AI-103 Plan And Manage AN Azure AI Solution Practice Test 3 — 15 Questions

Question 1

Your organization is running an Azure AI Search service and needs to restrict management operations (such as index creation and deletion) to administrators while allowing standard client applications to perform search queries only. How should you configure access?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use Admin API keys for management operations and Query API keys for client search queries.. Azure AI Search supports both admin API keys (full access) and query API keys (read-only search access) for authorization.

Answer

Enable IP firewall rules to block index creation.

Answer

Configure CORS settings in the Azure portal.

Answer

Assign the Contributor role to client applications.

Question 2

You are setting up diagnostic logging for an Azure OpenAI resource. Your security team mandates that all log streams must be exported in real-time to a security information and event management (SIEM) platform outside Azure, such as Splunk. Which destination should you configure in the Azure Monitor diagnostic setting?

Accepted Answer

Stream to an Azure Event Hub. Azure Monitor diagnostic settings can stream logs to Azure Event Hubs, which can then integrate with external SIEM platforms like Splunk.

Answer

Send to a Microsoft Sentinel workbook

Answer

Configure an Azure Automation runbook webhook

Answer

Archive to an Azure Storage account container

Question 3

You are deploying an Azure AI service resource in the Azure portal. Which option specifies the geographic location where your data will be processed and stored?

Accepted Answer

Region. The 'Region' property determines the Azure datacenter location where resources are deployed and data is stored.

Answer

Tenant

Answer

Domain

Answer

Zone

Question 4

You are managing an enterprise Azure OpenAI resource that experiences bursty traffic patterns. To optimize cost without sacrificing availability during sudden workload spikes, you decide to implement a caching layer for frequent prompts and responses. Which Azure service should you integrate in front of Azure OpenAI?

Accepted Answer

Azure Cache for Redis. Azure Cache for Redis can be used to cache LLM prompt responses, reducing API calls to Azure OpenAI and lowering costs and latency.

Answer

Azure Traffic Manager routing profile

Answer

Azure ExpressRoute local gateway

Answer

Azure Content Delivery Network (CDN)

Question 5

Your company uses Azure Policy to enforce governance across all subscriptions. A developer attempts to deploy an Azure OpenAI resource in a region that is prohibited by corporate policy. What happens during the deployment?

Accepted Answer

The deployment is blocked and returns an error explaining the policy violation.. Azure Policy in 'Deny' mode blocks resource creation requests that violate policy rules.

Answer

Azure automatically moves the resource to an allowed region.

Answer

The resource is deployed successfully, but an email alert is sent to the administrator.

Answer

The deployment succeeds and automatically applies a remediation task.

Question 6

Your development team needs to deploy an Azure AI Search service and connect it to an Azure SQL Database containing source documents. Security requirements state that credentials must not be stored in application code. Which authentication method should you use between Azure AI Search and Azure SQL Database?

Accepted Answer

Managed Identity. Managed identities allow Azure services like AI Search to authenticate to other Azure services like SQL Database without storing credentials.

Answer

Shared Access Signature (SAS) token

Answer

Hardcoded SQL administrator password in indexer configuration

Answer

Anonymous access connection string

Question 7

You are configuring rate limiting and request throttling for multiple client applications consuming an Azure OpenAI endpoint. Different clients have different tier agreements (Bronze, Silver, Gold). Where should you implement these tiered rate-limiting policies?

Accepted Answer

Azure API Management (APIM). Azure API Management (APIM) provides advanced rate-limiting, quota enforcement, and policy expressions based on subscription keys or JWT tokens for different client tiers.

Answer

Azure Application Gateway custom WAF rules

Answer

Azure OpenAI service built-in tier settings

Answer

Network Security Group (NSG) outbound rules

Question 8

You are provisioning an Azure AI services account and want to ensure that all telemetry and monitoring metrics are collected. Which built-in monitoring feature is automatically enabled on Azure AI resources without requiring additional agent installation?

Accepted Answer

Azure Monitor platform metrics. Azure Monitor platform metrics are collected automatically for all Azure PaaS resources without installing agents.

Answer

Log Analytics Windows security agent

Answer

Application Insights SDK code instrumentation

Answer

Azure Diagnostics extension for Linux

Question 9

You are reviewing the Azure Cost Management dashboard to analyze spending on Azure AI services. Which grouping option allows you to see costs broken down by specific resource names?

Accepted Answer

Resource. Grouping by 'Resource' in Azure Cost Management displays costs associated with each individual resource instance.

Answer

Resource type

Answer

Meter category

Answer

Location

Question 10

Your organization is preparing for an annual external security audit. The auditor requests proof that all Azure AI resources comply with ISO 27001 standards. Where can you download the official compliance audit reports for Azure AI services?

Accepted Answer

Microsoft Service Trust Portal. Microsoft Service Trust Portal provides access to audit reports, compliance certifications, and security assessments for Azure services.

Answer

Microsoft 365 Admin Center security center

Answer

Visual Studio subscription benefits page

Answer

Azure OpenAI Studio compliance tab

Question 11

You are designing a multi-tenant SaaS application on Azure. Each tenant requires isolation of their Azure OpenAI token usage and cost tracking. What is the recommended provisioning strategy to achieve strict cost and quota isolation per tenant?

Accepted Answer

Provision a separate Azure OpenAI resource for each tenant.. Provisioning a dedicated Azure OpenAI resource per tenant provides absolute isolation for quotas, usage metrics, and cost tracking.

Answer

Use a single Azure OpenAI resource for all tenants and track usage using custom HTTP headers.

Answer

Deploy all tenants in the F0 free pricing tier.

Answer

Rely on Azure Cost Management resource group tags alone without resource separation.

Question 12

You are deploying an Azure AI Document Intelligence resource. You need to ensure that only client requests coming from your corporate public IP address range can access the endpoint. Which networking configuration should you apply?

Accepted Answer

Configure firewall virtual networks and IP address ranges in the Azure AI resource networking settings.. IP firewall rules on Azure AI services allow restricting inbound access to specified public IP address ranges or CIDR blocks.

Answer

Configure Azure Bastion access restriction rules.

Answer

Attach an Azure Application Gateway with a WAF policy.

Answer

Enable Microsoft Entra conditional access policies on the API keys.

Question 13

Your organization has deployed an Azure AI Custom Vision model. You need to automate the retraining pipeline whenever new training images are uploaded to an Azure Blob Storage container. Which Azure service should you use to trigger the retraining pipeline?

Accepted Answer

Azure Event Grid. Azure Event Grid reacts to storage events (such as blob creation) and can trigger workflows or Azure Functions to start retraining.

Answer

Azure ExpressRoute monitor

Answer

Azure Backup service

Answer

Azure Monitor alert rules

Question 14

You are troubleshooting a performance issue where requests to an Azure OpenAI model deployment experience intermittent HTTP 429 errors. You examine Azure Monitor metrics and see that the 'Processed Tokens' metric is well below your provisioned limit, but the 'Requests' metric spikes. What is the root cause of the error?

Accepted Answer

The request rate (Transactions Per Second) has exceeded the provisioned limit, even though token volume is within bounds.. HTTP 429 errors can be caused by exceeding Transactions Per Second (TPS) limits even if token quotas are not exhausted.

Answer

The model weights have become corrupted and require redeployment.

Answer

The Azure subscription has run out of monthly financial budget.

Answer

The Private Endpoint DNS resolution has failed.

Question 15

You are reviewing security settings for an Azure AI Services account. You need to verify whether local authentication using API keys is enabled or disabled. Where in the Azure portal can you find this setting?

Accepted Answer

Resource management -> Resource normalization / Networking / Security settings. The 'Resource management' -> 'Networking' or 'Access configuration' blade in the Azure portal manages local authentication settings (local auth disable toggle).

Answer

Azure Cost Management -> Billing scope

Answer

Microsoft Entra ID -> App registrations

Answer

Azure Monitor -> Diagnostic settings