Plan And Manage AN Azure AI Solution

You are provisioning a new Azure AI Vision resource in the Azure Portal. You need to choose between a 'F0' free pricing tier and an 'S0' standard pricing tier. What is a key limitation of selecting the F0 pricing tier?

You are deploying an Azure OpenAI resource and want to authenticate client applications using Microsoft Entra ID instead of static API keys. Which role must be assigned to the application's managed identity to permit it to invoke model deployments?

Your development team needs to deploy an Azure AI Language resource that can be accessed from an on-premises datacenter via an ExpressRoute circuit without traversing the public internet. Which Azure feature should you configure?

Your company's security policy requires that all Azure AI Services accounts disable public network access completely. However, internal applications hosted inside a specific Azure Virtual Network must still communicate with the AI services. How should you configure network access?

Your enterprise organization provisions multiple Azure AI Services accounts across different subscriptions. Security mandates that all API keys must be automatically rotated every 30 days without human intervention. Which Azure service configuration should you implement?

You are deploying an Azure AI multi-service account in the West US region. The finance department requires that all resource deployment costs be tracked by department code using Azure Resource Manager tags. Which Azure feature should you use to enforce the mandatory application of the department tag across all future Azure AI resource deployments?

You are designing a monitoring solution for an Azure AI Document Intelligence resource that processes thousands of invoices daily. You need to track custom metric alerts when HTTP 429 (Too Many Requests) errors exceed a specific threshold over a 5-minute window. Where should you configure this alert?

You are managing an enterprise Azure OpenAI deployment with high traffic volumes. To prevent unexpected bill increases due to sudden usage spikes, you need to implement a cost-control mechanism that halts requests once a specific financial limit is reached. What is the native approach to achieve this?

Your organization uses Azure Monitor diagnostic settings to route logs and metrics for all Azure AI services to a centralized Log Analytics workspace. You need to write a Kusto Query Language (KQL) query to find all incoming API requests that resulted in an HTTP 500 server error over the last 24 hours. Which table should you query?

You are deploying a custom text classification model using Azure AI Language. The model undergoes frequent retraining as new business data arrives. You need to establish a model versioning strategy that allows zero-downtime client updates while ensuring seamless rollback capability if regression occurs. What is the recommended architectural approach?

You are provisioning a multi-service Azure AI resource using an Azure Resource Manager (ARM) template. Which resource type should you specify in the template for a generic multi-service cognitive services account?

Your security team discovers that an application using Azure AI Services is intermittently failing with authentication errors due to expired client secrets. You need to refactor the application to use Microsoft Entra ID workflows with managed identities. Which authentication library should your application code use to acquire tokens securely without embedding secrets?

You are planning the disaster recovery strategy for an Azure AI Translator resource. In the event of a regional outage in East US, you want to ensure minimal downtime and continuity of service. Which deployment model should you select?

Your development team needs to deploy an Azure OpenAI model deployment in an enterprise environment. They require provisioned throughput units (PTUs) to guarantee predictable latency and throughput for a mission-critical chatbot. Where can you purchase and manage PTU allocations?

You are deploying an Azure AI Speech resource. Your compliance team stipulates that all data sent to the speech service must be processed strictly within the geographical boundaries of the European Union and must not be used for Microsoft's model training. How should you ensure this compliance?

You are setting up cost alerts for your Azure subscription, which contains several Azure AI services resources. You want to receive an email notification when your month-to-date spending reaches 80% of your $5,000 budget. Which feature should you configure?

You are designing an automated pipeline to deploy Azure AI Custom Vision projects using Infrastructure as Code (IaC) with Bicep. You need to reference an existing Custom Vision training resource in your deployment script without hardcoding its endpoint URL or primary key. Which Bicep construct should you use to retrieve these properties dynamically?

Your company is deploying an Azure OpenAI gpt-4 model. You need to implement model versioning so that when Microsoft releases a newer model version, you can test it on a small subset of user traffic before rolling it out to all users. Which feature should you configure?

You are auditing your Azure subscription and find several unused Azure AI Content Safety resources that are incurring base charges. You want to remove the resources permanently. Which operation should you perform?

You are deploying an Azure AI Document Intelligence container in an on-premises disconnected environment. The container requires periodic license validation against Azure. What is the maximum duration the container can operate offline before requiring reconnection to Azure for billing and metering validation?

You are provisioning a new Azure AI Search service. You need to choose a pricing tier that supports semantic search capabilities. Which minimum tier should you select?

You need to programmatically check the health status of an Azure OpenAI service endpoint. Which HTTP method and path suffix should your health-check script use?

Your organization has multiple Azure AI services deployed across different resource groups. Your security officer requests a centralized dashboard to monitor security recommendations, vulnerability assessments, and compliance posture for all AI resources. Which Azure service should you open?

You are deploying an Azure AI Speech container on an Azure Kubernetes Service (AKS) cluster. Your security policy dictates that pod-to-pod communication within the cluster must be encrypted in transit using mTLS, and egress traffic to Azure must flow through a strict outbound firewall. Which Kubernetes feature should you implement?

You are deploying an Azure AI resource and want to organize it logically within your Azure hierarchy. Which scope is the highest level at which you can assign Azure RBAC roles for your AI resource?

Your organization operates in a highly regulated financial sector. You are required to ensure that all data stored by your Azure AI Custom Vision project is encrypted using a custom encryption key managed by your team in Azure Key Vault, rather than a Microsoft-managed key. Which feature must you configure during resource creation?

You are managing an Azure AI Search service with multiple replicas and partitions. During peak query hours, latency increases significantly, and CPU utilization on the search service hits 95%. You need to scale the service to improve query throughput without altering the index data schema. Which scaling action should you take?

You are designing a secure hybrid network architecture for an Azure OpenAI resource. Virtual machines inside a spoke virtual network must access the OpenAI service via a Private Endpoint. Additionally, domain name resolution must rely on an enterprise private DNS server hosted on-premises connected via ExpressRoute. Which DNS zone must you configure in Azure?

You are creating an Azure AI Services resource using Azure CLI. Which command parameter specifies the pricing tier of the resource?

Your development team has created a custom model using Azure Machine Learning. You need to deploy this model as a real-time web service endpoint with auto-scaling capabilities. Which deployment target should you select?

Your organization is running an Azure AI Search service and needs to restrict management operations (such as index creation and deletion) to administrators while allowing standard client applications to perform search queries only. How should you configure access?

You are setting up diagnostic logging for an Azure OpenAI resource. Your security team mandates that all log streams must be exported in real-time to a security information and event management (SIEM) platform outside Azure, such as Splunk. Which destination should you configure in the Azure Monitor diagnostic setting?

You are deploying an Azure AI service resource in the Azure portal. Which option specifies the geographic location where your data will be processed and stored?

You are managing an enterprise Azure OpenAI resource that experiences bursty traffic patterns. To optimize cost without sacrificing availability during sudden workload spikes, you decide to implement a caching layer for frequent prompts and responses. Which Azure service should you integrate in front of Azure OpenAI?

Your company uses Azure Policy to enforce governance across all subscriptions. A developer attempts to deploy an Azure OpenAI resource in a region that is prohibited by corporate policy. What happens during the deployment?

Your development team needs to deploy an Azure AI Search service and connect it to an Azure SQL Database containing source documents. Security requirements state that credentials must not be stored in application code. Which authentication method should you use between Azure AI Search and Azure SQL Database?

You are configuring rate limiting and request throttling for multiple client applications consuming an Azure OpenAI endpoint. Different clients have different tier agreements (Bronze, Silver, Gold). Where should you implement these tiered rate-limiting policies?

You are provisioning an Azure AI services account and want to ensure that all telemetry and monitoring metrics are collected. Which built-in monitoring feature is automatically enabled on Azure AI resources without requiring additional agent installation?

You are reviewing the Azure Cost Management dashboard to analyze spending on Azure AI services. Which grouping option allows you to see costs broken down by specific resource names?

Your organization is preparing for an annual external security audit. The auditor requests proof that all Azure AI resources comply with ISO 27001 standards. Where can you download the official compliance audit reports for Azure AI services?

You are designing a multi-tenant SaaS application on Azure. Each tenant requires isolation of their Azure OpenAI token usage and cost tracking. What is the recommended provisioning strategy to achieve strict cost and quota isolation per tenant?

You are deploying an Azure AI Document Intelligence resource. You need to ensure that only client requests coming from your corporate public IP address range can access the endpoint. Which networking configuration should you apply?

Your organization has deployed an Azure AI Custom Vision model. You need to automate the retraining pipeline whenever new training images are uploaded to an Azure Blob Storage container. Which Azure service should you use to trigger the retraining pipeline?

You are troubleshooting a performance issue where requests to an Azure OpenAI model deployment experience intermittent HTTP 429 errors. You examine Azure Monitor metrics and see that the 'Processed Tokens' metric is well below your provisioned limit, but the 'Requests' metric spikes. What is the root cause of the error?

You are reviewing security settings for an Azure AI Services account. You need to verify whether local authentication using API keys is enabled or disabled. Where in the Azure portal can you find this setting?

Your organization wants to ensure that all Azure AI resources created in any subscription across the tenant adhere to a standardized naming convention (e.g., prefixing with 'ai-'). Which Azure governance tool should you use?

You are managing an Azure OpenAI model deployment in an active-passive multi-region disaster recovery architecture. A regional outage occurs, and you failover traffic to the secondary region. However, clients report receiving authentication errors. What is the most likely cause?

You are deploying an Azure AI Speech resource using an ARM template. Which parameter defines the name of the resource instance?

Your enterprise team is deploying multiple Azure AI Custom Vision resources across different development stages (Dev, Test, Prod). You need to ensure that billing costs for the Dev environment are billed to a specific cost center. Which Azure feature should you use to categorize these costs?

You are provisioning an Azure AI services account and want to view your current API key. Where can you retrieve the API key in the Azure portal?

You are designing an automated deployment pipeline for Azure AI Search using GitHub Actions. The pipeline must authenticate to Azure securely without storing credentials or long-lived secrets in GitHub repository settings. Which authentication mechanism should you implement?

You are provisioning an Azure AI services account and need to select the kind of resource. Which kind parameter value should you select for an Azure OpenAI deployment?

Your organization is deploying an Azure OpenAI resource. Your security policy requires that all network traffic destined for the OpenAI service must traverse a secure hub-and-spoke virtual network topology and pass through an Azure Firewall instance. How should you route outbound traffic from your application subnet to Azure OpenAI?

Your organization is running multiple Azure AI services. You need to configure alerts so that when the availability of any AI service drops below 99.% over a 15-minute window, an incident is created in ServiceNow. Which Azure Monitor feature should you use?

You are designing a high-throughput, low-latency architecture for an Azure OpenAI application. Clients are distributed globally across North America, Europe, and Asia. To ensure minimal latency and high availability, you decide to deploy multiple Azure OpenAI instances in different regions. How should you route incoming client requests to the nearest optimal region?

You are managing an enterprise Azure AI Search deployment. During an audit, you notice that index data is encrypted at rest using Microsoft-managed keys. Management mandates that you switch to customer-managed keys (CMK) stored in Azure Key Vault immediately without losing index data or rebuilding the service. How should you implement this?

You are planning the security architecture for an enterprise Azure AI multi-service account. Management requires that access to the resource be strictly controlled and audited. Which TWO security features or configurations should you implement? Each correct answer presents part of the solution.

Your organization is establishing a governance framework for Azure AI resources. You need to ensure cost control, tagging compliance, and security posture management across all subscriptions. Which THREE Azure services or features should you deploy? Each correct answer presents part of the solution.

Your organization requires that all Azure AI resources maintain rigorous logging and diagnostic tracking. Which TWO data categories can you collect using Azure Monitor diagnostic settings for Azure AI services? Each correct answer presents part of the solution.

You are troubleshooting a scenario where client applications are unable to connect to an Azure AI Language resource secured by a Private Endpoint. Which TWO troubleshooting steps should you perform? Each correct answer presents part of the solution.

You are optimizing the cost of your Azure AI infrastructure. You notice several resources are underutilized or incorrectly provisioned. Which THREE actions should you take to reduce unnecessary spending? Each correct answer presents part of the solution.

You are designing a disaster recovery and high availability strategy for an enterprise Azure OpenAI deployment. Which THREE architectural components or practices should you include? Each correct answer presents part of the solution.

You are preparing an ARM template to deploy an Azure AI multi-service account. Which TWO properties are mandatory within the ARM template resource definition? Each correct answer presents part of the solution.

Your organization is implementing strict network isolation for Azure OpenAI. Direct internet access from worker nodes is prohibited. Which THREE mechanisms must be correctly configured to allow secure communication? Each correct answer presents part of the solution.

You are managing Azure OpenAI deployments and need to monitor token consumption and error rates. Which TWO Azure Monitor features should you use to analyze this telemetry? Each correct answer presents part of the solution.

When configuring role-based access control (RBAC) for an Azure AI Services account, which TWO built-in roles are appropriate for assigning to users who only need to invoke AI models without managing the underlying resource infrastructure? Each correct answer presents part of the solution.

You are designing a deployment strategy for an Azure AI Custom Vision project in an enterprise pipeline. Which THREE practices should you follow to ensure secure and repeatable deployments? Each correct answer presents part of the solution.

Your company's compliance mandate requires that all data processed by Azure AI Speech and Document Intelligence services remain encrypted using keys managed entirely by your organization. Which THREE configuration steps are required? Each correct answer presents part of the solution.

You are designing a secure, production-grade architecture for an Azure AI Search service integrated with Azure OpenAI. Which THREE security and operational best practices should you implement? Each correct answer presents part of the solution.

You are managing cost allocation for multiple Azure AI services across different departments. Which TWO Azure tools or features can help you analyze and attribute these costs accurately? Each correct answer presents part of the solution.

You are troubleshooting a deployment failure where an ARM template fails to provision an Azure OpenAI account. Which TWO potential causes should you investigate? Each correct answer presents part of the solution.

You are planning the deployment of Azure AI containers in an on-premises disconnected environment. Which THREE prerequisites and operational considerations must you address? Each correct answer presents part of the solution.

When planning the deployment of an Azure AI Search service, which TWO sizing and capacity parameters must you configure during creation? Each correct answer presents part of the solution.

Your organization is implementing a model versioning and rollout strategy for Azure OpenAI deployments. Which TWO practices ensure safe deployment and quick rollback capabilities? Each correct answer presents part of the solution.

You are conducting a security review of an Azure AI Search service and Azure OpenAI integration. You discover potential security misconfigurations. Which THREE remediation actions should you take to align with Azure security benchmarks? Each correct answer presents part of the solution.

You are provisioning a new Azure AI multi-service account in the West US region for an enterprise application. Which pricing tier should you select to ensure the account supports all available Azure AI capabilities including Custom Neural Voice and Content Moderator?

Your enterprise organization operates under strict data residency and sovereignty requirements. You are deploying Azure OpenAI and Azure AI Language services. Which THREE architectural decisions ensure compliance with data residency mandates? Each correct answer presents part of the solution.

Your company requires that all Azure AI service endpoints are accessible only from within a specific Azure Virtual Network (VNet) and that public internet access is completely disabled. How should you configure the Azure AI resource networking settings?

You are setting up budget alerts for your Azure AI services to prevent unexpected overspending. Which Azure tool should you use to create these alerts and automatically trigger an action group when the budget threshold reaches 90%?

You need to implement token-based authentication using Azure AD (Microsoft Entra ID) for a Python application consuming an Azure OpenAI resource. Which authorization header format must your application use to authenticate successfully?

Your development team needs to monitor the latency and total call volume of an Azure AI Document Intelligence resource in near real-time. Where can you view these pre-aggregated metrics without writing custom log queries?

You are managing an Azure AI Custom Vision project and need to automate model training and evaluation updates as new training images are tagged. Which REST API or SDK component should you use to initiate the training iteration process?

Your organization requires that all data sent to Azure OpenAI Service remains encrypted using a key that your security team fully controls and rotates. Which feature should you configure during resource creation?

You are configuring diagnostic settings for an Azure AI Search service to audit administrative actions and query logs. Which destination should you choose if you want to stream these logs into a SIEM tool like Microsoft Sentinel for real-time security analysis?

You are deploying an Azure OpenAI GPT-4 model in a region experiencing high demand, and you need to guarantee a dedicated throughput level without contending with other tenants. Which deployment type should you select?

You are migrating an Azure AI Speech service resource to a different Azure subscription within the same tenant. Which mechanism should you use to preserve the existing custom voice models and configurations?

You are implementing a multi-region disaster recovery strategy for an Azure OpenAI deployment. If the primary region goes down, how should you configure traffic redirection to the secondary region using Azure Front Door?

Your development team needs to test a new Azure AI Language service feature without incurring ongoing charges when the service is idle. Which billing model is appropriate for initial prototyping?

You need to restrict access to an Azure AI Custom Vision training resource so that only members of a specific Azure AD security group can manage projects and train models. How should you configure access control?

You are auditing your Azure AI services for cost optimization. You discover an Azure AI Search service that has been over-provisioned with too many search units and replica nodes. How can you right-size the service without losing your existing indexes?

You are provisioning an Azure AI Language resource and want to ensure that all telemetry and activity logs are retained for compliance auditing over a 365-day period. Where should you configure this retention policy?

Your development team wants to deploy a new version of an Azure OpenAI model while ensuring zero downtime for client applications currently calling the existing model deployment. What is the recommended deployment strategy?

You need to secure communications between an Azure App Service hosting your web app and an Azure AI Computer Vision service. The web app must authenticate to Computer Vision without storing API keys in application settings. Which feature should you enable?

You are monitoring the health and operational status of an Azure AI multi-service account. Which TWO built-in metrics can you track in Azure Monitor to evaluate performance and reliability? (Choose two.)

You are hardening an Azure OpenAI service deployment for a financial application that handles sensitive customer data. Which THREE security configurations should you apply? (Choose three.)

Your organization is planning to deploy multiple Azure AI services and needs to implement robust cost management and governance practices. Which TWO actions should you take? (Choose two.)

When planning the model selection and versioning lifecycle for Azure OpenAI deployments in an enterprise environment, which TWO practices should you follow? (Choose two.)

You are designing a high-availability architecture for an Azure AI Speech service solution. Which THREE practices should you incorporate into your design? (Choose three.)

When establishing a governance strategy for Azure AI resources across multiple cloud teams, which THREE administrative tasks should an administrator perform? (Choose three.)

Your company wants to track and allocate Azure AI service costs by department. Which TWO mechanisms can assist with this requirement? (Choose two.)

You are configuring network isolation and security for an Azure AI Search service that connects to an Azure SQL Database backend. Which THREE features can you utilize to secure this data flow? (Choose three.)

Your company is provisioning a new Azure AI Services multi-service resource. The security team mandates that all network traffic between the client applications and the Azure AI endpoint must remain entirely within the Microsoft backbone network without traversing the public internet. Which feature should you configure?

You are deploying a custom text classification model using Azure AI Language. You need to implement cost management controls and track exact expenditures by tagging the Azure AI resource with the internal project cost center 'CC-409'. Where should you configure these tags in the Azure Portal?

You are designing a disaster recovery strategy for an Azure AI Document Intelligence resource. The business requirement is a Recovery Point Objective (RPO) of zero and Recovery Time Objective (RTO) of less than 15 minutes. Which deployment strategy should you select?

Your development team requires secure, passwordless authentication from an Azure Function to an Azure AI Vision resource. Which authentication mechanism should you implement to adhere to security best practices?

You are monitoring the performance of a deployed Azure OpenAI model. You notice occasional HTTP 429 (Too Many Requests) errors occurring during peak traffic hours. Which monitoring and management action should you take to resolve this issue?

You need to provision an Azure AI resource that allows developers to access multiple AI capabilities (such as Vision, Speech, and Language) using a single endpoint and a single API key. Which resource type should you create?

Your organization has strict compliance policies requiring all Azure AI Services endpoints to reject connections that do not use Transport Layer Security (TLS) version 1.3. Where can you enforce this minimum TLS version setting?

Your enterprise architecture team is reviewing the security posture of an Azure AI deployment that handles sensitive financial documents. Which TWO actions should you implement to secure data in transit and at rest? (Choose two.)

When planning an Azure AI solution deployment strategy, what are THREE key considerations for model versioning and lifecycle management? (Choose three.)

You are troubleshooting an intermittent connectivity issue between a client application and an Azure AI Speech service that sits behind an Azure Firewall and a Virtual Network. Which THREE diagnostic steps or tools should you utilize? (Choose three.)

You need to ensure that an Azure AI services resource is accessible only from a specific virtual network. Which configuration should you update in the Azure portal?

You are deploying a custom model to an Azure AI managed endpoint. You need to ensure the deployment can access a Key Vault secret without storing credentials in the deployment configuration. What should you do?

You are managing costs for a multi-tenant Azure AI project. You need to attribute usage costs specifically to the 'Research' department. What is the most effective approach?

You have an Azure AI Search service. You need to monitor the number of failed queries to identify potential indexing issues. Which tool should you use?

A company requires that all AI models be approved by a compliance officer before they are deployed to production. Which feature facilitates this workflow?

Which authentication method is recommended to prevent 'key leakage' in Azure AI Services?

You are deploying a model that requires significant GPU resources. You want to ensure the deployment only scales when the average CPU load exceeds 70%. Which feature of Azure AI managed endpoints do you configure?

You need to view the latency of requests made to an Azure AI services endpoint. Where do you find this information?

You have an Azure AI application that is hitting rate limits (429 errors). You need to determine which specific client application is causing the issue. How do you identify this?

Which Azure feature allows you to control which users can modify or delete your Azure AI resources?

You are migrating an Azure AI service from one region to another. What is the most efficient way to migrate the configuration?

What is the purpose of a 'Resource Group' in the context of Azure AI solutions?

You need to ensure that an AI model deployment is resilient to regional outages. What should you implement?

When setting up an Azure AI service, you choose the 'Standard' tier. What is the primary benefit of this compared to the 'Free' tier?

You have an Azure AI endpoint exposed to the internet. You want to ensure traffic is inspected for malicious patterns. What is the recommended service?

You are using an Azure AI model that supports versioning. You want to perform an A/B test by routing 10% of traffic to a new version. Where do you configure this?

Which command line tool is primarily used for managing Azure resources, including AI services, from a terminal?

What is the purpose of 'Azure Advisor' in an AI solution?

Which TWO actions should you take to ensure that your Azure AI deployment is secure?

You are deploying a custom AI model using a container image stored in Azure Container Registry (ACR). How do you ensure the deployment can pull the image securely?

You need to export logs from your Azure AI service to an external SIEM (Security Information and Event Management) system. What is the best way to achieve this?

Your team needs to receive an email alert if the error rate for your AI endpoint exceeds 5% for more than 15 minutes. What should you create?

Which THREE features are critical for managing the lifecycle of an AI model in a production environment?

Which TWO monitoring strategies are effective for detecting 'data drift' in a deployed AI model?

Which THREE of the following are common Azure cost management tools that you should use to manage your AI solution budget?

Which TWO techniques are effective for improving the performance of an Azure AI application?

Which TWO strategies are recommended for handling high-volume traffic to an Azure AI endpoint?

Which THREE options are available for configuring network security in Azure?

Which THREE security principles should you follow when managing Azure AI resources?

Which THREE authentication/authorization mechanisms are supported for accessing Azure AI services securely?