Azure App Service is the exam’s headline example of Platform as a Service (PaaS) for compute. You bring a web app or an API; Microsoft runs and patches the operating system and the language runtime underneath. That single idea — you deploy the code, Microsoft manages the platform — is the anchor for every App Service question, and the diagram above maps the four pieces the AZ-900 builds on top of it.
App Service is PaaS — and what that buys you
Because App Service is PaaS, you are not provisioning or maintaining servers. There is no OS to patch, no runtime to install by hand. You pick a stack — .NET, Java, Node.js, Python, PHP and more, on Windows or Linux — push your code, and it is live. That is the trade the exam wants you to recognise: less control than a virtual machine, far less to manage. If you need full control of the OS, you would reach for a VM (IaaS) instead.
The App Service Plan: the compute you pay for
Every app runs inside an App Service Plan. The plan is the compute tier: its region, its pricing tier (SKU), and the size and number of instances. It is the thing on your bill, and several apps can share one plan.
Tiers split two ways worth knowing cold:
- Free / Shared — apps run on infrastructure shared with other customers. Fine for dev and test, limited in features.
- Dedicated (Standard / Premium) — apps run on VMs reserved for you, and unlock the production features below: custom domains, autoscale, and deployment slots.
Deployment slots: swap staging into production
A deployment slot is a live copy of your app — commonly a “staging” slot — that shares the plan. You deploy the new version to staging, warm it up and test it, then swap: staging instantly becomes production with zero downtime. If something is wrong, you swap back just as fast. It is the safe-release feature, and it lives on the dedicated tiers.
Scale up vs scale out
Two words the exam deliberately contrasts:
- Scale up (vertical) — move the plan to a bigger, more powerful tier: more CPU and memory per instance.
- Scale out (horizontal) — run more instances of the app in parallel to share load. Autoscale does this automatically, adding and removing instances based on a metric like CPU or on a schedule.
Up = a bigger box; out = more boxes. Read the question for “bigger” versus “more,” as the axes in the diagram show.
Custom domains and TLS
By default an app answers at a azurewebsites.net address. On a supported tier you can add a custom domain so it responds at your own name, and bind a TLS/SSL certificate to serve it securely over HTTPS. “My own domain + HTTPS” is the giveaway for this pair.
The real exam mixes multiple-choice, true/false, and drag-and-drop formats; the seven questions below are standard multiple-choice, and every explanation carries a “why not the others” so the wrong options teach you as much as the right one.
Updated for AZ-900 (July 2026). The sample questions above are our own work
in the style of the exam — not real exam items. The exam itself is set and marked
by the certification body.