Azure AZ-204 study plan

Create an App Service plan and deploy a web app into it using the CLI, then add a deployment slot and complete a slot swap

Configure app settings and connection strings as slot-sticky versus slot-swappable and verify behavior after a swap

Enable autoscaling on the App Service plan with a CPU-based rule and confirm scale-out by driving load

Turn on application logging and stream the log output while exercising an endpoint

Build a Docker image, push it to Azure Container Registry, and deploy it to Web App for Containers with a registry credential

Run the same image as an Azure Container Instance with environment variables and a non-default restart policy

Create a Function app with an HTTP and a timer trigger, and set the runtime and plan explicitly

Implement a durable function orchestration with a chained activity and inspect the orchestration status endpoint

Wire a blob-triggered function to a queue output binding and verify the message lands in storage end to end

Add a poison-queue path to a queue-triggered function and prove a failing message is retried then parked

Externalize function configuration into App Configuration and consume it through Key Vault references

Enable Application Insights on the function app and follow a single invocation across the trigger, binding, and output

Move blobs across hot, cool, and archive tiers and apply a lifecycle management rule that you confirm by policy evaluation

Generate a service SAS and a stored access policy, then revoke access by editing the policy without rotating the key

Set and query blob index tags and metadata to filter a container listing

Create a Cosmos DB container with a partition key and compare two consistency levels under the same read pattern

Read the Cosmos DB change feed from a function and process inserted documents

Register an app in Microsoft Entra ID and acquire a token with MSAL using both an interactive flow and a client-credentials flow

Enable a system-assigned managed identity on an App Service app and grant it least-privilege access to Key Vault

Read, write, and rotate a secret and a certificate from Key Vault using the SDK rather than the portal

Request a scoped Microsoft Graph permission and query the signed-in user's profile with the resulting token

Protect a web API with a bearer-token requirement and reject both an expired and a wrong-audience token

Write KQL queries against Log Analytics to surface failed requests, slow dependencies, and their correlation IDs

Instrument an app with custom events and metrics, then locate them in Application Insights after enabling sampling

Add a caching layer for a hot read path and measure the latency change before and after

Call an unreliable downstream API through HttpClientFactory with a Polly retry and circuit-breaker policy and force each path

Publish an API through API Management and apply a rate-limit and a header-rewrite policy

Send and receive Service Bus messages with peek-lock, complete/abandon, and inspect the dead-letter queue

Publish an Event Grid custom topic event and subscribe a function handler to it

Diagnose a deliberately broken deployment using App Insights transaction traces and dependency failures

Stream events into Event Hubs with a partition key and read them back with a checkpointing consumer

Consume a third-party HTTP API with pagination and throttling handled correctly

Re-run your two weakest labs from weeks 1 through 7 without notes

Take a timed full-length practice exam and tag every miss by domain and by cause (knowledge gap versus misread)