AI-200 Practice Test 20 — 15 Questions

Question 1

Which REST API HTTP method is used to create or update an index definition in Azure AI Search?

Accepted Answer

PUT. Azure AI Search exposes index definitions through its REST API at /indexes/{indexName}, and creating or replacing an index definition uses HTTP PUT. PUT is idempotent and replaces the entire index definition, which is the documented method for creating or updating an index. GET retrieves, PATCH is not supported for index definitions, and DELETE removes the index.

Answer

GET

Answer

PATCH

Answer

DELETE

Question 2

You notice that your AKS pods are stuck in 'ContainerCreating' state. You check the events and see 'FailedMount'. What is the most likely cause?

Accepted Answer

The associated Persistent Volume Claim (PVC) is missing or cannot be bound.. A 'FailedMount' event during the ContainerCreating phase almost always indicates that the pod's volume mount could not be satisfied — most commonly because the PersistentVolumeClaim (PVC) is missing, in a Pending state, or cannot bind to an available PersistentVolume. Since the container hasn't started yet, the failure is at the storage attachment stage, not at runtime. This is the classic signature of a PVC/PV binding problem in AKS.

Answer

The node is out of CPU resources.

Answer

The container crashed immediately.

Answer

The container image is too large.

Question 3

When designing a data layer architecture for an AI application using Azure AI Search, what is the primary role of an integrated vectorizer?

Accepted Answer

To automatically convert raw source text fields into vector embeddings during indexing and queries without requiring external orchestration code.. An integrated vectorizer in Azure AI Search is a configuration that binds an embedding model (e.g., Azure OpenAI text-embedding-ada-002) to an index so that raw text fields are automatically converted into vector embeddings at both indexing time and query time. This eliminates the need for external orchestration code to call the embedding API, chunk text, and push vectors into the index.

Answer

To execute full-text BM25 keyword matching alongside vector calculations.

Answer

To compress vector indexes using lossy compression algorithms to save disk storage.

Answer

To generate cryptographic hashes for document deduplication.

Question 4

You are configuring Azure Event Grid to send events to an Azure Logic App. Which built-in trigger should you use in your Logic App workflow to receive these events seamlessly?

Accepted Answer

When a resource event occurs (Azure Event Grid trigger). The 'When a resource event occurs' trigger is the native Azure Event Grid trigger in Logic Apps, designed specifically to subscribe to Event Grid topics and system topics. It handles the Event Grid subscription handshake, event schema validation, and delivery automatically, so events published to Event Grid flow directly into the workflow without custom parsing. This is the seamless, first-party integration path for Event Grid-to-Logic App event delivery.

Answer

When messages arrive in a Service Bus queue

Answer

When a blob is added or modified (V2)

Answer

When an HTTP request is received

Question 5

You are building a RAG application using Azure AI Search. You want to ensure that the search results provided to the LLM are as relevant as possible by leveraging a re-ranking model. Which service must be enabled to utilize the 'Semantic Ranker'?

Accepted Answer

Standard Tier or higher. Semantic Ranker in Azure AI Search requires the Standard tier or higher; it is not available on the Free or Basic tiers. Enabling Semantic Ranker allows the service to re-rank search results using a deep learning model, improving relevance for RAG applications by promoting semantically relevant documents.

Answer

Basic Tier

Answer

Free Tier

Answer

Storage Optimized Tier

Question 6

Which Azure feature allows you to set up a private, internal-only container registry?

Accepted Answer

Azure Private Link.. Azure Private Link allows you to create a private endpoint for an Azure Container Registry (ACR), which assigns a private IP address from your virtual network. This makes the registry accessible only from within your VNet or connected networks, eliminating public internet exposure. It provides internal-only access without requiring public IPs or exposing the registry to the internet.

Answer

Azure Bastion.

Answer

Public access with firewall rules.

Answer

VPN Gateway.

Question 7

Your team is preparing an Azure AI application for production release. You need to implement robust monitoring and observability. Which TWO of the following steps should be taken? (Choose two)

Accepted Answer

Configure Azure Monitor metric alerts and action groups for resource utilization and throttling thresholds.. Option C is correct because Azure Monitor metric alerts with action groups provide automated, threshold-based notifications for resource utilization (such as CPU, memory, and request rates) and throttling (HTTP 429 responses), which are essential for detecting production issues proactively. Option D is correct because integrating the Application Insights SDK into the application code enables distributed tracing of requests, dependency calls, and exceptions, giving the end-to-end observability needed to diagnose failures and performance bottlenecks in an Azure AI application. Option A is incorrect because deleting Log Analytics workspaces weekly destroys the historical telemetry and query capability that monitoring depends on. Option B is incorrect because relying solely on manual user bug reports provides no automated telemetry, leaving blind spots and delaying detection. Option E is incorrect because disabling diagnostic logging removes the audit and operational data needed for troubleshooting and compliance.

Answer

Delete all log analytics workspaces weekly.

Answer

Rely solely on manual user bug reports without automated telemetry.

Answer

Disable all diagnostic logging to reduce storage overhead.

Question 8

Your enterprise security team mandates that all outbound traffic from your Azure Machine Learning workspace must pass through a centralized Azure Firewall, and no public IP addresses can be associated with workspace compute instances. Which workspace network isolation configuration should you select?

Accepted Answer

Workspace with a managed virtual network and outbound rules configured for user-defined routing through Azure Firewall. To route all outbound traffic through a centralized Azure Firewall and prevent public IPs on compute instances, you must use a workspace with a managed virtual network and configure outbound rules for user-defined routing (UDR) through the firewall. This setup isolates compute in a private network and forces egress via the firewall.

Answer

Public workspace with basic password authentication enabled on compute instances

Answer

Workspace using dynamic public IP allocation with Network Security Group (NSG) allow rules

Answer

Serverless compute instances with public endpoint access enabled

Question 9

You want to ensure that your Azure AI infrastructure costs are properly attributed to different business departments. Which TWO features should you configure? (Choose two)

Accepted Answer

Azure resource tags for department identification (e.g., Department=Finance). Resource tagging and Cost Management export/cost views help organize and attribute costs by department.

Answer

Azure Key Vault cryptographic keys

Answer

Application Insights availability probes

Answer

Azure Firewall network rules

Question 10

When configuring Azure Monitor alerts for an AI application, which TWO action types can be included in an Action Group to notify operations personnel? (Choose two)

Accepted Answer

Webhook integration to trigger automated incident creation in ITSM tools. Action groups support multiple notification channels including email, SMS, push notifications, and webhooks.

Answer

Direct formatting of Azure billing invoices

Answer

Automated deletion of Azure subscription resources

Answer

Local BIOS firmware updates for physical hypervisors

Question 11

You are designing an AI search architecture that requires handling millions of documents with sub-second vector similarity queries. You choose Azure AI Search. How does Azure AI Search ensure high query throughput for vector indexes?

Accepted Answer

By utilizing HNSW approximate nearest neighbor indexing combined with multi-replica scale-out. Azure AI Search ensures high query throughput for vector indexes by using HNSW approximate nearest neighbor indexing, which builds a navigable graph for fast similarity search, combined with multi-replica scale-out that distributes query load across replicas. This architecture supports sub-second queries over millions of documents.

Answer

By caching every possible query result indefinitely in memory

Answer

By executing sequential full table scans across all storage nodes simultaneously

Answer

By converting all vectors into relational database tables with SQL foreign keys

Question 12

Your team is building an analytics pipeline where IoT telemetry data is ingested via Azure Event Hubs and needs to be continuously archived in Parquet format to an Azure Data Lake Storage Gen2 account for AI model training. Which built-in feature of Event Hubs should you enable?

Accepted Answer

Event Hubs Capture. Event Hubs Capture allows you to automatically capture streaming data in Event Hubs and save it to an Azure Blob Storage or Azure Data Lake Storage Gen2 account in Avro or Parquet format.

Answer

Service Bus Geo-Replication

Answer

Event Grid Auto-Routing

Answer

Stream Analytics Integration Job

Question 13

You are configuring an Azure OpenAI service instance. You need to ensure that the service is only accessible from your corporate virtual network and that public internet access is completely disabled. Which configuration should you implement?

Accepted Answer

Create a Private Endpoint, disable public network access in the Networking tab, and verify the DNS zone configuration.. To make an Azure OpenAI instance reachable only from a corporate VNet with no public internet access, you must create a Private Endpoint (which assigns a private IP from your VNet to the service), disable public network access on the Networking tab, and ensure the private DNS zone (privatelink.openai.azure.com) is linked so name resolution returns the private IP. All three steps are required for a fully private, functional deployment.

Answer

Set the firewall rules to block all traffic and allow only the specific IP address of your NAT gateway.

Answer

Configure a Service Tag in the Network Security Group to allow only specific IP ranges.

Answer

Implement Azure AD Conditional Access policies to restrict access based on user location.

Question 14

When configuring vector search in Azure Cosmos DB for NoSQL, which TWO components must be defined within the container's indexing policy? (Choose two)

Accepted Answer

vectorEmbeddingPolicy. Option B (vectorEmbeddingPolicy) is correct because the container's indexing policy must declare the vector embedding policy, which defines the vector paths, data type (e.g., float32), dimensions, and distance function (cosine, dotproduct, or euclidean) so Cosmos DB knows how to interpret and compare the stored embeddings. Option C (vectorIndexes) is also correct because the indexing policy must include a vectorIndexes section that specifies the vector path and the index type (flat, quantizedFlat, or diskANN) used to perform the similarity search. Together, vectorEmbeddingPolicy and vectorIndexes are the two required elements inside the indexing policy for vector search on Azure Cosmos DB for NoSQL. Option A (fullTextPolicy) is incorrect because it relates to full-text search (full-text indexing and scoring), not vector search. Option D (spatialIndexes) is incorrect because it configures geospatial indexing for GeoJSON data, which is unrelated to vector similarity. Option E (partitionKeyDefinition) is incorrect because the partition key is defined at the container level, not within the indexing policy.

Answer

fullTextPolicy

Answer

spatialIndexes

Answer

partitionKeyDefinition

Question 15

An AI inference pipeline uses Azure Event Hubs to ingest telemetry. Your consumer application needs to read events starting from a specific timestamp to replay historical data for model retraining. Which feature of Event Hubs enables this capability?

Accepted Answer

Starting position based on Enqueued Time. Event Hubs consumers can specify a starting position using the Enqueued Time of events, allowing them to begin reading from a specific timestamp. This is implemented via the EventPosition.fromEnqueuedTime() method in the SDKs, which seeks to the first event with an enqueued time greater than or equal to the given timestamp. This feature is essential for replaying historical data for model retraining, as it lets the consumer skip older events and start at the desired point in time.

Answer

Event Hubs Capture window

Answer

Event Grid event retention policy

Answer

Service Bus message lock duration