AI-200 Practice Test 26 — 15 Questions

Question 1

Your enterprise application uses Azure Service Bus Topics to distribute orders to inventory and billing services. A transient database outage occurs in the billing service. You must ensure that billing messages are not lost and can be retried without interfering with the inventory service. What feature should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure separate subscriptions for each service under the Service Bus Topic.. Configuring separate subscriptions for each service under the Service Bus Topic is correct because each subscription receives its own copy of the message, allowing the billing service to process independently and retry on failure without affecting the inventory service. This provides isolation and ensures messages are not lost during transient outages. Other options do not provide the required decoupling and retry capability.

Answer

Enable partitioned queues on the sender application.

Answer

Use Event Grid filters to duplicate the messages into two separate storage accounts.

Answer

Implement Azure Relay to tunnel the database connection.

Question 2

You are designing an AI streaming architecture using Azure Event Hubs in a Dedicated cluster. You need to monitor capacity utilization to ensure the cluster does not exceed its allocated Processing Units (PUs). Which metric should you track in Azure Monitor?

Accepted Answer

Dedicated Cluster Memory and CPU Usage / Processing Units (PUs) Utilization metrics.. In an Azure Event Hubs Dedicated cluster, capacity is measured and billed in Processing Units (PUs), and the cluster exposes specific Azure Monitor metrics for CPU, memory, and PU utilization. Tracking 'Processing Units (PUs) Utilization' (alongside CPU and Memory usage) is the direct way to see whether the cluster is approaching its allocated PU ceiling. These metrics are emitted per cluster under the Microsoft.EventHub/clusters namespace, so they are the authoritative signal for capacity planning.

Answer

Service Bus Active Message Count.

Answer

Event Grid Delivery Success Rate percentage.

Answer

Storage Account Blob Capacity utilization.

Question 3

Your team is running an AI copilot application that uses Azure OpenAI. To comply with data residency regulations, you need to verify that prompts and completions are processed entirely within a specific Azure region and that no data is persisted outside that region. Where can you verify regional data processing and residency commitments?

Accepted Answer

Azure OpenAI service compliance terms and data residency documentation in the Azure Trust Center. The Azure Trust Center hosts Azure OpenAI Service compliance terms and data residency documentation, which is where you verify regional processing and residency commitments. It documents where data is processed, whether prompts/completions are stored, and the contractual commitments Microsoft makes. This is the authoritative source for compliance and data residency verification.

Answer

Azure Resource Graph queries filtering by region

Answer

Azure Monitor geographic latency metrics dashboard

Answer

Application Insights dependency maps

Question 4

You are designing an enterprise search architecture on Azure that requires hybrid search capabilities. Which THREE components or features must be configured to successfully execute a hybrid query with semantic ranking in Azure AI Search? (Choose three)

Accepted Answer

A searchable Edm.String text field for keyword matching. Option B is correct because hybrid search always includes a keyword (full-text) component, which requires at least one searchable Edm.String field in the index so the query can perform BM25-scored term matching via the inverted index. Option C is correct because the vector half of a hybrid query needs a vector field of type Collection(Edm.Single) (Edm.SingleCollection) plus an attached vector profile (with HNSW or exhaustive KNN algorithm and a vectorizer if integrated vectorization is used) so the query engine can run the approximate nearest neighbor search. Option E is correct because semantic ranking is not automatic — it requires a semanticConfiguration defined on the index (specifying title, content, and keyword priority fields) that is referenced in the query's semanticSearch settings to invoke the L2 semantic reranker. Option A is not required: Azure Blob Storage is only an optional data source for indexers/pull-based ingestion, and hybrid queries can run against any populated index regardless of origin. Option D is not required: Azure AI Search natively performs reciprocal rank fusion (RRF) to merge keyword and vector scores internally, so no external Azure Functions score-merging logic is needed.

Answer

Azure Blob Storage configured as an external data source

Answer

An Azure Functions application for manual score merging

Question 5

Your Azure Service Bus Premium namespace hosts critical AI request queues. Due to sudden spikes in inference requests, one of the queues experiences peak concurrency exceeding the maximum throughput units. You need to scale the namespace capacity automatically without manual intervention. What feature should you configure?

Accepted Answer

Enable Auto-inflate on the Service Bus namespace and specify the maximum messaging units.. Auto-inflate is the native Azure Service Bus Premium feature that automatically scales messaging units (throughput capacity) when the namespace approaches its limits, up to a configured maximum. It requires Premium tier and operates without manual intervention, making it the correct answer for handling sudden concurrency spikes on critical queues.

Answer

Configure geo-disaster recovery pairing with an active-active replication policy.

Answer

Enable Partitioning on the Service Bus queue entities.

Answer

Configure Azure Functions Premium plan scaling triggers based on Service Bus queue length.

Question 6

Your team is comparing Azure Event Grid, Event Hubs, and Service Bus for an AI platform integration project. Which THREE statements correctly contrast these services? Each correct answer is factually accurate.

Accepted Answer

Event Grid is optimized for pub/sub discrete event notifications with push delivery.. Option B is correct because Event Grid is purpose-built for reactive, discrete-event pub/sub scenarios and pushes events to subscribers via webhooks or Azure service handlers, making it ideal for serverless triggers. Option C is correct because Event Hubs is a big-data streaming platform engineered for high-throughput telemetry and event ingestion (millions of events per second) with partitioned consumer groups and retention, not discrete notification routing. Option E is correct because Service Bus is the enterprise brokered-messaging service offering transactions, sessions for strict FIFO ordering, dead-lettering, duplicate detection, and scheduled delivery. Option A is wrong because native webhook push delivery for serverless triggers is an Event Grid capability, not Event Hubs, which requires consumers to pull from partitions (or use the Kafka/AMQP endpoints). Option D is wrong because AMQP 1.0 session-based strict FIFO ordering is a Service Bus feature, not Event Grid, which delivers discrete events with at-least-once semantics and no ordering guarantees.

Answer

Event Hubs provides native webhook push delivery for serverless triggers without consumer code.

Answer

Event Grid supports AMQP 1.0 session-based strict FIFO message ordering.

Question 7

Your application publishes events to an Azure Event Grid system topic. You want to filter events so that your webhook subscriber receives only events where the 'eventType' is 'Microsoft.Storage.BlobCreated'. Where should you configure this filter?

Accepted Answer

In the Event Grid subscription filter configuration blade under 'Included Event Types'.. Event filtering for Azure Event Grid is configured on the Event Grid subscription itself, not in the subscriber or the event source. The 'Included Event Types' setting in the Event Grid subscription filter configuration blade lets you specify which event types (such as 'Microsoft.Storage.BlobCreated') are delivered to the subscriber endpoint. This filter is evaluated by Event Grid before the event is pushed to the webhook, so only matching events reach the subscriber.

Answer

Within the Azure Function host.json configuration file.

Answer

In the Service Bus Topic subscription SQL filter.

Answer

Inside the Azure Storage account connection string settings.

Question 8

You are troubleshooting a performance issue in an AI application where dependency calls to Azure OpenAI take significantly longer during periods of high traffic. You want to query Log Analytics to find the 95th percentile (p95) duration of all dependency calls to Azure OpenAI over the past 24 hours. Which KQL query should you execute?

Accepted Answer

dependencies | where timestamp > ago(24h) | where target has 'openai' | summarize p95_duration = percentile(duration, 95) by target. Dependency calls (including outbound calls to Azure OpenAI) are recorded in the Application Insights 'dependencies' table, which includes a 'target' field identifying the dependency endpoint and a 'duration' field in milliseconds. The percentile() aggregation function computes the 95th percentile, and filtering with 'target has openai' scopes the query to Azure OpenAI calls. This query directly answers the requirement.

Answer

exceptions | where timestamp > ago(24h) | summarize count() by outerType

Answer

requests | where timestamp > ago(24h) | summarize count() by resultCode

Answer

traces | where timestamp > ago(24h) | summarize avg(severityLevel) by message

Question 9

You are deploying an Azure OpenAI Service resource and need to ensure that API keys are not used for authentication. Which configuration should you apply?

Accepted Answer

Disable local authentication on the Azure OpenAI resource and grant users the Cognitive Services OpenAI User role.. Azure role-based access control (Azure RBAC) can be used to authenticate requests to Azure OpenAI by disabling local authentication (API keys) via the 'disableLocalAuth' property.

Answer

Configure a managed identity on the app service and store the API key in Azure Key Vault.

Answer

Implement Cross-Origin Resource Sharing (CORS) rules on the Azure OpenAI resource.

Answer

Enable soft-delete on the Azure OpenAI resource.

Question 10

You are optimizing an Azure Event Hubs stream processing application in Python. Messages are being processed too slowly, and you notice high CPU utilization on the consumer instance due to synchronous network I/O. Which programming model should you adopt to maximize ingestion throughput?

Accepted Answer

Use the asynchronous Event Hub client library (`azure-eventhub.aio`) with `asyncio` for non-blocking I/O operations.. The azure-eventhub.aio library exposes an async client built on asyncio, allowing the consumer to await network I/O (receiving events, checkpointing) without blocking the event loop. This eliminates the CPU waste caused by synchronous blocking calls and lets a single instance handle many concurrent partition receivers, maximizing throughput.

Answer

Increase the partition count of the Event Hub to 1,000 partitions.

Answer

Switch from Event Hubs to Azure Storage Queues for parallel processing.

Answer

Migrate all consumer code to use synchronous REST API polling over HTTPS GET requests.

Question 11

You are building a chat application with memory using Azure AI Search. You want to retrieve previous conversation turns that are semantically similar to the current user prompt. What search mode should you use if you want to execute both a vector search and a keyword search simultaneously and combine their results?

Accepted Answer

Hybrid search. Hybrid search in Azure AI Search runs a vector (k-NN) query and a keyword (BM25) query in parallel against the same index, then merges the two result sets using Reciprocal Rank Fusion (RRF) to produce a single ranked list. This is exactly what the scenario requires: semantic similarity from embeddings plus lexical precision from keyword matching. It is the recommended default for chat-with-memory and RAG patterns because it captures both conceptual and exact-term matches.

Answer

Exhaustive k-NN search

Answer

Wildcard search

Answer

Fuzzy search only

Question 12

You are designing an AI streaming pipeline using Azure Event Hubs. You need to inspect diagnostic logs and operational metrics to track incoming request rates, server errors, and throttling events across the namespace. Where should you configure this telemetry collection in the Azure Portal?

Accepted Answer

Diagnostic Settings on the Event Hubs namespace pointing to a Log Analytics workspace.. Diagnostic Settings on the Event Hubs namespace is the correct place to route platform logs (including operational/diagnostic logs) and metrics to destinations like Log Analytics, Storage, or Event Hubs. This is where you enable collection of request rates, server errors, and throttling events for the namespace. It is the standard Azure Monitor integration point for resource-level telemetry.

Answer

Event Hubs Capture export storage container settings.

Answer

Azure Bastion diagnostic configuration.

Answer

Auto-Inflate throughput unit configuration blade.

Question 13

You are using Azure OpenAI Service to generate embeddings for your documents before storing them in Azure Cosmos DB for NoSQL. The embedding model outputs vectors with a length of 1536. When defining the vector embedding policy in Cosmos DB, what value should you specify for the dimensions property?

Accepted Answer

1536. The dimensions property in Cosmos DB's vector embedding policy must match the exact length of the vectors produced by the embedding model. Since the Azure OpenAI embedding model outputs 1536-dimensional vectors, you must specify 1536. Mismatched dimensions cause indexing failures or query errors.

Answer

3072

Answer

512

Answer

768

Question 14

You are configuring enterprise networking for an AKS cluster running sensitive AI models. Which THREE networking features should you implement for cluster security?

Accepted Answer

Azure Firewall or user-defined routes for outbound egress filtering. Option B is correct because Azure Firewall or user-defined routes (UDRs) let you control and filter outbound egress traffic from the AKS cluster, preventing exfiltration of sensitive AI models and enforcing FQDN/network rules. Option D is correct because Azure CNI Network Policies enforce Kubernetes NetworkPolicy objects at the pod level, restricting east-west traffic between pods so compromised workloads cannot freely reach other services. Option E is correct because a private AKS API server endpoint exposes the control plane only via a private IP inside your VNet or peered network, removing public internet exposure of the Kubernetes API. Option A is not appropriate because assigning public IPs to every worker node increases the attack surface and is unnecessary for secure egress. Option C is not appropriate because disabling all internal kube-dns resolution would break service discovery and core cluster functionality rather than improve security.

Answer

Public IP assignment to every worker node

Answer

Disabling all internal kube-dns resolution

Question 15

You are building a container image for an AI application that will be deployed to Azure Container Instances (ACI). The image will be stored in Azure Container Registry (ACR). You need to ensure that the image can be pulled by ACI securely without embedding registry credentials in the image or in scripts. Which TWO of the following approaches can be used to authenticate ACI to ACR? (Choose two.)

Accepted Answer

Create a service principal with the AcrPull role and use its credentials in the ACI deployment.. ACI can authenticate to ACR using either a managed identity with the AcrPull role or a service principal with the AcrPull role. Both methods avoid embedding credentials in the image. Managed identity is preferred for Azure resources as it eliminates secret management. The admin account is not recommended due to broad permissions, anonymous pull is insecure, and embedding tokens in images is a security risk.

Answer

Enable anonymous pull on the ACR instance so that ACI can pull images without authentication.

Answer

Use the Azure Container Registry's built-in token authentication with a scoped token stored in the container image.

Answer

Use the ACR admin account username and password stored in Azure Key Vault and referenced in the ACI deployment.