AI-200 Practice Test 20 — 15 Questions

Question 1

You are configuring diagnostic logging for an enterprise Azure OpenAI Service deployment. You need to forward logs to multiple destinations for security analysis and archiving. Which THREE of the following destinations are supported by Azure Monitor diagnostic settings? (Choose three)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Event Hubs. Diagnostic settings support routing logs and metrics to Log Analytics workspaces, Azure Storage accounts, and Azure Event Hubs.

Answer

Azure Container Registry local image cache

Answer

Azure Bastion host memory dump

Question 2

Your organization wants to ensure that all Azure AI development follows strict security and observability standards. Which TWO of the following practices should be enforced across teams? (Choose two)

Accepted Answer

Require Application Insights integration on all deployed web and AI applications.. Enforcing managed identities for authentication and integrating Application Insights SDK for tracing ensure security and observability standards.

Answer

Disable all monitoring to reduce cloud resource costs.

Answer

Use shared root passwords for all virtual machines.

Answer

Allow developers to store production database passwords in public README files.

Question 3

You need to monitor the monthly spending on Azure OpenAI token consumption and receive an alert when expenditures exceed a predefined threshold. Which tool should you use?

Accepted Answer

Azure Cost Management Budgets and Alerts. Azure Budgets in Cost Management allow you to set spending thresholds and automated email alerts when thresholds are reached.

Answer

Log Analytics Workspace usage and estimated costs view

Answer

Application Insights availability tests

Answer

Azure Security Center compliance dashboard

Question 4

You are designing an operational dashboard in Azure Monitor. Which TWO visualization components can you include in an Azure Workbook? (Choose two)

Accepted Answer

KQL query result grids and charts. Azure Workbooks support KQL query grids/charts and metric charts.

Answer

Azure SQL database table creation scripts (DDL)

Answer

Azure Key Vault plain-text master password files

Answer

Docker container image binary layers

Question 5

You want to monitor the health of your AI services. Which TWO of the following can be configured to alert you automatically when model latency exceeds a predefined threshold? (Choose TWO)

Accepted Answer

Azure Monitor Metric Alerts.. Azure Monitor Alerts and Log Analytics alerts can both be configured to trigger based on threshold conditions for AI service metrics.

Answer

Azure Resource Graph alerts.

Answer

Azure Advisor alerts.

Answer

Microsoft Defender for Cloud alerts.

Question 6

When configuring Azure Monitor alerts for an AI application, which TWO action types can be included in an Action Group to notify operations personnel? (Choose two)

Accepted Answer

Webhook integration to trigger automated incident creation in ITSM tools. Action groups support multiple notification channels including email, SMS, push notifications, and webhooks.

Answer

Direct formatting of Azure billing invoices

Answer

Automated deletion of Azure subscription resources

Answer

Local BIOS firmware updates for physical hypervisors

Question 7

Which THREE logs or telemetry types should you collect in Azure Monitor to comprehensively troubleshoot an AI-powered web application?

Accepted Answer

Application requests and response status codes.. Application Insights collects request telemetry, dependency tracking for API calls, and trace logs for debugging logic.

Answer

Azure Bastion audit logs.

Answer

Azure Firewall packet capture PCAP files.

Question 8

You are monitoring a custom AI application using Application Insights. You need to track the duration of specific LLM prompt processing calls. Which telemetry type should you use to record this performance data?

Accepted Answer

Dependency telemetry. Dependencies are used to track calls to external services like APIs, databases, or LLM endpoints, making them ideal for tracking processing duration.

Answer

Trace telemetry

Answer

Request telemetry

Answer

Custom Metrics

Question 9

You are troubleshooting a latency issue with an AI model deployed in a Virtual Machine. You suspect the issue is related to storage IOPS limits. Which tool should you use to check the storage performance metrics?

Accepted Answer

Azure Monitor Metrics for the Virtual Machine.. Azure Monitor 'Metrics' for the Virtual Machine resource provides 'Disk Read Operations/sec' and 'Disk Write Operations/sec', which are key for diagnosing IOPS bottlenecks.

Answer

Azure Network Watcher.

Answer

Azure Resource Graph Explorer.

Answer

Application Insights Dependency logs.

Question 10

Your production Azure Machine Learning inference endpoint is failing due to unauthorized access attempts. You decide to use Managed Identities to secure the connection to an Azure Key Vault. What is the correct sequence of operations to ensure the scoring script can retrieve secrets?

Accepted Answer

Enable a System-assigned Managed Identity on the endpoint and grant the identity the Key Vault Secrets User role.. You must enable the system-assigned managed identity on the Managed Online Endpoint and then grant that identity 'Get' permissions on the Key Vault access policy.

Answer

Grant the Azure Machine Learning workspace identity contributor access to the entire Key Vault resource.

Answer

Assign the endpoint a Service Principal secret and store it in the environment variables of the scoring script.

Answer

Create a User-assigned Managed Identity and manually inject the OAuth token into the request header.

Question 11

A team member needs read-only access to view AI model deployment metrics in Azure Monitor but should not be able to change any resource settings. Which built-in role should you assign?

Accepted Answer

Monitoring Reader. The 'Monitoring Reader' role provides sufficient permissions to view all monitoring data, including metrics and logs, without allowing modifications.

Answer

Reader

Answer

Log Analytics Reader

Answer

Contributor

Question 12

You are troubleshooting slow inference latency in an AI application deployed on AKS. You suspect that network packets between inference pods are traversing unnecessary hops due to overlay routing. Which CNI mode should you have chosen for optimal direct routing?

Accepted Answer

Azure CNI with direct pod IP routing (no overlay). Azure CNI without overlay assigns VNet IP addresses directly to pods, eliminating encapsulation overhead and improving networking performance for high-throughput AI workloads.

Answer

Kubenet with host-port mapping

Answer

Kubenet with basic Linux bridge

Answer

Azure CNI Overlay

Question 13

You need to store sensitive database connection strings and AI API keys used by containerized applications running in Azure Container Apps. Which feature should you use to securely store and reference these values?

Accepted Answer

Container App Secrets. Azure Container Apps supports built-in secrets management, allowing secure storage and referencing of sensitive configuration data.

Answer

A standard DNS TXT record

Answer

Azure Storage account public blob container

Answer

Plain text Dockerfile ENV directives

Question 14

You need to deploy a microservice application that consists of an API gateway and an AI model inference container. The solution must scale automatically based on HTTP traffic and support zero scaling when idle to reduce costs, without requiring complex Kubernetes cluster management. Which service is best suited for this?

Accepted Answer

Azure Container Apps. Azure Container Apps (ACA) provides serverless container hosting built on top of Kubernetes, supporting KEDA-based autoscaling including scaling to zero based on HTTP traffic.

Answer

Azure App Service for Containers

Answer

Azure Batch

Answer

Azure Kubernetes Service (AKS)

Question 15

You are running an AI inference workload in an Azure Kubernetes Service (AKS) cluster. The pods require access to an Azure Machine Learning workspace data store via managed identity without storing credentials in code. Which Kubernetes feature should you configure?

Accepted Answer

Azure AD Workload Identity. Azure AD Workload Identity enables Kubernetes service accounts to securely connect to Azure cloud resources using Azure AD managed identities.

Answer

Azure CNI Overlay

Answer

Kubernetes Secrets CSI driver

Answer

Node-level Managed Identity