AI-200 Practice Test 14 — 15 Questions

Question 1

Your application uses Cosmos DB for NoSQL to store product metadata and vectors. You need to perform a vector search that combines similarity scores with specific filter criteria on the 'category' field. How should you define your index policy to support this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Define a vector index policy and include the 'category' property in the indexing policy's included paths.. Vector index policies in Cosmos DB must be configured to support hybrid search by including the vector embedding path and the property filter path for efficient query execution.

Answer

Create a vector index policy containing only the vector embedding path.

Answer

Enable auto-indexing for all properties to ensure vector search works.

Answer

Use a stored procedure to perform the filter after the vector search result set is returned.

Question 2

Your enterprise application uses Azure Service Bus Topics. A specific downstream billing system needs to receive only messages where the 'Region' property in the message application properties equals 'NorthAmerica'. What should you create on the Service Bus subscription?

Accepted Answer

A SQL Filter or Correlation Filter on the subscription. Service Bus subscriptions support SQL filters and correlation filters. A correlation filter or SQL filter (e.g., Region = 'NorthAmerica') can be applied to the subscription to filter incoming topic messages.

Answer

An Event Grid Advanced Filter on the namespace topic

Answer

A Storage Queue access policy

Answer

An Event Hubs Partition Key routing rule

Question 3

You are building a RAG application using Azure AI Search. You want to ensure that the search results provided to the LLM are as relevant as possible by leveraging a re-ranking model. Which service must be enabled to utilize the 'Semantic Ranker'?

Accepted Answer

Standard Tier or higher. The Semantic Ranker is a feature that requires the Standard tier or higher in Azure AI Search to perform deep learning-based re-ranking.

Answer

Basic Tier

Answer

Free Tier

Answer

Storage Optimized Tier

Question 4

An event subscriber endpoint hosted on an Azure App Service web app is failing to receive events from an Azure Event Grid system topic. Upon investigation, you discover Event Grid received a handshake validation failure. What is the most likely cause?

Accepted Answer

The web app did not correctly handle and echo back the validation code during the Webhook handshake.. When creating an Event Grid subscription, Event Grid sends a Subscription Validation event with a validation code. The endpoint must respond with the validation code to prove ownership before events are delivered.

Answer

The event payload exceeded the 1 megabyte size limit.

Answer

The Service Bus connection string was incorrectly formatted.

Answer

The App Service pricing tier does not support HTTPS connections.

Question 5

You are implementing distributed tracing across an event-driven AI workflow that passes messages from Azure Service Bus to Azure Functions, and finally to an Azure Cosmos DB database. Which mechanism should you use to propagate correlation context between these services?

Accepted Answer

W3C Trace Context standard HTTP headers (such as traceparent) propagated through Service Bus message user properties.. OpenTelemetry and W3C Trace Context standards (using headers like `traceparent`) are automatically injected and propagated by Azure Service Bus client libraries and Azure Functions bindings.

Answer

Enabling Azure Monitor diagnostic logs on the storage account.

Answer

Using AMQP 1.0 session locks to lock the trace state across network boundaries.

Answer

Custom GUID generation stored exclusively in the Event Grid event subject field.

Question 6

You are building an order processing system with Azure Service Bus. Multiple clients might accidentally submit the exact same order twice within a 60-second window due to network retries. You need to prevent duplicate orders from entering the queue. What should you configure?

Accepted Answer

Enable Duplicate Detection on the queue and set the history time window to 60 seconds.. Azure Service Bus provides Duplicate Detection. When enabled, the broker inspects the MessageId property of incoming messages within a configurable time window (DuplicateDetectionHistoryTimeWindow) and drops duplicates.

Answer

Configure Auto-Forwarding to a dead-letter queue with a 60-second TTL.

Answer

Set the LockDuration property to 60 seconds.

Answer

Enable partitioning and set the partition key to the client IP address.

Question 7

Your team needs to process high-volume clickstream data from a web application using Apache Kafka protocols while leveraging Azure-managed infrastructure. Which Azure service should you deploy?

Accepted Answer

Azure Event Hubs. Azure Event Hubs provides a native Kafka endpoint, allowing existing Kafka producer and consumer applications to talk to Event Hubs without changing code.

Answer

Azure Event Grid

Answer

Azure Notification Hubs

Answer

Azure Service Bus

Question 8

Your organization uses Azure Event Grid to route cloud events across different departments. Security auditors require that all event traffic destined for a webhook endpoint is authenticated using Azure Active Directory (Microsoft Entra ID) bearer tokens. How should you configure the event subscription?

Accepted Answer

Configure a Managed Identity on the event subscription and select the target audience.. Event Grid allows you to configure Managed Identity (System-assigned or User-assigned) for webhook subscriptions so that Event Grid attaches a Microsoft Entra ID bearer token in the authorization header when invoking the webhook.

Answer

Enable IP firewall rules on the Event Grid topic to restrict traffic.

Answer

Use Basic Authentication with a static API key stored in App Settings.

Answer

Embed a Shared Access Signature (SAS) token directly in the webhook URL query parameters.

Question 9

Your application publishes events to an Azure Event Grid custom topic. You need to restrict publishing access so that only clients with a specific User-Assigned Managed Identity can send events. How should you secure the topic?

Accepted Answer

Assign the 'Event Grid Data Sender' role to the Managed Identity on the Event Grid topic resource scope.. Azure Event Grid supports Role-Based Access Control (RBAC) using Microsoft Entra ID. You can assign the 'Event Grid Data Sender' role to the Managed Identity on the Event Grid topic scope.

Answer

Embed the primary SAS access key into the client's application environment variables.

Answer

Enable AMQP 1.0 token authentication on the event subscription.

Answer

Configure an Azure Storage firewall rule on the topic endpoint.

Question 10

Your organization uses Azure Event Grid namespaces for MQTT client messaging in an industrial IoT scenario. Which authentication method should you configure for IoT devices connecting directly to the Event Grid namespace MQTT broker?

Accepted Answer

X.509 client certificates. Event Grid MQTT broker supports client authentication using X.509 client certificates with certificate thumbprint matching or CA certificate chains.

Answer

SQL Database connection strings

Answer

Anonymous access with IP restriction headers

Answer

OAuth 2.0 client credentials grant via Service Bus endpoints

Question 11

You are troubleshooting a connection issue where an on-premises worker application cannot connect to an Azure Event Hubs namespace over AMQP port 5671 due to strict corporate firewall rules. Only port 443 outbound traffic is allowed. How can you configure the client connection to bypass this restriction?

Accepted Answer

Configure the Event Hub client connection to use AMQP over WebSockets (port 443).. Azure Event Hubs and Service Bus client libraries support AMQP over WebSockets (port 443), allowing clients to tunnel AMQP traffic through HTTPS firewalls.

Answer

Deploy an Azure VPN Gateway on the local workstation.

Answer

Switch the connection string to use an Event Grid webhook protocol.

Answer

Open an Azure Support ticket to whitelist port 5671 on the Azure backbone router.

Question 12

You are designing a disaster recovery strategy for an Azure Event Hubs namespace. You configure Geo-Disaster Recovery pairing between a primary region (East US) and a secondary region (West US). During a disaster drill, you trigger a failover. What happens to the DNS alias pointing to the Event Hubs namespace?

Accepted Answer

The alias is automatically updated to point to the secondary namespace, enabling client reconnection without changing connection strings.. When Geo-DR failover is invoked, the DNS alias is repointed from the primary namespace to the secondary namespace automatically, ensuring client connection strings referencing the alias continue working.

Answer

The primary namespace automatically becomes the replica of the secondary namespace without breaking the pair.

Answer

The alias enters a Read-Only state for 24 hours while DNS propagation finishes globally.

Answer

The alias is permanently deleted and clients must be hardcoded with the secondary namespace connection string.

Question 13

You are troubleshooting event delivery failures in Azure Event Grid. Which TWO mechanisms can help you analyze or recover undeliverable events? (Choose two)

Accepted Answer

Configuring a Dead-Letter destination pointing to an Azure Blob Storage container. Event Grid supports configuring a dead-letter destination (Blob Storage) and viewing delivery metrics/logs via Azure Monitor diagnostic settings.

Answer

Enabling Service Bus message session locks on the event subscription

Answer

Running the az servicebus queue purge command

Answer

Using Event Hubs Capture to replay webhook HTTP headers

Question 14

You are configuring disaster recovery for an Azure Event Hubs namespace. You have established a geo-recovery pairing between a primary and secondary namespace. A failover has been executed. How should you re-establish replication back to the original primary namespace once it recovers?

Accepted Answer

Establish a new geo-recovery pairing or reverse the roles so the old primary becomes the secondary namespace.. After a failover, you must break the pairing or re-establish a new alias pairing pointing the old primary as the new secondary (reverse role) to sync data back.

Answer

Run the az eventhubs namespace sync command from the Azure CLI.

Answer

Delete both namespaces and recreate them using an Azure Resource Manager template.

Answer

Update the consumer group offsets manually on both namespaces.

Question 15

You are managing an Azure Service Bus Standard namespace. Your development team requests the ability to use Topics and Subscriptions. What action must you take to support this requirement?

Accepted Answer

Ensure the Service Bus namespace is at the Standard or Premium tier.. Azure Service Bus Standard and Premium tiers both support Topics and Subscriptions. Basic tier does not support Topics; therefore, the namespace must be at least Standard tier.

Answer

Enable AMQP 1.0 multiplexing on the Basic tier namespace.

Answer

Create an Event Hubs capture rule to simulate topic subscriptions.

Answer

Upgrade the namespace to Azure Event Grid Premium.