How many Troubleshooting Scenario Questions questions are on this page?

This page has 5 Troubleshooting Scenario Questions scenario questions for the AZ-400 exam, each with detailed explanations and wrong-answer analysis.

How should I approach AZ-400 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Microsoft Azure DevOps Engineer Expert AZ-400 questions

Scenario-based practice

Troubleshooting Scenario Questions

Practise Microsoft Azure DevOps Engineer Expert AZ-400 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

AZ-400

exam code

Microsoft

vendor

Scenario guide

How to approach troubleshooting scenario questions

These questions describe a network symptom and ask you to identify the root cause or the correct fix. They appear across all certification exams and reward systematic thinking over memorisation. The best candidates follow a consistent troubleshooting framework even under time pressure.

Quick answer

Troubleshooting Scenario Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1hardmultiple choice

Full question →

You are troubleshooting an intermittent performance issue in a web application. Application Insights shows a high number of failed dependency calls to Azure SQL Database. The errors are SqlException with error code -2 (timeout). What is the most likely cause and recommended fix?

A
The application is exhausting the connection pool; increase Max Pool Size in the connection string.
Timeouts often indicate pool exhaustion.
B
The SQL Server firewall is blocking the application IP; add a firewall rule.
Why wrong: Firewall issues cause login failures, not timeouts.
C
The database is experiencing deadlocks; enable read committed snapshot isolation.
Why wrong: Deadlocks cause error 1205, not timeout.
D
The database DTU limit is being exceeded; scale up the service tier.
Why wrong: DTU throttling causes different errors.

Full breakdown with real-world context →

Question 2easymultiple choice

Full question →

The exhibit shows a draft Azure Monitor alert rule for Key Vault secret expiry. However, the query fails to return results for secrets that have already expired. What is the most likely reason?

Exhibit

Refer to the exhibit.

```json
{
  "alertRule": {
    "displayName": "Key Vault Secret Near Expiry",
    "query": "// Azure Resource Graph query
    resources
    | where type == 'microsoft.keyvault/vaults/secrets'
    | extend DaysToExpiry = datetime_diff('day', now(), properties.attributes.expiresOn)
    | where DaysToExpiry < 30 and DaysToExpiry > 0
    | project name, vaultName = resourceGroup, expiresOn = properties.attributes.expiresOn, DaysToExpiry
    | limit 10"
  }
}
```

A
The query does not include secrets that have no expiry date set.
Why wrong: This would affect secrets without expiry, not expired ones.
B
The condition `DaysToExpiry > 0` excludes secrets that have already expired.
Expired secrets have negative DaysToExpiry, so they are filtered out.
C
The query only checks secrets that are enabled.
Why wrong: The query does not include a filter for enabled status.
D
The `limit 10` clause restricts to only 10 secrets, which may miss expired ones.
Why wrong: The limit does not prevent expired secrets from appearing if they are within the first 10 results.

Full breakdown with real-world context →

Question 3mediumdrag order

Full question →

Drag and drop the steps to troubleshoot a failed Azure DevOps release pipeline into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 4hardmultiple choice

Full question →

You run the above KQL query in Log Analytics to troubleshoot a failing container in a Kubernetes deployment. The query returns no results even though you know there are errors. What is the most likely cause?

Exhibit

Refer to the exhibit.
```kusto
ContainerLog
| where TimeGenerated > ago(1h)
| where LogEntry contains "Error"
| project TimeGenerated, LogEntry, ContainerID
```

A
The 'project' clause filters out relevant rows.
Why wrong: Project only selects columns, not rows.
B
Container logs are not being sent to the ContainerLog table.
Logs may be in ContainerLogV2 or not collected.
C
The 'contains' operator is case-sensitive.
Why wrong: 'contains' is case-insensitive.
D
The KQL syntax is incorrect.
Why wrong: The syntax is valid.

Full breakdown with real-world context →

Question 5hardmultiple choice

Full question →

Refer to the exhibit. You deploy this Bicep template to create an Azure App Service with a custom container. The deployment succeeds, but the container fails to start with an error 'Container didn't respond to HTTP pings'. What is the most likely missing configuration?

Exhibit

Refer to the exhibit.

```bicep
param location string = resourceGroup().location
param appName string
param containerImage string

resource appService 'Microsoft.Web/sites@2022-09-01' = {
  name: appName
  location: location
  kind: 'app,linux'
  properties: {
    siteConfig: {
      linuxFxVersion: 'DOCKER|${containerImage}'
      appSettings: [
        {
          name: 'WEBSITES_ENABLE_APP_SERVICE_STORAGE'
          value: 'false'
        }
      ]
    }
  }
}
```

A
The template is missing the 'healthCheckPath' property in siteConfig.
The health check path should be configured to match the container's endpoint.
B
The container image is not publicly accessible.
Why wrong: The image could be private but the template doesn't include registry credentials.
C
The WEBSITES_ENABLE_APP_SERVICE_STORAGE should be set to 'true'.
Why wrong: This setting is for persistent storage, not health checks.
D
The template is missing the app setting 'WEBSITES_PORT'.
Why wrong: The default port is 80, but the container may use a different port.

Full breakdown with real-world context →

These AZ-400 practice questions are part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style AZ-400 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

Troubleshooting Scenario Questions

How to approach troubleshooting scenario questions

Quick answer

Related AZ-400 topic practice pages

Configure processes and communications practice questions

Design and implement source control practice questions

Design and implement build and release pipelines practice questions

Develop a security and compliance plan practice questions

Implement an instrumentation strategy practice questions

Design and implement a DevOps infrastructure practice questions

Design and implement a source control strategy practice questions

AZ-400 fundamentals practice questions

AZ-400 scenario practice questions

AZ-400 troubleshooting practice questions

Practice scenarios

You are troubleshooting an intermittent performance issue in a web application. Application Insights shows a high number of failed dependency calls to Azure SQL Database. The errors are SqlException with error code -2 (timeout). What is the most likely cause and recommended fix?

The exhibit shows a draft Azure Monitor alert rule for Key Vault secret expiry. However, the query fails to return results for secrets that have already expired. What is the most likely reason?

Exhibit

Drag and drop the steps to troubleshoot a failed Azure DevOps release pipeline into the correct order.

You run the above KQL query in Log Analytics to troubleshoot a failing container in a Kubernetes deployment. The query returns no results even though you know there are errors. What is the most likely cause?

Exhibit

Refer to the exhibit. You deploy this Bicep template to create an Azure App Service with a custom container. The deployment succeeds, but the container fails to start with an error 'Container didn't respond to HTTP pings'. What is the most likely missing configuration?

Exhibit