AZ-400 Practice Question: Design and implement build and release pipelines
You are deploying a multi-container application to Azure Kubernetes Service (AKS) using Azure Pipelines. You need to ensure that the deployment rollback automatically if the health checks fail. Which strategy should you implement?
⚠ Common exam trap
A common mix-up: candidates confuse deployment strategies (blue-green, canary) with the mechanism for automated health-check-based rollback, overlooking that Kubernetes native probes combined with rolling updates provide the simplest and most automatic solution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a rolling update with readiness and liveness probes
A rolling update with readiness and liveness probes is the correct strategy because Kubernetes automatically monitors pod health via these probes. If a new pod fails its readiness probe, the rolling update pauses; if the liveness probe fails, the pod is restarted. Azure Pipelines can be configured to detect probe failures and trigger a rollback to the previous stable ReplicaSet, ensuring automated recovery without manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure a rolling update with readiness and liveness probes
Why this is correct
Configure a rolling update with readiness and liveness probes: This approach leverages Kubernetes' native deployment controller to gradually replace pods while continuously checking health signals. If a readiness probe fails on new pods, the rollout immediately stops and Kubernetes automatically rolls back to the last healthy replica set, ensuring zero manual intervention and no downtime.
- ✗
Use a blue-green deployment strategy
Why it's wrong here
Use a blue-green deployment strategy: While blue-green reduces risk by switching traffic all at once from the old (blue) to the new (green) environment, it lacks built-in automatic rollback on health failures. Detecting issues and reverting traffic back to the blue environment requires manual decision-making and traffic re-routing, which does not align with the requirement for self-healing and automated rollback.
- ✗
Use Helm charts with pre-upgrade hooks
Why it's wrong here
Use Helm charts with pre-upgrade hooks: Helm pre-upgrade hooks execute jobs before the new release is applied, such as database migrations or validation checks, but they do not monitor the application's health after the upgrade is live. If the new version becomes unhealthy due to readiness or liveness failures, Helm does not automatically roll back based on those probe results, so this option fails to provide the required automated rollback trigger.
- ✗
Implement a canary deployment with manual verification
Why it's wrong here
Implement a canary deployment with manual verification: Canary deployments incrementally send a small percentage of traffic to the new version, which helps limit blast radius, but the promotion to full rollout typically requires human approval or manual verification of health metrics. Without automated health-gated promotion, the process does not automatically roll back on failure; it instead depends on an operator to observe the issue and manually revert traffic, making it less self-sufficient than a rolling update with probes.
Go deeper
Related to this question
Learn chapter
Introduction to DevOps and Azure DevOps
Key term
Anthos
Anthos is a Google Cloud platform that lets you run applications consistently across different computing environments, like on-premises data centers and multiple public clouds.
Key term
Azure Pipelines
Azure Pipelines is a cloud-based CI/CD service from Microsoft that automatically builds, tests, and deploys code to any platform or cloud.
About these practice questions
This AZ-400 question is part of Courseiva's 823-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-400 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-400 exam.