Which App Service tiers allow manual scale-out, autoscale, slots and how many instances, and the difference between scaling up and scaling out.
From Ultra Transcenders AZ-104 by Tony Rough
Scaling happens at the plan level, so every app in the plan is affected. There are two directions: scale up changes the pricing tier (more CPU and memory per instance, plus tier features), and scale out adds instances. (See Figure 10.1.)
| Tier | Scale-out | Max instances | Deployment slots |
|---|---|---|---|
| Free, Shared | None | n/a (shared) | No |
| Basic | Manual only | 3 | No |
| Standard | Manual or rules-based autoscale | 10 | Yes |
| Premium, Isolated | Manual or rules-based autoscale (and automatic scaling on Premium v2-v4) | Premium: 30 (20 on the original Premium v1); Isolated: 100 per plan | Yes |
Common trap: Choosing Automatic scaling to scale on a CPU threshold - automatic scaling reacts to HTTP traffic only, and needs Premium v2-v4; use a Rules Based autoscale rule on CPU Percentage, which Standard already supports.
Common trap: Picking Basic for autoscale because it can have several instances - Basic scales out manually only, to at most 3 instances; Standard (up to 10) is the cheapest tier with autoscale.
Metrics tell you whether a plan is the right size. A very low average CPU (about 3.7%) means the plan is over-provisioned, so scale down to a lower tier. When reading those metrics, a time granularity of 6 hours gives four data points per day.
Autoscale results depend on three settings working together: the duration, the step and the cooldown.
| Scenario | Result |
|---|---|
| Memory > 70% over 15 min, +1, cooldown 5 min, start 2, max 5; breach lasts 30 min | 3 at ~15 min, 4 at ~20, 5 at ~25; stays 5 |
| CPU > 70% over 10 min, +1, cooldown 5 min, start 1; 15 min at 80% | 2 instances |
| Default 1, max 5, cooldown 5 min; scale-in duration 5 min, 9 min below threshold | Sustained load climbs to 5; 9 min allows one scale-in: 5 → 4 |
Common trap: Treating the cooldown as the time a metric must breach before each step - the duration controls the first trigger; after that, the cooldown is only the minimum gap between actions, which is why scaling continues every 5 minutes in the first scenario.
This note is one section of Ultra Transcenders AZ-104: Microsoft Azure Administrator, an independent study guide that explains every topic the exam covers by technology, with comparison tables, diagrams and the common traps, plus a glossary linked to Microsoft Learn.
About the book · Free AZ-104 glossary · All AZ-104 study notes
Where LRS, ZRS, GRS, RA-GRS, GZRS and RA-GZRS keep your copies, what each survives, and which account types support them.
The three SAS types, what each can grant, how they're signed, and how to revoke one when a token leaks.
How the storage account firewall decides who gets in: IP rules, VNet rules with service endpoints, private endpoints and the trusted-services exception.
The order Azure applies subnet and NIC network security groups for inbound and outbound traffic, how priority works, and a worked example.
What a private endpoint puts in your subnet, how private DNS zones make names resolve to it, and when to choose it over a service endpoint.
Fault and update domains, zones, the SLA each gives, and what you can and can't change after a VM is created.
What delete and read-only locks block, how they inherit, and the surprising things a ReadOnly lock stops (like listing storage keys).