AI-200 practice: Store and retrieve app configuration information by using Azure App Configuration

Question 1

Your app loads dozens of configuration values from Azure App Configuration at startup, and you want it to automatically pick up changes to any of those values while running, without polling every individual key on every request, and only refresh when something has actually changed.

What should you implement?

Accepted Answer

A dedicated sentinel key that the app monitors; when that key changes, the app refreshes its full cached configuration set from Azure App Configuration

Answer

A middleware path that calls GetConfigurationSetting for every registered key on each incoming HTTP request before the handler runs

Answer

Disabled client-side caching so every configuration read issues a direct GetConfigurationSetting call to Azure App Configuration

Answer

An automated redeployment pipeline that restarts the app whenever any App Configuration key changes, because runtime refresh is unsupported

Question 2

You need to reference a Key Vault secret from an Azure App Configuration store, so that application code reads a single App Configuration value that transparently resolves to the current secret version at runtime without needing direct Key Vault SDK calls:
```python
from azure.appconfiguration.provider import load
from azure.identity import DefaultAzureCredential

config = load(
    endpoint="https://myappconfig.azconfig.io",
    credential=DefaultAzureCredential()
)
print(config["DbPassword"])
```
The App Configuration key DbPassword was created as a Key Vault reference pointing to https://myvault.vault.azure.net/secrets/db-password. This code throws an authorization error accessing the Key Vault, even though the App Configuration read itself succeeds. What is missing?

Accepted Answer

load() needs an explicit key_vault_options parameter configured with a credential (e.g. key_vault_options=AzureAppConfigurationKeyVaultOptions(credential=DefaultAzureCredential())) so the App Configuration provider knows how to resolve Key Vault references.

Answer

App Configuration cannot reference Key Vault secrets at all; DbPassword must be stored as a plain App Configuration value instead.

Answer

The identity being used needs the App Configuration Data Reader role only; Key Vault access is automatically inherited from App Configuration's own managed identity.

Answer

config["DbPassword"] returns the Key Vault reference URI as a string, not the resolved secret value, by design.

Question 3

You are building a serverless API using Azure Functions that must read a configuration value from Azure App Configuration at startup and inject it as a binding parameter. What should you configure?

Accepted Answer

App Configuration provider wired in function startup

Answer

Hardcoded configuration value inside function.json

Answer

Local-only environment variable on a laptop

Answer

Blob trigger reading a config file from storage

Question 4

Which Azure service acts as a centralized store for application feature flags and configuration values that can be shared across multiple microservices?

Accepted Answer

Azure App Configuration

Answer

Azure Key Vault secrets

Answer

Azure Monitor metrics

Answer

Azure Container Registry

Question 5

Your team wants Azure App Configuration to serve different configuration values to a 'canary' subset of AI service instances versus the general population, without redeploying code. What feature should you use?

Accepted Answer

Feature flags with percentage or group targeting

Answer

Separate App Configuration store per instance

Answer

Hardcoded if/else based on machine hostname

Answer

Key Vault secret versioning for feature routing

Question 6

You are deploying a containerized AI model to Azure App Service. The model requires a large configuration file. You want to manage this configuration centrally and allow updates without redeploying the container. What is the best approach?

Accepted Answer

Azure App Configuration store

Answer

Azure Key Vault secret values

Answer

Azure Files volume mount path

Answer

Hard-coded container env vars

Question 7

Which Python SDK method retrieves configuration values (including feature flags) from Azure App Configuration?

Accepted Answer

AzureAppConfigurationClient.get_configuration_setting(key=...) for flags/settings

Answer

SecretClient.get_secret(name=...) retrieving a secret value from Azure Key Vault

Answer

BlobClient.download_blob() reading blob content bytes from Azure Blob Storage

Answer

CosmosClient.get_database_client(...).read() fetching Cosmos database metadata

Question 8

Which Azure CLI command creates a new App Configuration store to centrally hold feature flags for an AI application?

Accepted Answer

az appconfig create --name myAppConfig --resource-group myRG --location eastus --sku standard

Answer

az appconfig kv set --name myAppConfig --key FeatureFlags:Beta --value true --label prod

Answer

az appconfig feature set --name myAppConfig --feature Beta --description "beta rollout flag"

Answer

az keyvault create --name myAppConfig --resource-group myRG --location eastus --sku standard

Question 9

Which Azure service centrally stores non-secret application settings, such as feature flags and endpoint URLs, and supports dynamic configuration refresh without app restarts?

Accepted Answer

Azure App Configuration

Answer

Azure Key Vault secrets

Answer

Azure Files SMB shares

Answer

Azure Container Registry

Question 10

You are using Azure App Configuration in Python. You want your application to automatically reload configuration changes when a designated key changes without restarting the container. What capability is this?

Accepted Answer

Dynamic configuration refresh

Answer

Event Grid configuration push

Answer

Key Vault-linked config reload

Answer

Snapshot-based config syncing

10 questions