App Service

• Every app runs in an App Service plan, and the plan is the unit of compute, billing, and scaling
• Free and Shared tiers are dev/test only: shared VMs, CPU quota, no scale-out
• Dedicated tiers give you VMs reserved to your plan; Isolated adds your own VNet
• Scale up changes the pricing tier; scale out changes the instance count
• Scale-out instance ceilings rise with the tier: Basic 3, Standard 10, Premium 30, Isolated 100
• Autoscale is automatic horizontal scaling, available from the Standard tier up
• Custom domains require a paid tier (Basic+), not Free F1
• Root domains use an A record; subdomains and wildcards use a CNAME
• Domain ownership is proven with an asuid TXT record
• SNI TLS bindings are free and share one IP; IP-based SSL dedicates an IP and needs Standard+
• The App Service Managed Certificate is a free, auto-renewing cert for a mapped domain
• App Service defaults to TLS 1.2 and terminates TLS at the front end
• Backup needs Basic+ and comes in automatic vs custom flavors
• A custom backup caps at 10 GB total with at most 4 GB of linked database
• Restore stops the target app, so restore into a slot then swap
• VNet integration is outbound only; private endpoints handle inbound private access
• VNet integration needs Basic+ and a dedicated subnet delegated to Microsoft.Web/serverFarms
• Deployment slots need Standard+ and let you swap with zero downtime
• Slot counts by tier: Standard 5, Premium 20, Isolated 20
• Mark a value as a deployment slot setting to keep it from swapping
• Swap with preview pauses for validation; auto swap fires on every deploy
• A Key Vault reference needs the app's managed identity granted Get-secret access
• Key Vault reference syntax; omitting the version auto-tracks the latest secret

Unlock with Premium — includes all practice exams and the complete study guide.