AZ-400 Configure processes and communications Practice Question
Your team uses feature flags to manage feature releases. You need to ensure that a feature flag is automatically turned off for all users except the development team after a production incident. What is the best approach?
⚠ Common exam trap
It's easy for candidates to choose manual toggling (Option D) because it seems simplest, but they overlook the requirement to keep the feature enabled for the development team, which requires a targeting filter rather than a global off switch.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use a feature management system like Azure App Configuration with a targeting filter to enable only for the dev team.
Azure App Configuration's feature management system provides a built-in targeting filter that allows you to dynamically enable a feature flag for specific users or groups (e.g., the development team) while disabling it for all others. This approach supports real-time, no-deployment changes, which is essential for quickly responding to a production incident without modifying code or redeploying.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a separate branch with the feature disabled and deploy it.
Why it's wrong here
Creating a separate branch with the feature disabled bakes the flag state into the build, so toggling the feature requires a code change, a new branch, and a full redeployment. This loses the runtime control that feature flags provide, risks merge conflicts and configuration drift, and cannot be used to instantly enable the feature for only the dev team without an immediate hotfix.
- ✓
Use a feature management system like Azure App Configuration with a targeting filter to enable only for the dev team.
Why this is correct
Azure App Configuration's feature management with a targeting filter evaluates flags at runtime, allowing you to define a dynamic rule that enables the feature only for members of the dev team while all other users see the old behavior. This approach provides instant, per-audience control without code changes or redeployment, and you can modify the filter or turn the flag off immediately via the configuration service, making it the correct solution for safe feature releases.
- ✗
Set an environment variable in the production environment to disable the feature.
Why it's wrong here
Environment variables in Azure App Service or .NET are read at startup, so changing the variable to disable the feature in production forces an application restart, which may cause downtime or disrupt in-flight requests. It also only provides a coarse, all-or-nothing toggle and cannot target a specific group like the dev team without additional logic and another deployment.
- ✗
Manually toggle the feature flag off in the app configuration.
Why it's wrong here
Manually toggling a feature flag in the Azure portal or App Configuration during an incident is slow, non-repeatable, and prone to human error (e.g., forgetting to revert or toggling the wrong flag). It lacks the automation and granular audience targeting seen in a targeting filter, and does not enforce a controlled rollout process to ensure only the dev team receives the feature.
Go deeper
Related to this question
Learn chapter
Introduction to DevOps and Azure DevOps
Key term
Feature
A feature is a distinct unit of functionality that delivers value to the user, often managed and tracked throughout the software development lifecycle.
Key term
Incident
An incident is a security event that violates an organization's policies or threatens its data, systems, or operations, requiring a structured response.
About these practice questions
This AZ-400 question is part of Courseiva's 823-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-400 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-400 exam.