AI-200 Practice Test 2 — 25 Questions

Question 1

You are running a distributed AI training job on AKS using MPI. Which network configuration is critical for performance?

Accepted Answer

Enable Azure Accelerated Networking on the node pool.. For distributed training, high-bandwidth/low-latency networking like InfiniBand or Azure Accelerated Networking is required.

Answer

Use an internal VNET peering.

Answer

Enable standard load balancing.

Answer

Disable the pod network policy.

Question 2

You are designing a secure MLOps pipeline using Azure Container Registry. Which THREE practices should you implement to secure your AI container images?

Accepted Answer

Use managed identities instead of admin credentials for registry authentication. Securing container images in ACR involves vulnerability scanning, access control with managed identities, and content signing.

Answer

Disable role-based access control (RBAC) on the registry to simplify management

Answer

Enable anonymous pull access for all public developers

Question 3

Your team is evaluating Azure Container Apps versus Azure Kubernetes Service (AKS) for hosting containerized AI workloads. Which TWO characteristics are advantages of Azure Container Apps over standard AKS? (Choose two.)

Accepted Answer

Simplified container management without direct exposure or management of Kubernetes master nodes. Azure Container Apps provides simplified serverless management without exposing Kubernetes control plane complexity and offers native scale-to-zero capabilities.

Answer

Requirement to manage custom CNI overlay networking routing tables manually

Answer

Mandatory manual configuration of KEDA controllers and Ingress controllers

Answer

Complete low-level administrative access to kernel modules and cluster root certificates

Question 4

You are deploying a custom text-embedding model container to Azure Container Apps. You need to configure scaling rules so that the container scales out based on incoming HTTP traffic and Azure Service Bus queue length. Which TWO scalers can you configure? Each correct answer presents part of the solution.

Accepted Answer

azure-servicebus scaler. Azure Container Apps uses KEDA under the hood and natively supports scaling based on HTTP traffic (http scaler) and Azure Service Bus queues (azure-servicebus scaler).

Answer

cpu memory-limit scaler

Answer

azure-blob-storage scaler

Answer

container-registry scaler

Question 5

You want to ensure your AI inference service is highly available across multiple regions. What is the recommended approach for container distribution?

Accepted Answer

Enable ACR Georeplication.. Georeplication in ACR ensures images are available locally in multiple regions, improving deployment speed and availability.

Answer

Store images in a public Docker Hub account.

Answer

Use a single global ACR endpoint.

Answer

Manually copy images using a script.

Question 6

You are configuring an Azure Kubernetes Service (AKS) cluster to host GPU-accelerated AI model inference workloads using NVIDIA GPUs. Which component must you install in the cluster to enable containerized workloads to utilize the GPU nodes?

Accepted Answer

NVIDIA GPU Operator. The NVIDIA GPU Operator automates the management of all NVIDIA software components needed to provision GPUs in Kubernetes.

Answer

NVIDIA Device Plugin for Kubernetes

Answer

KEDA scaler

Answer

Azure Monitor agent

Question 7

Which TWO Azure services can store and serve private Docker container images for AI workloads?

Accepted Answer

Azure Container Instances (pulling from ACR). Azure Container Registry and Azure Container Instances (via image pull secrets) interact with container images, while ACR is the dedicated private registry.

Answer

Azure Cognitive Services

Answer

Azure Bastion

Answer

Azure Logic Apps

Question 8

You are configuring authentication between an Azure Container App running an AI model and an Azure OpenAI resource. To adhere to security best practices, you must avoid storing API keys in environment variables or code. How should you configure this?

Accepted Answer

Configure a system-assigned managed identity on the Container App and grant it Cognitive Services OpenAI User role on the Azure OpenAI resource. Managed identities allow Azure resources to authenticate to services supporting Microsoft Entra authentication without embedding credentials.

Answer

Hardcode the secondary endpoint key into the Docker image build arguments

Answer

Enable anonymous public access on the Azure OpenAI resource for internal virtual network traffic

Answer

Store the Azure OpenAI primary key in an Azure Key Vault and reference it via Container App secrets with plain text retrieval

Question 9

Your data science team pushes container images to Azure Container Registry (ACR). You need to ensure that every image pushed is automatically scanned for known vulnerabilities before being deployed to production. Which ACR feature should you enable?

Accepted Answer

Microsoft Defender for Cloud vulnerability scanning. Microsoft Defender for Cloud integrates with ACR to provide vulnerability scanning for container images upon push or import.

Answer

ACR Tasks

Answer

Azure Policy geo-replication rules

Answer

Content Trust signing

Question 10

You are configuring an Azure Kubernetes Service (AKS) cluster for enterprise AI workloads. Which THREE practices should you implement to enhance cluster security and isolation? (Choose three.)

Accepted Answer

Configure Microsoft Entra Workload Identity for pod-to-Azure service authentication. Enterprise AKS security best practices include enabling Azure Policy for Kubernetes, using Azure RBAC for Kubernetes authorization, and utilizing Workload Identity for secure credential-less access to Azure services.

Answer

Disable TLS on the API server to improve inter-node communication speed

Answer

Share a single service principal across all namespaces for simplified administration

Question 11

You have a large AI model file (5GB) that needs to be loaded into your container at startup. What is the recommended way to handle this?

Accepted Answer

Mount the model from an Azure File Share.. Mounting the file from Azure Blob Storage or an Azure File Share avoids bloating the container image and speeds up deployment.

Answer

Download the model via `curl` at runtime.

Answer

Embed the model in the container image.

Answer

Use a base64 encoded string in the environment variable.

Question 12

Your containerized AI application requires a specific version of a kernel driver that is not installed on the AKS nodes. What is the most efficient way to manage this?

Accepted Answer

Use a privileged InitContainer to load the driver.. Using an InitContainer with appropriate privileges to install the driver on the host is a common pattern for specific hardware needs.

Answer

Mount the /proc filesystem as read-write.

Answer

Run the application as root.

Answer

Rebuild the AKS cluster.

Question 13

Which TWO of the following are true about Azure Container Apps?

Accepted Answer

It is a serverless container platform.. ACA is serverless and supports KEDA for scaling.

Answer

You must manage the underlying Kubernetes nodes.

Answer

It is not compatible with Dapr.

Answer

It does not support VNETs.

Question 14

An AKS cluster is configured with KEDA for autoscaling an AI inferencing service based on Azure Queue Storage length. The pods fail to scale. Which component should you inspect first?

Accepted Answer

The ScaledObject resource status.. The ScaledObject is the KEDA custom resource that defines the trigger. If it is misconfigured, the autoscaler will not function.

Answer

The Azure Container Registry webhook settings.

Answer

The Horizontal Pod Autoscaler (HPA) resource directly.

Answer

The Cluster Autoscaler logs.

Question 15

You want to track the latency of your model inference API in production. Which Azure tool should you integrate into your containerized application?

Accepted Answer

Azure Application Insights.. Application Insights is the standard for monitoring performance metrics and telemetry in Azure.

Answer

Azure Storage Queue.

Answer

Azure Event Hubs.

Answer

Azure Data Factory.

Question 16

Which THREE of the following items should be configured to ensure your AI workload in AKS is observable?

Accepted Answer

Prometheus and Grafana.. Logging, metrics, and tracing are the three pillars of observability in AKS.

Answer

Azure Backup.

Answer

Azure Bastion.

Question 17

Your enterprise requires that all container images deployed to Azure Kubernetes Service (AKS) must originate from approved corporate Azure Container Registries (ACRs). How can you enforce this restriction cluster-wide?

Accepted Answer

Configure Azure Policy for Kubernetes with the built-in initiative to restrict container registries. Azure Policy for Kubernetes uses Gatekeeper v3 to audit or enforce cluster behaviors, such as restricting image registries.

Answer

Configure standard Kubernetes Network Policies in the kube-system namespace

Answer

Set up ACR webhook notifications to trigger Azure Functions that delete unauthorized pods

Answer

Modify the kubelet configuration file on every cluster node manually

Question 18

When managing Azure Container Registry (ACR), administrators can use ACR Tasks to automate tasks. Which TWO scenarios are valid use cases for ACR Tasks? (Choose two.)

Accepted Answer

Triggering container image rebuilds automatically when a base image is updated. ACR Tasks supports automated container image builds on source code commits (CI) and automated OS/framework patching base image updates.

Answer

Providing a managed Kubernetes API control plane

Answer

Executing automated container vulnerability scans directly inside registry storage

Answer

Running a persistent, multi-node enterprise database cluster inside ACR

Question 19

Your development team is planning to deploy a containerized natural language processing model to Azure Container Apps. Which TWO features are natively supported by Azure Container Apps for managing application lifecycle and traffic? (Choose two.)

Accepted Answer

Built-in KEDA-based autoscaling including scaling to zero. Azure Container Apps natively supports multi-revision management and traffic splitting between revisions, as well as KEDA autoscaling.

Answer

Automatic deployment of bare-metal hypervisors

Answer

Direct root SSH access to individual container instances for interactive debugging

Answer

Direct manual configuration of control plane Kubernetes master nodes

Question 20

You are containerizing a large language model (LLM) inference API to run in Azure Container Apps. The model weights exceed 15 GB and cause container startup timeouts because the image takes too long to pull from Azure Container Registry (ACR). You need to optimize the container startup performance without reducing the model size. What is the best approach?

Accepted Answer

Enable ACR artifact streaming for the container registry.. ACR artifact streaming allows containers to start immediately by streaming layers on-demand without waiting for the entire image to download locally, significantly reducing cold-start times for large AI container images.

Answer

Upgrade the Azure Container Apps environment to use HTTP/2 protocol.

Answer

Store the model weights in an Azure Blob Storage account and mount them via an ephemeral volume.

Answer

Configure ACR content trust and geo-replication.