Functions with HTTP triggers in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

HTTP Trigger Function Response Behavior

You have an Azure Function with an HTTP trigger that returns a JSON response. What will be the HTTP status code if the function completes successfully and returns a valid JSON object?

A 500 Internal Server Error

B 404 Not Found

C 302 Found

D 200 OK

💡 Hint

Think about the standard HTTP status code for a successful request.

When an Azure Function with an HTTP trigger completes successfully and returns a valid JSON response, it sends back a 200 OK status code indicating success.

❓ Configuration

intermediate

Configuring Authorization Level for HTTP Trigger

Which authorization level setting allows an Azure Function with an HTTP trigger to be called without any API key or authentication?

A Anonymous

B Admin

C Function

D User

💡 Hint

Consider which setting allows open access without keys.

The 'Anonymous' authorization level allows anyone to call the HTTP-triggered function without providing any API key or authentication.

❓ Architecture

advanced

Scaling Behavior of HTTP Triggered Functions

When an Azure Function with an HTTP trigger experiences a sudden spike in requests, how does the platform handle scaling to meet demand?

A It automatically creates more instances of the function app to handle the load.

B It queues the requests and processes them one by one on a single instance.

C It rejects new requests until the load decreases.

D It requires manual intervention to add more instances.

💡 Hint

Think about how serverless platforms handle sudden traffic increases.

Azure Functions automatically scale out by creating more instances of the function app to handle increased HTTP request load without manual intervention.

❓ security

advanced

Securing HTTP Triggered Azure Functions

Which of the following is the most secure way to restrict access to an HTTP-triggered Azure Function?

A Set authorization level to 'Anonymous' and rely on IP filtering.

B Set authorization level to 'Function' and share the function key only with trusted clients.

C Set authorization level to 'Admin' and expose the admin key publicly.

D Disable authorization and use HTTPS only.

💡 Hint

Consider how function keys control access.

Setting authorization level to 'Function' requires callers to provide a function key, which should be shared only with trusted clients, providing secure access control.

✅ Best Practice

expert

Optimizing Cold Start for HTTP Triggered Functions

You want to minimize cold start latency for your HTTP-triggered Azure Functions in a consumption plan. Which approach is the best practice?

A Increase the function timeout setting to allow longer execution.

B Disable HTTP triggers and use timer triggers instead.

C Use the Premium plan or Dedicated (App Service) plan to keep instances warm.

D Deploy multiple functions in the same app to share cold start time.

💡 Hint

Think about how Azure Functions plans affect cold start behavior.

The Premium or Dedicated plans keep function instances warm, reducing cold start latency compared to the Consumption plan which spins up instances on demand.

Practice

1. What does an HTTP trigger do in an Azure Function?

easy

A. It stores data for the function to use later.

B. It runs the function when it receives a web request.

C. It schedules the function to run at specific times.

D. It sends emails automatically when triggered.

Solution

1. Step 1: Understand the role of HTTP triggers

   HTTP triggers start a function when a web request is received.

2. Step 2: Compare with other triggers

   Other triggers like timers schedule functions, but HTTP triggers respond to web calls.

3. Final Answer:

   It runs the function when it receives a web request. -> Option B

4. Quick Check:

   HTTP trigger = runs on web request [OK]

Hint: HTTP trigger means function runs on web request [OK]

Common Mistakes:

• Confusing HTTP trigger with timer trigger
• Thinking HTTP trigger stores data
• Assuming HTTP trigger sends emails

2. Which of the following is the correct way to define an HTTP trigger in an Azure Function's function.json file?

easy

A. "bindings": [{ "type": "httpTrigger", "direction": "in", "authLevel": "function", "methods": ["get"] }]

B. "bindings": [{ "type": "timerTrigger", "direction": "in", "schedule": "0 */5 * * * *" }]

C. "bindings": [{ "type": "blobTrigger", "direction": "in", "path": "samples-workitems/{name}" }]

D. "bindings": [{ "type": "queueTrigger", "direction": "in", "queueName": "myqueue-items" }]

Solution

1. Step 1: Identify HTTP trigger binding

   The correct binding type for HTTP trigger is "httpTrigger" with direction "in".

2. Step 2: Check authLevel and methods

   authLevel "function" and methods ["get"] are valid properties for HTTP triggers.

3. Final Answer:

   "bindings": [{ "type": "httpTrigger", "direction": "in", "authLevel": "function", "methods": ["get"] }] -> Option A

4. Quick Check:

   HTTP trigger binding = type "httpTrigger" [OK]

Hint: HTTP trigger binding uses type "httpTrigger" in function.json [OK]

Common Mistakes:

• Using timerTrigger or blobTrigger instead of httpTrigger
• Missing authLevel property
• Wrong direction value

3. Given this Azure Function code snippet, what will be the HTTP response body when a GET request is sent?

import logging
import azure.functions as func

def main(req: func.HttpRequest) -> func.HttpResponse:
    name = req.params.get('name')
    if not name:
        return func.HttpResponse("Please pass a name", status_code=400)
    return func.HttpResponse(f"Hello, {name}!")

medium

A. Hello, Alice!

B. Hello, World!

C. Error 404 Not Found

D. Please pass a name

Solution

1. Step 1: Check request parameter handling

   The function looks for 'name' in query parameters. If missing, it returns a 400 response with message "Please pass a name".

2. Step 2: Analyze given request

   The question states a GET request is sent but does not mention a 'name' parameter, so name will be None.

3. Final Answer:

   Please pass a name -> Option D

4. Quick Check:

   No name param = "Please pass a name" response [OK]

Hint: If no 'name' param, function returns error message [OK]

Common Mistakes:

• Assuming default name is 'Alice' or 'World'
• Ignoring the 400 status code response
• Confusing request body with query parameters

4. You have this function.json snippet for an HTTP triggered Azure Function:

{
  "bindings": [
    {
      "type": "httpTrigger",
      "direction": "in",
      "authLevel": "anonymous",
      "methods": ["post"]
    },
    {
      "type": "httpTrigger",
      "direction": "out"
    }
  ]
}

What is the error in this configuration?

medium

A. The output binding type should be "http" not "httpTrigger".

B. The output binding type "http" is invalid; it should be "httpResponse".

C. The output binding type "http" is invalid; it should be "httpTrigger".

D. The output binding type should be "http" with direction "in".

Solution

1. Step 1: Review input and output bindings

   The input binding uses "httpTrigger" which is correct for HTTP triggers.

2. Step 2: Identify output binding error

   The output binding incorrectly uses "httpTrigger"; it should be "http" with direction "out" for HTTP responses.

3. Final Answer:

   The output binding type should be "http" not "httpTrigger". -> Option A

4. Quick Check:

   HTTP output binding = type "http" [OK]

Hint: HTTP output binding uses type "http", not "httpTrigger" [OK]

Common Mistakes:

• Using "httpTrigger" as output binding type incorrectly
• Confusing input and output binding types
• Setting wrong direction for output binding

5. You want to create an Azure Function with an HTTP trigger that only allows calls with a function key (authLevel set to "function") and responds with JSON containing a greeting message using the "name" query parameter and returns a JSON error message if the "name" query parameter is missing. Which of the following code snippets correctly implements this behavior?

hard

A. import azure.functions as func

def main(req: func.HttpRequest) -> func.HttpResponse:
name = req.params.get('name')
if not name:
return func.HttpResponse('Missing name', status_code=400)
return func.HttpResponse(f'{"message": "Hello, {name}!"}', mimetype='application/json')

B. import azure.functions as func

def main(req: func.HttpRequest) -> func.HttpResponse:
name = req.get_json().get('name')
if not name:
return func.HttpResponse('Missing name', status_code=400)
return func.HttpResponse(f'Hello, {name}!')

C. import azure.functions as func
import json

def main(req: func.HttpRequest) -> func.HttpResponse:
name = req.params.get('name')
if not name:
return func.HttpResponse(json.dumps({'error': 'Missing name'}), status_code=400, mimetype='application/json')
return func.HttpResponse(json.dumps({'message': f'Hello, {name}!'}), mimetype='application/json')

D. import azure.functions as func
import json

def main(req: func.HttpRequest) -> func.HttpResponse:
name = req.params.get('name')
return func.HttpResponse(json.dumps({'message': f'Hello, {name}!'}), mimetype='text/plain')

Solution

1. Step 1: Check authLevel and input handling

   authLevel "function" is set in function.json (not shown), so code must handle query param 'name' safely.

2. Step 2: Validate JSON response and error handling

   import azure.functions as func import json def main(req: func.HttpRequest) -> func.HttpResponse: name = req.params.get('name') if not name: return func.HttpResponse(json.dumps({'error': 'Missing name'}), status_code=400, mimetype='application/json') return func.HttpResponse(json.dumps({'message': f'Hello, {name}!'}), mimetype='application/json') uses json.dumps to create proper JSON for both error ({'error': 'Missing name'}) and success ({'message': f'Hello, {name}!'}), with mimetype='application/json' and status_code=400 for errors.

3. Step 3: Compare other options

   A returns plain text error and f-string JSON-like string; C uses get_json() instead of params; D uses text/plain mimetype.

4. Final Answer:

   Uses json.dumps and mimetype='application/json' for both success and error JSON responses. -> Option C

5. Quick Check:

   json.dumps for JSON error and success with application/json mimetype [OK]

Hint: Use json.dumps and mimetype 'application/json' for JSON responses [OK]

Common Mistakes:

• Returning JSON as plain string without json.dumps
• Using wrong mimetype for JSON
• Reading JSON body instead of query parameters