AI-103 Plan And Manage AN Azure AI Solution Practice Test 2 — 15 Questions

Question 1

You are setting up cost alerts for your Azure subscription, which contains several Azure AI services resources. You want to receive an email notification when your month-to-date spending reaches 80% of your $5,000 budget. Which feature should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Cost Management budgets and alerts. Azure Cost Management budgets allow you to set spending thresholds and associate them with action groups for email notifications.

Answer

Microsoft Defender for Cloud security alerts

Answer

Azure Monitor activity log alerts

Answer

Azure Advisor cost recommendations

Question 2

You are designing an automated pipeline to deploy Azure AI Custom Vision projects using Infrastructure as Code (IaC) with Bicep. You need to reference an existing Custom Vision training resource in your deployment script without hardcoding its endpoint URL or primary key. Which Bicep construct should you use to retrieve these properties dynamically?

Accepted Answer

The Bicep 'existing' keyword reference. The 'existing' keyword in Bicep allows you to reference an already deployed Azure resource to read its properties or output keys without recreating it.

Answer

The ARM template 'reference()' function inside a Bicep file

Answer

An Azure Key Vault secret data source

Answer

A Bicep module output parameter from a separate template

Question 3

Your company is deploying an Azure OpenAI gpt-4 model. You need to implement model versioning so that when Microsoft releases a newer model version, you can test it on a small subset of user traffic before rolling it out to all users. Which feature should you configure?

Accepted Answer

Create multiple model deployments with different version tags and configure traffic splitting weights.. Azure OpenAI model deployments support setting weight allocations or creating multiple deployments for canary testing and traffic splitting.

Answer

Enable dynamic scaling rules in Azure Kubernetes Service (AKS).

Answer

Configure Azure Traffic Manager with two regional endpoints.

Answer

Use Azure Application Gateway URL path-based routing.

Question 4

You are auditing your Azure subscription and find several unused Azure AI Content Safety resources that are incurring base charges. You want to remove the resources permanently. Which operation should you perform?

Accepted Answer

Delete the Azure AI Content Safety resource from the Azure portal.. Deleting the resource group or the individual Azure AI resource via the Azure portal or CLI permanently removes it and stops all associated charges.

Answer

Remove the role assignments from the resource.

Answer

Stop the Azure AI Content Safety resource state.

Answer

Disable the keys associated with the resource.

Question 5

You are deploying an Azure AI Document Intelligence container in an on-premises disconnected environment. The container requires periodic license validation against Azure. What is the maximum duration the container can operate offline before requiring reconnection to Azure for billing and metering validation?

Accepted Answer

Up to 30 days. Disconnected containers for Azure AI services require synchronization with Azure at least every designated billing period, typically up to 29 or 30 days depending on the specific service terms.

Answer

Exactly 7 days

Answer

Maximum of 24 hours

Answer

Indefinitely without any connection required

Question 6

You are provisioning a new Azure AI Search service. You need to choose a pricing tier that supports semantic search capabilities. Which minimum tier should you select?

Accepted Answer

Standard (S1). Semantic search in Azure AI Search requires at least the Standard tier (S1) with specific capacity configurations.

Answer

Basic

Answer

Free

Answer

Storage Optimized (L1)

Question 7

You need to programmatically check the health status of an Azure OpenAI service endpoint. Which HTTP method and path suffix should your health-check script use?

Accepted Answer

GET /openai/operations. Azure AI Services provide standard health check endpoints to verify service availability.

Answer

DELETE /openai/keys/revoke

Answer

POST /openai/deployments/delete

Answer

PUT /openai/models/update

Question 8

Your organization has multiple Azure AI services deployed across different resource groups. Your security officer requests a centralized dashboard to monitor security recommendations, vulnerability assessments, and compliance posture for all AI resources. Which Azure service should you open?

Accepted Answer

Microsoft Defender for Cloud. Microsoft Defender for Cloud provides centralized visibility and security posture recommendations across all Azure resources, including AI services.

Answer

Azure Advisor

Answer

Microsoft Entra ID protection portal

Answer

Azure Policy compliance blade

Question 9

You are deploying an Azure AI Speech container on an Azure Kubernetes Service (AKS) cluster. Your security policy dictates that pod-to-pod communication within the cluster must be encrypted in transit using mTLS, and egress traffic to Azure must flow through a strict outbound firewall. Which Kubernetes feature should you implement?

Accepted Answer

Kubernetes Network Policies combined with a service mesh for mTLS. Kubernetes network policies control traffic flow between pods, while a service mesh (like Istio or Linkerd) provides mTLS encryption in transit.

Answer

Azure Container Registry vulnerability scanning

Answer

Azure Bastion deployed inside the AKS worker node subnet

Answer

AKS cluster auto-scaler configuration

Question 10

You are deploying an Azure AI resource and want to organize it logically within your Azure hierarchy. Which scope is the highest level at which you can assign Azure RBAC roles for your AI resource?

Accepted Answer

Management Group. The Management Group scope is higher than subscription, resource group, and resource scopes in Azure RBAC hierarchy.

Answer

Tenant root group

Answer

Resource Group

Answer

Azure AI Resource instance

Question 11

Your organization operates in a highly regulated financial sector. You are required to ensure that all data stored by your Azure AI Custom Vision project is encrypted using a custom encryption key managed by your team in Azure Key Vault, rather than a Microsoft-managed key. Which feature must you configure during resource creation?

Accepted Answer

Customer-Managed Keys (CMK) with Azure Key Vault. Customer-managed keys (CMK) using Azure Key Vault allow organizations to control their encryption keys for Azure AI Services.

Answer

Storage Account Shared Access Signatures (SAS)

Answer

Microsoft Defender for Key Vault threat detection

Answer

Azure Information Protection sensitivity labels

Question 12

You are managing an Azure AI Search service with multiple replicas and partitions. During peak query hours, latency increases significantly, and CPU utilization on the search service hits 95%. You need to scale the service to improve query throughput without altering the index data schema. Which scaling action should you take?

Accepted Answer

Increase the number of search replicas in the Azure portal or via CLI.. Scaling out by adding search replicas increases query throughput and high availability.

Answer

Increase the number of search partitions.

Answer

Disable semantic ranking to reduce compute overhead.

Answer

Migrate the service to the Free pricing tier.

Question 13

You are designing a secure hybrid network architecture for an Azure OpenAI resource. Virtual machines inside a spoke virtual network must access the OpenAI service via a Private Endpoint. Additionally, domain name resolution must rely on an enterprise private DNS server hosted on-premises connected via ExpressRoute. Which DNS zone must you configure in Azure?

Accepted Answer

privatelink.openai.azure.com Private DNS zone. Private endpoints require configuring a Private DNS Zone matching the service's domain suffix (e.g., privatelink.openai.azure.com) linked to the virtual network.

Answer

privatelink.cognitiveservices.azure.com Private DNS zone

Answer

azurewebsites.net public DNS zone

Answer

cognitiveservices.azure.com public DNS zone

Question 14

You are creating an Azure AI Services resource using Azure CLI. Which command parameter specifies the pricing tier of the resource?

Accepted Answer

--sku. The '--sku' parameter in Azure CLI commands (like 'az cognitiveservices account create') specifies the pricing tier.

Answer

--tier

Answer

--pricing

Answer

--kind

Question 15

Your development team has created a custom model using Azure Machine Learning. You need to deploy this model as a real-time web service endpoint with auto-scaling capabilities. Which deployment target should you select?

Accepted Answer

Azure Managed Online Endpoint. Azure Managed Online Endpoints provide a scalable, managed infrastructure for deploying machine learning models with automatic scaling.

Answer

Azure Functions consumption plan

Answer

Azure Container Registry webhook

Answer

Azure Batch cluster