AI-200 Practice Test 21 — 15 Questions

Question 1

You need to inspect the environment variables and configuration settings of a running container group in Azure Container Instances. Which Azure CLI command should you use?

Accepted Answer

az container show --resource-group myRG --name myContainer. The 'az container show' command returns the full JSON representation of a container instance, including environment variables and settings.

Answer

az container exec --exec-command env

Answer

az aks inspect

Answer

az container list-secrets

Question 2

You are troubleshooting a containerized AI model running in an Azure Container App that crashes immediately upon startup with an exit code indicating an Out Of Memory (OOM) error. You need to inspect the container resource allocations. Where can you adjust the memory allocation for the container?

Accepted Answer

In the Azure Container App revision template settings under container resource allocation. In Azure Container Apps, container CPU and memory resources are configured per container in the container app revision template settings.

Answer

In the Azure Container Registry webhook configuration

Answer

In the Azure Virtual Network route table settings

Answer

In the Azure Monitor diagnostic settings export destination

Question 3

You are managing an AKS cluster running resource-intensive AI training jobs. You want to ensure that nodes automatically scale up and down based on pending pod resource requests. Which component should you enable and configure?

Accepted Answer

Kubernetes Cluster Autoscaler. The Kubernetes Cluster Autoscaler monitors for unschedulable pods and requests additional nodes from Azure Virtual Machine Scale Sets.

Answer

KEDA (Kubernetes Event-driven Autoscaling)

Answer

Azure Load Balancer

Answer

Horizontal Pod Autoscaler

Question 4

You are optimizing a large language model container inference deployment on AKS using GPU-enabled nodes (NC-series). The inference server experiences frequent out-of-memory errors on the GPU device itself during high context lengths. Which Kubernetes configuration metric should you monitor and alert on?

Accepted Answer

container_gpu_memory_used_bytes via NVIDIA DCGM Exporter. Monitoring NVIDIA GPU memory usage via DCGM (Data Center GPU Manager) metrics in Prometheus/Grafana is critical for detecting GPU out-of-memory errors.

Answer

container_memory_working_set_bytes via kubelet

Answer

container_cpu_cfs_throttled_periods_total

Answer

node_net_bytes_total

Question 5

You are building an AI container image and need to minimize its final size to speed up deployment times. Which multi-stage build practice should you follow?

Accepted Answer

Use a builder stage for compilation and copy only runtime artifacts into a slim base image. Multi-stage builds allow you to use a heavy builder image with SDKs and compilers, then copy only the compiled artifacts and runtime binaries into a slim final base image.

Answer

Store model weights directly inside the container image layers

Answer

Install all development tools and pip packages in a single RUN instruction

Answer

Disable container image compression when pushing to ACR

Question 6

You are configuring an Azure Container Apps environment with a custom Virtual Network. Your AI containers need to securely connect to an Azure SQL Database that is secured behind a private endpoint. Which configuration is required on the Container Apps environment?

Accepted Answer

Deploy the Container Apps environment into a custom VNet with workload profile subnets. To communicate with private endpoints within a VNet, Azure Container Apps must be deployed within a custom virtual network with a dedicated subnet.

Answer

Use an external Azure Application Gateway in front of the container apps

Answer

Enable Azure Bastion on the subnet

Answer

Configure IP restriction rules on the ingress controller

Question 7

You are deploying an AI model container to Azure Container Apps. The container requires persistent storage to cache downloaded Hugging Face model weights across container restarts. Which storage type should you attach to the Container App?

Accepted Answer

Azure Files mount via Container Apps storage configuration. Azure Container Apps supports mounting Azure Files shares as volumes for persistent storage across container lifecycles.

Answer

Azure Managed Disks (Premium SSD) direct attach

Answer

Azure Blob Storage FUSE driver

Answer

Ephemeral emptyDir volume

Question 8

You are deploying a containerized machine learning inference service to Azure Container Apps. The model artifact is large (15 GB) and must be securely loaded during container startup. What is the most efficient way to mount this model data into the container app?

Accepted Answer

Mount an Azure Files volume to the container app. Azure Container Apps supports mounting Azure Files or Azure Blob Storage (via blobfuse) as volumes, allowing containers to read large assets efficiently.

Answer

Download the model over the public internet at container boot

Answer

Bake the model directly into the Docker image layer

Answer

Store the model in environment variables

Question 9

You have an AI workload that requires persistent storage for large model checkpoints. Which storage type should you mount to an AKS pod for optimal performance?

Accepted Answer

Azure Disk (Premium).. Azure Disk storage is generally preferred for high-throughput I/O needed by AI checkpoints.

Answer

Azure Files (Standard).

Answer

Ephemeral OS Disk.

Answer

Azure Blob Storage (container mount).

Question 10

You are deploying a Python Flask API that wraps an ONNX runtime model to Azure Container Instances (ACI). The container needs to expose port 5000 externally. Which parameter must you specify when creating the container group?

Accepted Answer

--dns-name-label and port 5000 mapping. When deploying to Azure Container Instances, you must explicitly configure the port and protocol for public IP exposure.

Answer

--assign-identity

Answer

--restart-policy Never

Answer

--os-type Windows

Question 11

You are configuring continuous deployment for an AI model container using Azure DevOps and Azure Container Registry (ACR). You need to ensure that when a new container image is pushed to ACR, an event triggers an automated webhook that notifies an Azure Function to run post-deployment validation tests. Which event type should you subscribe to in the ACR webhook configuration?

Accepted Answer

imagePush. The 'imagePush' event type triggers the webhook whenever a new image manifest is successfully pushed to the container registry.

Answer

artifactDelete

Answer

chartPush

Answer

quarantineStatusChange

Question 12

You are deploying an AI model container to Azure Container Apps. The container application needs to securely connect to an Azure SQL Database without storing plain-text database credentials in environment variables or application code. What is the recommended feature to use?

Accepted Answer

Azure Key Vault references with managed identity. Managed identities for Azure resources allow Azure Container Apps to authenticate to Azure services that support Azure AD authentication without embedding credentials in code or configuration.

Answer

Azure Container Registry admin credentials

Answer

Container Apps encrypted environment variables

Answer

Kubernetes secrets mapped via sidecar proxy

Question 13

You are integrating Azure Container Registry with Azure Kubernetes Service. You want to enable authentication without storing static credentials (username/password) in Kubernetes secrets. What is the recommended integration method?

Accepted Answer

Attach the ACR to the AKS cluster using Azure CLI attachment command. Attaching an ACR to an AKS cluster using 'az aks update --attach-acr' automatically grants the AKS kubelet managed identity permissions to pull images from the registry.

Answer

Store ACR admin credentials in a Kubernetes Secret object

Answer

Configure a Docker daemon config.json file on every node manually

Answer

Enable anonymous pull on the Azure Container Registry

Question 14

You need to deploy a quick, stateless AI data processing script packaged in a container image without setting up Kubernetes or Container Apps. Which Azure service offers the fastest deployment for a single container instance?

Accepted Answer

Azure Container Instances. Azure Container Instances (ACI) is designed for fast, serverless deployment of single containers without cluster management.

Answer

Azure Virtual Machines with Docker installed

Answer

Azure App Service for Linux

Answer

Azure Kubernetes Service

Question 15

You are deploying an AI model container in Azure Container Apps. Which TWO authentication mechanisms can you configure for securely pulling the image from a private Azure Container Registry?

Accepted Answer

ACR administrator username and password. Container Apps can authenticate to ACR using either a managed identity or registry administrator credentials.

Answer

Azure Active Directory client certificate stored in public DNS

Answer

Azure Storage account connection string

Answer

Anonymous public pull token