AI-200 Practice Exam 2 — 20 Questions

Question 1

You need to deploy a set of batch AI processing containers in Azure Container Instances that run to completion and then terminate. Which container group restart policy should you select?

Accepted Answer

Never. For batch jobs that run to completion and stop, the restart policy should be set to Never or OnFailure.

Answer

Always

Answer

UnlessStopped

Answer

OnFailure

Question 2

When configuring an Azure Container Instances container group, which TWO properties can you define?

Accepted Answer

DNS name label for public IP resolution. An ACI container group supports defining networking properties like DNS name labels, environment variables, restart policies, and resource requests.

Answer

AKS node pool sizing

Answer

Virtual machine scale set autoscaling rules

Answer

Kubernetes namespace allocation

Question 3

You are setting up image builds for a multi-architecture (AMD64 and ARM64) AI model container using Azure Container Registry Tasks. Which command or feature should you use to build images for both architectures simultaneously?

Accepted Answer

az acr build with a multi-step task or docker buildx configuration. ACR Tasks support multi-architecture builds using Docker buildx commands within a task definition file or quick task execution.

Answer

Azure DevOps pipeline running docker push directly

Answer

az aks create with --node-os-sku

Answer

az acr import

Question 4

You are configuring enterprise networking for an AKS cluster running sensitive AI models. Which THREE networking features should you implement for cluster security?

Accepted Answer

Azure Firewall or user-defined routes for outbound egress filtering. Securing AKS network traffic involves Azure CNI network policies, private cluster API server endpoints, and outbound traffic filtering via Azure Firewall.

Answer

Public IP assignment to every worker node

Answer

Disabling all internal kube-dns resolution

Question 5

You are troubleshooting high latency in an AI inference workload on AKS. You suspect the issue is caused by container startup time (cold starts). Which feature helps mitigate this?

Accepted Answer

Azure Container Registry Artifact Streaming.. Image Pull Secrets and ACR 'Artifact Streaming' (or pre-pulling images) are designed to reduce startup latency.

Answer

Configuring Vertical Pod Autoscaler.

Answer

Increasing the memory limit for the pod.

Answer

Using a smaller base OS distribution.

Question 6

You are running a distributed AI training job on AKS using MPI. Which network configuration is critical for performance?

Accepted Answer

Enable Azure Accelerated Networking on the node pool.. For distributed training, high-bandwidth/low-latency networking like InfiniBand or Azure Accelerated Networking is required.

Answer

Use an internal VNET peering.

Answer

Enable standard load balancing.

Answer

Disable the pod network policy.

Question 7

You are designing a secure MLOps pipeline using Azure Container Registry. Which THREE practices should you implement to secure your AI container images?

Accepted Answer

Use managed identities instead of admin credentials for registry authentication. Securing container images in ACR involves vulnerability scanning, access control with managed identities, and content signing.

Answer

Disable role-based access control (RBAC) on the registry to simplify management

Answer

Enable anonymous pull access for all public developers

Question 8

Your team is evaluating Azure Container Apps versus Azure Kubernetes Service (AKS) for hosting containerized AI workloads. Which TWO characteristics are advantages of Azure Container Apps over standard AKS? (Choose two.)

Accepted Answer

Simplified container management without direct exposure or management of Kubernetes master nodes. Azure Container Apps provides simplified serverless management without exposing Kubernetes control plane complexity and offers native scale-to-zero capabilities.

Answer

Requirement to manage custom CNI overlay networking routing tables manually

Answer

Mandatory manual configuration of KEDA controllers and Ingress controllers

Answer

Complete low-level administrative access to kernel modules and cluster root certificates

Question 9

You are deploying a custom text-embedding model container to Azure Container Apps. You need to configure scaling rules so that the container scales out based on incoming HTTP traffic and Azure Service Bus queue length. Which TWO scalers can you configure? Each correct answer presents part of the solution.

Accepted Answer

azure-servicebus scaler. Azure Container Apps uses KEDA under the hood and natively supports scaling based on HTTP traffic (http scaler) and Azure Service Bus queues (azure-servicebus scaler).

Answer

cpu memory-limit scaler

Answer

azure-blob-storage scaler

Answer

container-registry scaler

Question 10

You want to ensure your AI inference service is highly available across multiple regions. What is the recommended approach for container distribution?

Accepted Answer

Enable ACR Georeplication.. Georeplication in ACR ensures images are available locally in multiple regions, improving deployment speed and availability.

Answer

Store images in a public Docker Hub account.

Answer

Use a single global ACR endpoint.

Answer

Manually copy images using a script.

Question 11

You are configuring an Azure Kubernetes Service (AKS) cluster to host GPU-accelerated AI model inference workloads using NVIDIA GPUs. Which component must you install in the cluster to enable containerized workloads to utilize the GPU nodes?

Accepted Answer

NVIDIA GPU Operator. The NVIDIA GPU Operator automates the management of all NVIDIA software components needed to provision GPUs in Kubernetes.

Answer

NVIDIA Device Plugin for Kubernetes

Answer

KEDA scaler

Answer

Azure Monitor agent

Question 12

Which TWO Azure services can store and serve private Docker container images for AI workloads?

Accepted Answer

Azure Container Instances (pulling from ACR). Azure Container Registry and Azure Container Instances (via image pull secrets) interact with container images, while ACR is the dedicated private registry.

Answer

Azure Cognitive Services

Answer

Azure Bastion

Answer

Azure Logic Apps

Question 13

You are configuring authentication between an Azure Container App running an AI model and an Azure OpenAI resource. To adhere to security best practices, you must avoid storing API keys in environment variables or code. How should you configure this?

Accepted Answer

Configure a system-assigned managed identity on the Container App and grant it Cognitive Services OpenAI User role on the Azure OpenAI resource. Managed identities allow Azure resources to authenticate to services supporting Microsoft Entra authentication without embedding credentials.

Answer

Hardcode the secondary endpoint key into the Docker image build arguments

Answer

Enable anonymous public access on the Azure OpenAI resource for internal virtual network traffic

Answer

Store the Azure OpenAI primary key in an Azure Key Vault and reference it via Container App secrets with plain text retrieval

Question 14

Your data science team pushes container images to Azure Container Registry (ACR). You need to ensure that every image pushed is automatically scanned for known vulnerabilities before being deployed to production. Which ACR feature should you enable?

Accepted Answer

Microsoft Defender for Cloud vulnerability scanning. Microsoft Defender for Cloud integrates with ACR to provide vulnerability scanning for container images upon push or import.

Answer

ACR Tasks

Answer

Azure Policy geo-replication rules

Answer

Content Trust signing

Question 15

You are configuring an Azure Kubernetes Service (AKS) cluster for enterprise AI workloads. Which THREE practices should you implement to enhance cluster security and isolation? (Choose three.)

Accepted Answer

Configure Microsoft Entra Workload Identity for pod-to-Azure service authentication. Enterprise AKS security best practices include enabling Azure Policy for Kubernetes, using Azure RBAC for Kubernetes authorization, and utilizing Workload Identity for secure credential-less access to Azure services.

Answer

Disable TLS on the API server to improve inter-node communication speed

Answer

Share a single service principal across all namespaces for simplified administration

Question 16

You have a large AI model file (5GB) that needs to be loaded into your container at startup. What is the recommended way to handle this?

Accepted Answer

Mount the model from an Azure File Share.. Mounting the file from Azure Blob Storage or an Azure File Share avoids bloating the container image and speeds up deployment.

Answer

Download the model via `curl` at runtime.

Answer

Embed the model in the container image.

Answer

Use a base64 encoded string in the environment variable.

Question 17

Your containerized AI application requires a specific version of a kernel driver that is not installed on the AKS nodes. What is the most efficient way to manage this?

Accepted Answer

Use a privileged InitContainer to load the driver.. Using an InitContainer with appropriate privileges to install the driver on the host is a common pattern for specific hardware needs.

Answer

Mount the /proc filesystem as read-write.

Answer

Run the application as root.

Answer

Rebuild the AKS cluster.

Question 18

Which TWO of the following are true about Azure Container Apps?

Accepted Answer

It is a serverless container platform.. ACA is serverless and supports KEDA for scaling.

Answer

You must manage the underlying Kubernetes nodes.

Answer

It is not compatible with Dapr.

Answer

It does not support VNETs.

Question 19

An AKS cluster is configured with KEDA for autoscaling an AI inferencing service based on Azure Queue Storage length. The pods fail to scale. Which component should you inspect first?

Accepted Answer

The ScaledObject resource status.. The ScaledObject is the KEDA custom resource that defines the trigger. If it is misconfigured, the autoscaler will not function.

Answer

The Azure Container Registry webhook settings.

Answer

The Horizontal Pod Autoscaler (HPA) resource directly.

Answer

The Cluster Autoscaler logs.

Question 20

You want to track the latency of your model inference API in production. Which Azure tool should you integrate into your containerized application?

Accepted Answer

Azure Application Insights.. Application Insights is the standard for monitoring performance metrics and telemetry in Azure.

Answer

Azure Storage Queue.

Answer

Azure Event Hubs.

Answer

Azure Data Factory.