AI-200 Practice Exam 1 — 20 Questions

Question 1

You want to view real-time standard output logs from a container running in Azure Container Instances named 'ai-inferencing-aci'. Which Azure CLI command should you run?

Accepted Answer

az container logs --resource-group myRG --name ai-inferencing-aci. The 'az container logs' command streams or retrieves logs from an Azure Container Instance.

Answer

az container show --resource-group myRG --name ai-inferencing-aci

Answer

az aks browse --name ai-inferencing-aci

Answer

az acr repository show-tags

Question 2

You are troubleshooting an AI application container in an AKS cluster that cannot resolve external domain names (e.g., huggingface.co). Which TWO Kubernetes components should you investigate?

Accepted Answer

kube-dns service endpoint mapping. DNS resolution issues in AKS typically point to CoreDNS pod status, kube-dns service configuration, or node network routing.

Answer

Horizontal Pod Autoscaler configuration

Answer

Persistent Volume Claim binding state

Answer

Ingress controller SSL certificate expiration

Question 3

You have an Azure Container Registry and an Azure Kubernetes Service cluster in different Azure regions. You want to ensure that AKS nodes pull container images from a local regional endpoint to minimize latency and cross-region data transfer fees. What feature should you configure on ACR?

Accepted Answer

ACR Geo-Replication. ACR Geo-replication allows a single registry to be replicated across multiple Azure regions, providing local container image pulls.

Answer

Azure ExpressRoute global reach

Answer

ACR Import command scheduled daily

Answer

Azure Traffic Manager DNS routing

Question 4

You are troubleshooting an AI inference container in Azure Container Apps that fails to start because it cannot pull the base image from Azure Container Registry. Authentication fails with an unauthorized error. What is the recommended way to grant the Container App access to ACR?

Accepted Answer

Configure a system-assigned managed identity on the Container App and assign the AcrPull role on ACR. Enabling a managed identity on the Container App and granting it the AcrPull role on the Azure Container Registry is the secure, modern authentication approach.

Answer

Hardcode the admin username and password into environment variables

Answer

Expose the ACR endpoint publicly without authentication

Answer

Attach an Azure Storage Account SAS token to the container environment

Question 5

You are deploying a custom AI model container to Azure Container Apps. The container listens on port 8080 and requires health probes to verify readiness before routing traffic. How should you configure the probes?

Accepted Answer

Configure an HTTP readiness probe targeting port 8080 on your health check endpoint. Azure Container Apps supports liveness, readiness, and startup probes configured via HTTP, TCP, or gRPC.

Answer

Configure an Azure Front Door health probe pointing to the internal container IP

Answer

Configure a TCP liveness probe pointing to port 22 for SSH management

Answer

Configure a startup probe that restarts the container if CPU usage drops below 5 percent

Question 6

Which TWO actions can you perform using Azure Container Registry Tasks (ACR Tasks)?

Accepted Answer

Automate image builds upon Git source code repository commits. ACR Tasks enable building container images in the cloud, automating multi-architecture builds, and running quick patch tasks.

Answer

Manage Azure Virtual Machine backups

Answer

Configure Azure Front Door routing rules

Answer

Deploy AKS clusters automatically

Question 7

You need to deploy a real-time object detection model inside an Azure Container App. The application requires immediate scale-out when the queue length of incoming image processing requests exceeds a threshold. Which scaling rule type should you configure?

Accepted Answer

Azure Queue Storage / Service Bus KEDA scaling rule. Azure Container Apps supports KEDA scalers, including the Azure Service Bus, Azure Queue Storage, and Redis scalers for event-driven scaling.

Answer

Memory utilization scaling rule

Answer

CPU utilization scaling rule

Answer

HTTP concurrency scaling rule

Question 8

You are designing a high-performance AI inference architecture on Azure Kubernetes Service (AKS). Which THREE AKS features or configurations should you incorporate to optimize performance and resource utilization? (Choose three.)

Accepted Answer

Cluster Autoscaler to automatically scale node pool size based on pending pod demands. Optimizing AKS for AI workloads includes utilizing GPU-optimized node pools, node taint/tolerations to dedicate nodes to AI tasks, and cluster autoscaler for dynamic scaling.

Answer

Running all pods exclusively on single-core, low-memory burstable VMs (B-series)

Answer

Disabling the Kubernetes scheduler to manually place every container instance

Question 9

Your team pushes custom AI model container images to Azure Container Registry (ACR). Company policy states that all container images must be automatically scanned for Common Vulnerabilities and Exposures (CVEs) upon push. Which ACR service tier must you use to meet this requirement using Microsoft Defender for Cloud?

Accepted Answer

Premium tier. Vulnerability scanning integrated with Microsoft Defender for Cloud requires the Premium tier of Azure Container Registry.

Answer

Free tier

Answer

Standard tier

Answer

Basic tier

Question 10

You are setting up auto-scaling for a containerized AI web app in Azure Container Apps. You want to scale based on the number of concurrent HTTP requests. Which scaler do you use?

Accepted Answer

HTTP scaler.. The 'http' scaler in KEDA (integrated in ACA) is specifically designed to scale based on HTTP traffic.

Answer

Azure Service Bus scaler.

Answer

CPU usage scaler.

Answer

Memory usage scaler.

Question 11

You are configuring vector search in Azure Cosmos DB for NoSQL. You want to ensure that vectors are indexed using the DiskANN algorithm for high recall and fast search performance. Which index type should you specify in the vector embedding policy?

Accepted Answer

diskANN. Azure Cosmos DB for NoSQL supports DiskANN as a high-performance vector indexing type alongside quantized flat indexes.

Answer

faissHNSW

Answer

hnsw

Answer

ivfFlat

Question 12

You need to store custom AI container images in a private registry hosted within Azure. Which Azure service provides a managed Docker registry service?

Accepted Answer

Azure Container Registry. Azure Container Registry (ACR) is the managed Docker registry service in Azure used for storing and managing container images.

Answer

Azure Blob Storage

Answer

Azure Managed Disks

Answer

Azure Artifacts

Question 13

You have an AI model container that takes 10 seconds to load weights into memory upon startup. Users report HTTP 503 errors immediately after deployment because traffic is routed to the container before it is ready. Which probe should you configure?

Accepted Answer

Startup probe. A startup probe in Kubernetes or Container Apps delays liveness and readiness checks until the application has fully initialized.

Answer

Liveness probe

Answer

Resource quota probe

Answer

TCP socket probe

Question 14

You are deploying a custom PyTorch model container image to Azure Container Apps. The container needs to scale out based on HTTP concurrent requests. Which built-in scale rule type should you configure in Azure Container Apps?

Accepted Answer

http. Azure Container Apps supports a built-in HTTP scale rule that scales applications based on the number of concurrent HTTP requests per replica.

Answer

azure-service-bus

Answer

cpu

Answer

tcp

Question 15

You have an AI model container hosted in Azure Container Registry. You want to ensure that every container image pushed to the registry is automatically scanned for known vulnerabilities before deployment. Which ACR feature should you enable?

Accepted Answer

Microsoft Defender for Cloud vulnerability scanning. Microsoft Defender for Cloud integrates with Azure Container Registry to provide vulnerability scanning for container images upon push or import.

Answer

ACR Tasks auto-purge

Answer

Content Trust

Answer

ACR geo-replication

Question 16

You are configuring GPU time-slicing on an AKS cluster to maximize GPU utilization for multiple lightweight AI inference containers sharing a single NVIDIA A100 GPU. Where must you define the time-slicing configuration profile?

Accepted Answer

A Kubernetes ConfigMap referenced by the NVIDIA device plugin daemonset. GPU time-slicing in AKS is configured using a ConfigMap that defines replica counts per GPU device, which is then applied to the cluster.

Answer

Inside the Dockerfile of each individual AI container

Answer

Via Azure Container Apps workload profiles configuration

Answer

In the Azure portal under AKS cluster node pool properties

Question 17

You have an AI scoring script that runs periodically. You want to execute this containerized workload on a schedule without managing virtual machines. Which Azure service is best suited for running containerized batch jobs on a schedule?

Accepted Answer

Azure Container Apps Jobs. Azure Container Apps Jobs allow you to run containerized batch tasks triggered on a schedule, on-demand, or via events.

Answer

Azure Kubernetes Service CronJobs

Answer

Azure Container Instances with restart policy Always

Answer

Azure Functions with HTTP triggers

Question 18

You need to deploy a containerized AI model to Azure Container Apps and configure it to scale based on Azure Service Bus queue messages. Which scaler should you specify?

Accepted Answer

azure-service-bus. Azure Container Apps supports KEDA scalers natively, including the azure-service-bus scaler.

Answer

azure-blob

Answer

memory

Answer

cron

Question 19

You are configuring TLS termination for an AI model API hosted in Azure Container Apps using a custom domain name. Where must you upload or configure the custom SSL certificate?

Accepted Answer

In the Container App custom domains settings using a Key Vault reference or uploaded certificate. Custom domain certificates in Azure Container Apps are managed via the custom domains and certificates blade of the Container App resource.

Answer

In the Azure Container Registry webhook configuration

Answer

Inside the container image filesystem under /etc/ssl/certs

Answer

On the underlying Azure Container Instances node pool

Question 20

You are scaling an AI workload in Azure Container Apps. Which TWO scale rule triggers are natively supported without custom KEDA extensions?

Accepted Answer

HTTP concurrent requests. Azure Container Apps natively supports scaling based on HTTP requests, CPU, memory, and Azure Service Bus without manual KEDA manifest configuration.

Answer

Azure Virtual Machine disk I/O throughput

Answer

Active directory login failure rate

Answer

Custom hardware temperature sensors