AI-103 Plan And Manage AN Azure AI Solution Practice Test 5 — 15 Questions

Question 1

You are optimizing the cost of your Azure AI infrastructure. You notice several resources are underutilized or incorrectly provisioned. Which THREE actions should you take to reduce unnecessary spending? Each correct answer presents part of the solution.

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Downgrade development and test resources from high-tier production SKUs to free or lower standard tiers where appropriate.. Deleting idle resources, right-sizing tiers, and setting budgets reduce costs effectively.

Answer

Provision dedicated Azure OpenAI PTUs for idle development sandboxes.

Answer

Scale out search service partitions and replicas to maximum capacity permanently.

Question 2

You are designing a disaster recovery and high availability strategy for an enterprise Azure OpenAI deployment. Which THREE architectural components or practices should you include? Each correct answer presents part of the solution.

Accepted Answer

Configure Azure Monitor metric alerts to detect latency spikes or availability drops.. Multi-region deployments, client-side retry/failover logic, and monitoring metrics are essential for DR.

Answer

Rely exclusively on Azure Backup to snapshot live model memory states.

Answer

Store all model weights locally on client laptops for offline execution.

Question 3

You are preparing an ARM template to deploy an Azure AI multi-service account. Which TWO properties are mandatory within the ARM template resource definition? Each correct answer presents part of the solution.

Accepted Answer

sku. Name, kind, sku, and location are essential ARM template properties for cognitive services.

Answer

VirtualMachineSize

Answer

OperatingSystemType

Answer

KernelVersion

Question 4

Your organization is implementing strict network isolation for Azure OpenAI. Direct internet access from worker nodes is prohibited. Which THREE mechanisms must be correctly configured to allow secure communication? Each correct answer presents part of the solution.

Accepted Answer

Public network access disabled on the Azure OpenAI resource. Private endpoint, private DNS zone, and disabling public access ensure secure network isolation.

Answer

Public IP addresses assigned directly to the AI service endpoint

Answer

Azure Bastion host attached to the OpenAI backend storage

Question 5

You are managing Azure OpenAI deployments and need to monitor token consumption and error rates. Which TWO Azure Monitor features should you use to analyze this telemetry? Each correct answer presents part of the solution.

Accepted Answer

Azure Monitor Metrics Explorer to graph real-time metrics like Total Calls and Latency.. Log Analytics workspaces and Metrics Explorer are core Azure Monitor tools for analysis.

Answer

Azure DevOps commit history dashboard

Answer

Microsoft 365 compliance center content search

Answer

Azure Bastion session monitor

Question 6

When configuring role-based access control (RBAC) for an Azure AI Services account, which TWO built-in roles are appropriate for assigning to users who only need to invoke AI models without managing the underlying resource infrastructure? Each correct answer presents part of the solution.

Accepted Answer

Cognitive Services OpenAI User. Cognitive Services User and Cognitive Services OpenAI User grant least-privilege inference permissions.

Answer

Owner

Answer

Contributor

Answer

Storage Blob Data Reader

Question 7

You are designing a deployment strategy for an Azure AI Custom Vision project in an enterprise pipeline. Which THREE practices should you follow to ensure secure and repeatable deployments? Each correct answer presents part of the solution.

Accepted Answer

Store API keys and connection strings securely in Azure Key Vault rather than hardcoding them.. Using IaC, securing secrets in Key Vault, and automated validation tests are key practices.

Answer

Manually create and configure all production resources directly in the Azure portal without documentation.

Answer

Store production API keys as plaintext comments in Bicep template files.

Question 8

Your company's compliance mandate requires that all data processed by Azure AI Speech and Document Intelligence services remain encrypted using keys managed entirely by your organization. Which THREE configuration steps are required? Each correct answer presents part of the solution.

Accepted Answer

Assign appropriate permissions for the AI service managed identity to access the Key Vault key.. CMK setup requires Key Vault creation, enabling soft-delete/purge protection, and linking the key to the AI service.

Answer

Store the private key as plain text in the application source code.

Answer

Disable all diagnostic logging across all Azure subscriptions.

Question 9

You are designing a secure, production-grade architecture for an Azure AI Search service integrated with Azure OpenAI. Which THREE security and operational best practices should you implement? Each correct answer presents part of the solution.

Accepted Answer

Configure Azure Monitor diagnostic settings to stream query performance and error logs to a Log Analytics workspace.. Managed identities, private endpoints, and monitoring metrics are essential best practices.

Answer

Publish administrative API keys publicly in GitHub repositories for easy developer access.

Answer

Use the Free pricing tier for high-throughput production workloads.

Question 10

You are managing cost allocation for multiple Azure AI services across different departments. Which TWO Azure tools or features can help you analyze and attribute these costs accurately? Each correct answer presents part of the solution.

Accepted Answer

Azure resource tags combined with Cost Management cost analysis grouping. Resource tags and Cost Management cost analysis are primary tools for cost attribution.

Answer

Azure Bastion session logs

Answer

Azure Active Directory enterprise user group memberships

Answer

Microsoft Defender for Cloud security recommendations

Question 11

You are troubleshooting a deployment failure where an ARM template fails to provision an Azure OpenAI account. Which TWO potential causes should you investigate? Each correct answer presents part of the solution.

Accepted Answer

The subscription has exceeded its regional quota or model deployment quota limit.. Quota limitations and region availability are common causes of OpenAI deployment failures.

Answer

The local workstation IP address is not whitelisted in Azure DevOps.

Answer

The client web browser cache is corrupted.

Answer

The local git repository has uncommitted changes.

Question 12

You are planning the deployment of Azure AI containers in an on-premises disconnected environment. Which THREE prerequisites and operational considerations must you address? Each correct answer presents part of the solution.

Accepted Answer

Submit an online application and obtain billing approval from Microsoft to use disconnected containers.. Application for approval, license downloading, and periodic re-authentication are required for disconnected containers.

Answer

Rely on perpetual offline execution without ever reporting telemetry to Azure.

Answer

Connect the container permanently to an active Azure SQL database over the public internet.

Question 13

When planning the deployment of an Azure AI Search service, which TWO sizing and capacity parameters must you configure during creation? Each correct answer presents part of the solution.

Accepted Answer

Replicas. Replicas and partitions are the core capacity parameters configured during search service creation.

Answer

Virtual CPU core count per hypervisor

Answer

Linux kernel version

Answer

Active Directory domain controller IP

Question 14

Your organization is implementing a model versioning and rollout strategy for Azure OpenAI deployments. Which TWO practices ensure safe deployment and quick rollback capabilities? Each correct answer presents part of the solution.

Accepted Answer

Deploy new model versions with distinct deployment names alongside existing versions.. Using unique deployment names and traffic splitting ensures safe rollouts and rollbacks.

Answer

Delete the entire Azure AI resource group prior to every model update.

Answer

Overwrite existing model weights in place without changing deployment names.

Answer

Hardcode model version numbers directly inside immutable compiled client binaries.

Question 15

You are conducting a security review of an Azure AI Search service and Azure OpenAI integration. You discover potential security misconfigurations. Which THREE remediation actions should you take to align with Azure security benchmarks? Each correct answer presents part of the solution.

Accepted Answer

Enable diagnostic logging and configure alerts for unauthorized access attempts and HTTP 401/403 errors.. Disabling public access, rotating keys, and using managed identities align with security benchmarks.

Answer

Grant Contributor permissions to anonymous external users.

Answer

Expose admin API keys in client-side single-page applications for direct access.