AZ-900 Describe Azure architecture and services Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Azure Key Vault

  Why it's wrong here

  Azure Key Vault is a cloud service for securely storing and controlling access to secrets, encryption keys, and certificates. It is designed for sensitive material like API keys, passwords, and certificates, not for application settings or feature flags. While you can store configuration values as secrets, App Configuration is the dedicated Azure service for centralizing application settings and feature flags, with key-value store, labels, and dynamic refresh capabilities that Key Vault does not provide.

• ✓

  Azure App Configuration

  Why this is correct

  Azure App Configuration is the correct service because it is purpose-built to centralize application settings and feature flags, enabling dynamic configuration without redeploying your application. It provides a managed key-value store with labels, content types, snapshots, and integration with App Service and Azure Functions for near real-time tuning. Unlike other options, App Configuration also supports feature management and can securely reference secrets stored in Azure Key Vault, making it the standard choice for externalized configuration.

• ✗

  Azure App Service settings

  Why it's wrong here

  Azure App Service settings, such as app settings and connection strings in the portal or ARM templates, are applied only to a single App Service instance and are written into the environment at startup. They do not provide centralization across multiple applications, nor do they support rich feature flags, labels, or version history. Changing an App Service setting requires a restart or redeployment, whereas App Configuration enables dynamic configuration updates without rebuilding or restarting your application, especially when combined with its SDK's refresh mechanism.

• ✗

  Azure Storage Table

  Why it's wrong here

  Azure Storage Table is a NoSQL key-value data store intended for semi-structured structured data, such as logs, telemetry, or user data, at scale. It is not a configuration service: it lacks built-in support for feature flags, labels, versioning, or dynamic refresh hooks. Using Table Storage for configuration would require you to build custom code to read, cache, and monitor for changes, whereas App Configuration offers these features as a managed, integrated service.