 'myuser'. What is the most likely cause?

Exhibit

You are troubleshooting a containerized application running on Azure Kubernetes Service (AKS). The application logs indicate that it cannot connect to an Azure SQL Database using a managed identity. The pod is configured with a user-assigned managed identity. Which step is most likely missing?

A web app running on Azure App Service must integrate with Microsoft Graph API to read user profiles. The app is registered in Microsoft Entra ID and uses the OAuth 2.0 authorization code flow. However, after deployment, the app fails to acquire tokens. What is the most likely cause?

Which TWO Azure Monitor features can help troubleshoot a web app that returns slow response times intermittently?