Home / cloud-computing / Azure Developer Associate / Cheat Sheet
Azure Developer Associate

Azure Developer Associate Cheat Sheet

AZ-204 Tests Cloud-Native Development Decisions — Not Just Azure Service Knowledge

The exam tests whether you can build, deploy, and debug cloud applications using the right Azure services and patterns for the scenario.

Check Your Readiness →
Among the harder certs
Avg: Approximately 62–67%
Pass: 750 / 1000
Most candidates understand Azure Developer Associate concepts — and still fail. This exam tests how you apply knowledge under pressure.

AZ-204 Decision Framework: Service Selection and Integration

AZ-204 tests developer-level Azure implementation: writing code that integrates with Azure services, implementing authentication, and troubleshooting deployments. Know the SDK patterns and when each service applies.

  1. 01
    Compute — Choose between Azure Functions, App Service, Container Apps, and AKS by workload type
  2. 02
    Storage — Select between Blob, Queue, Table, and Cosmos DB by access pattern
  3. 03
    Security — Implement Managed Identity, Key Vault, and RBAC correctly
  4. 04
    Integration — Use Service Bus, Event Grid, and API Management appropriately
  5. 05
    Monitoring — Implement Application Insights and Azure Monitor for observability

Wrong instinct vs correct approach

An API needs to handle unpredictable traffic spikes with minimal management
✕ Wrong instinct

Deploy to Azure Virtual Machines with auto-scaling

✓ Correct approach

Use Azure Functions on Consumption plan for event-driven, unpredictable workloads — scale-to-zero, pay-per-execution, and zero infrastructure management

Multiple microservices need to communicate reliably with guaranteed delivery
✕ Wrong instinct

Use Azure Event Grid for service-to-service communication

✓ Correct approach

Azure Service Bus provides reliable messaging with guaranteed delivery, dead-lettering, and message ordering — use it for mission-critical service integration; Event Grid is for reactive event notification

An application needs to store user session data with low latency
✕ Wrong instinct

Store session data in Azure Blob Storage

✓ Correct approach

Use Azure Cache for Redis for session state — it provides in-memory storage with sub-millisecond latency; Blob Storage is for unstructured file storage, not session management

Know these cold

  • Managed Identity over SAS tokens for Azure-to-Azure authentication
  • Key Vault for all secrets, certificates, and keys — never hardcode credentials
  • Functions for short-duration event-driven; Durable Functions for long-running orchestrations
  • Service Bus for reliable messaging; Event Grid for reactive events
  • Cosmos DB consistency — ession is the default and appropriate for most apps
  • Application Insights tracks request telemetry, dependencies, and exceptions
  • RBAC + Managed Identity = the secure Azure application identity pattern

Can you answer these without checking your notes?

In this scenario: "An API needs to handle unpredictable traffic spikes with minimal management" — what should you do first?
Use Azure Functions on Consumption plan for event-driven, unpredictable workloads — scale-to-zero, pay-per-execution, and zero infrastructure management
In this scenario: "Multiple microservices need to communicate reliably with guaranteed delivery" — what should you do first?
Azure Service Bus provides reliable messaging with guaranteed delivery, dead-lettering, and message ordering — use it for mission-critical service integration; Event Grid is for reactive event notification
In this scenario: "An application needs to store user session data with low latency" — what should you do first?
Use Azure Cache for Redis for session state — it provides in-memory storage with sub-millisecond latency; Blob Storage is for unstructured file storage, not session management

Common Exam Mistakes — What candidates get wrong

Choosing Azure Functions for long-running operations

Azure Functions have a default 5-minute timeout (10 minutes max in Consumption plan). For long-running operations, use Durable Functions with orchestrators, App Service jobs, or Azure Container Apps — not standard Functions.

Hardcoding connection strings instead of using Key Vault and Managed Identity

Production applications must reference secrets from Azure Key Vault using Managed Identity, not hardcoded strings or environment variables. Candidates who hardcode credentials fail security implementation questions.

Confusing Azure Service Bus with Azure Event Grid

Service Bus is for enterprise messaging with guaranteed delivery, ordering, and dead-letter queues. Event Grid is for event-driven reactive architectures with low latency. The choice depends on whether you need message processing or event notification.

Misidentifying Cosmos DB consistency levels

Strong consistency guarantees the latest data but has higher latency. Eventual consistency is fastest but may return stale reads. Session consistency is the default and usually the right choice for most application scenarios.

Using SAS tokens when Managed Identity is more appropriate

Shared Access Signatures are temporary credentials for external access. Managed Identity eliminates credential management for Azure-to-Azure communication. Using SAS when Managed Identity applies is an unnecessary security risk.

AZ-204 tests real Azure development decisions. Test whether you're building cloud-native or just cloud-hosted.