AZ-305 Design infrastructure solutions Practice Question
You need to design a solution to store configuration data for a cloud-native application. The configuration must be centrally managed, versioned, and accessible to multiple services without hard-coding values. Which Azure service should you use?
⚠ Common exam trap
A common mix-up: candidates confuse Azure Key Vault (for secrets) with Azure App Configuration (for non-secret configuration), or assume a general-purpose database like Cosmos DB can serve as a configuration store, overlooking the specialized versioning and dynamic refresh capabilities of App Configuration.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure App Configuration
Azure App Configuration is the correct choice because it is a fully managed service specifically designed for central management of application configuration and feature flags. It supports versioning of configuration key-values, provides instant access to multiple services via SDKs or REST API, and eliminates the need to hard-code values by allowing dynamic updates without redeployment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Azure App Configuration
Why this is correct
Azure App Configuration is the correct choice because it is a purpose-built managed service for centrally storing and managing application configuration settings such as key-value pairs, hierarchical labels, feature flags, and dynamic refresh. It supports versioning, rollback, and composition with services like Azure Kubernetes Service, so workload configuration can be updated without redeploying. Unlike a general NoSQL store, it provides a simple configuration model and SDK integration to watch for changes and apply them at runtime.
- ✗
Azure Cosmos DB
Why it's wrong here
Azure Cosmos DB is not appropriate because it is a globally distributed, multi-model NoSQL database designed for transactional data with tunable consistency and millisecond responses, not for storing flat application settings. Using it for configuration would require building a schema, accessing it via SQL or Cassandra/Mongo APIs, and managing capacity explicitly, which adds unnecessary cost and operational complexity. Configuration data has no need for distributed transactions, indexing policies, or cross-region write replication, so this would be architectural overkill.
- ✗
Azure Blob Storage
Why it's wrong here
Azure Blob Storage is optimized for unstructured object data like images, video, backups, and large files, not for small, frequently read application settings. You do not get configuration-oriented features such as key-value browsing, label-based filtering, or a change-notification SDK, and storing multiple environments or feature states in blobs would force you to build your own parsing and refresh logic. Configuration settings also change often and need atomic updates, which blob containers are not designed to handle in a controlled, versioned manner.
- ✗
Azure Key Vault
Why it's wrong here
Azure Key Vault is specifically for safeguarding cryptographic keys, certificates, and secrets like passwords and connection strings, and it is not intended to hold general application settings. You should not put non-sensitive configuration such as log levels, thresholds, or feature flags in Key Vault because every secret get is charged and audited, and there are intrinsic limits on secret size and restore periods. In a well-architected solution, App Configuration can store normal settings and securely link to Key Vault references for values that truly are secrets.
Go deeper
Related to this question
About these practice questions
One of 212 original AZ-305 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.