AI-103 Plan And Manage AN Azure AI Solution Practice Test 6 — 15 Questions

Question 1

You are provisioning a new Azure AI multi-service account in the West US region for an enterprise application. Which pricing tier should you select to ensure the account supports all available Azure AI capabilities including Custom Neural Voice and Content Moderator?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Standard (S0). The Standard (S0) pricing tier is required for full access to standard and advanced Azure AI services. The Free (F0) tier has transaction limits and restricted feature sets.

Answer

Free (F0)

Answer

Isolated (I0)

Answer

Basic (B0)

Question 2

Your enterprise organization operates under strict data residency and sovereignty requirements. You are deploying Azure OpenAI and Azure AI Language services. Which THREE architectural decisions ensure compliance with data residency mandates? Each correct answer presents part of the solution.

Accepted Answer

Verify Microsoft's data privacy commitments guaranteeing that customer data is not used to train base models.. Deploying in local regions, verifying data privacy terms, and avoiding cross-region logging ensure compliance.

Answer

Store unencrypted customer prompts on public GitHub repositories.

Answer

Route all inference requests through public relay nodes located in foreign countries to save bandwidth costs.

Question 3

Your company requires that all Azure AI service endpoints are accessible only from within a specific Azure Virtual Network (VNet) and that public internet access is completely disabled. How should you configure the Azure AI resource networking settings?

Accepted Answer

Disable public network access on the Networking blade and create a Private Endpoint associated with your VNet and subnet.. Disabling public access and configuring private endpoints ensures that traffic flows securely through the Microsoft backbone network and is isolated to the specified VNet.

Answer

Set the routing preference to Microsoft network routing and enable service endpoints on the default subnet.

Answer

Configure the firewall to allow only the corporate public IP address range and keep public network access enabled.

Answer

Deploy an Azure Application Gateway in front of the Azure AI multi-service account endpoint.

Question 4

You are setting up budget alerts for your Azure AI services to prevent unexpected overspending. Which Azure tool should you use to create these alerts and automatically trigger an action group when the budget threshold reaches 90%?

Accepted Answer

Azure Cost Management + Billing budgets. Azure Cost Management + Billing allows you to create budgets and configure alert conditions tied to action groups for automated responses.

Answer

Azure Monitor alerts

Answer

Microsoft Defender for Cloud pricing settings

Answer

Azure Advisor cost recommendations

Question 5

You need to implement token-based authentication using Azure AD (Microsoft Entra ID) for a Python application consuming an Azure OpenAI resource. Which authorization header format must your application use to authenticate successfully?

Accepted Answer

Authorization: Bearer . When using Microsoft Entra ID authentication for Azure AI services, requests must include a Bearer token obtained from the token endpoint, formatted as Authorization: Bearer .

Answer

Authorization: API-Key <api_key_value>

Answer

X-MS-Token: <access_token>

Answer

Ocp-Apim-Subscription-Key: <access_token>

Question 6

Your development team needs to monitor the latency and total call volume of an Azure AI Document Intelligence resource in near real-time. Where can you view these pre-aggregated metrics without writing custom log queries?

Accepted Answer

The Metrics blade of the Azure AI Document Intelligence resource in the Azure portal. The Metrics blade in the Azure portal for the specific resource provides built-in charts for latency, total calls, and success/error rates.

Answer

The Cost Management + Billing cost analysis dashboard

Answer

The Log Analytics workspace query editor using KQL

Answer

The Azure Advisor recommendations blade

Question 7

You are managing an Azure AI Custom Vision project and need to automate model training and evaluation updates as new training images are tagged. Which REST API or SDK component should you use to initiate the training iteration process?

Accepted Answer

Custom Vision Training API TrainProject method. The Custom Vision Training API (or corresponding SDK) provides methods to start training a new iteration of the project.

Answer

Azure Machine Learning Pipeline REST endpoint

Answer

Azure AI Vision Prediction API

Answer

Azure AI Content Safety moderation batch API

Question 8

Your organization requires that all data sent to Azure OpenAI Service remains encrypted using a key that your security team fully controls and rotates. Which feature should you configure during resource creation?

Accepted Answer

Customer-managed keys (CMK) with Azure Key Vault. Customer-managed keys (CMK) via Azure Key Vault allow organizations to manage encryption keys used to secure Azure AI service data.

Answer

Azure Information Protection client-side encryption

Answer

Service-managed keys (Default encryption)

Answer

Transparent Data Encryption with a SQL Managed Instance

Question 9

You are configuring diagnostic settings for an Azure AI Search service to audit administrative actions and query logs. Which destination should you choose if you want to stream these logs into a SIEM tool like Microsoft Sentinel for real-time security analysis?

Accepted Answer

Send to an Event Hub. Streaming diagnostic logs to an Event Hub allows external SIEM tools like Microsoft Sentinel to ingest and analyze the log data in real time.

Answer

Send to an Azure DevOps pipeline

Answer

Export to a local CSV file via Azure CLI

Answer

Archive to a storage account

Question 10

You are deploying an Azure OpenAI GPT-4 model in a region experiencing high demand, and you need to guarantee a dedicated throughput level without contending with other tenants. Which deployment type should you select?

Accepted Answer

Provisioned (PTU) deployment. Provisioned Throughput Units (PTUs) provide reserved, guaranteed model throughput for predictable performance and workloads.

Answer

Serverless deployment

Answer

Standard deployment

Answer

Batch deployment

Question 11

You are migrating an Azure AI Speech service resource to a different Azure subscription within the same tenant. Which mechanism should you use to preserve the existing custom voice models and configurations?

Accepted Answer

Use the Azure portal resource move feature to transfer the Speech resource to the target subscription.. Azure Resource Mover or subscription-level resource move operations allow moving cognitive service resources while retaining custom models and configurations, provided regional constraints are met.

Answer

Export custom models as JSON and import them via the Speech Studio in the new subscription.

Answer

Export the resource ARM template and deploy it to the target subscription.

Answer

Recreate the custom models from scratch in the new subscription using a new Speech resource.

Question 12

You are implementing a multi-region disaster recovery strategy for an Azure OpenAI deployment. If the primary region goes down, how should you configure traffic redirection to the secondary region using Azure Front Door?

Accepted Answer

Use priority routing with the primary region set to priority 1 and the secondary region set to priority 2.. Configuring a priority routing method in Azure Front Door enables automatic failover to the secondary region when the primary endpoint fails health probes.

Answer

Use geographic routing based on the client IP location.

Answer

Use weighted routing with a 50/50 split between regions.

Answer

Use performance-based routing to the lowest latency node.

Question 13

Your development team needs to test a new Azure AI Language service feature without incurring ongoing charges when the service is idle. Which billing model is appropriate for initial prototyping?

Accepted Answer

Pay-as-you-go (Consumption-based metering). The pay-as-you-go pricing model charges only for transactions processed, meaning no charges accrue when the service is idle.

Answer

Dedicated hardware hosting

Answer

Reserved Instance 3-year term

Answer

Commitment tier (Pre-purchased capacity)

Question 14

You need to restrict access to an Azure AI Custom Vision training resource so that only members of a specific Azure AD security group can manage projects and train models. How should you configure access control?

Accepted Answer

Assign the Cognitive Services Contributor role to the Azure AD security group at the resource scope.. Role-Based Access Control (RBAC) allows assigning built-in or custom roles like Cognitive Services Contributor to specific Azure AD security groups at the resource scope.

Answer

Configure IP firewall rules on the networking blade.

Answer

Enable managed identity on the resource and assign it to the security group.

Answer

Generate and distribute secondary API keys to group members.

Question 15

You are auditing your Azure AI services for cost optimization. You discover an Azure AI Search service that has been over-provisioned with too many search units and replica nodes. How can you right-size the service without losing your existing indexes?

Accepted Answer

Modify the scale settings in the Azure portal to reduce the number of replicas and partitions.. You can scale down search units and replicas directly through the Azure portal or management API without losing indexes, provided the data fits within the reduced storage limits.

Answer

Switch the pricing tier from Standard to Free.

Answer

Export all index definitions, delete the service, and re-import the indexes into a new Basic tier service.

Answer

Delete the search service and recreate it with fewer replicas and partitions.