AI-200 Practice Test 3 — 10 Questions

Question 1

You need to deploy a set of batch AI processing containers in Azure Container Instances that run to completion and then terminate. Which container group restart policy should you select?

Accepted Answer

Never. For batch jobs that run to completion and stop, the restart policy should be set to Never or OnFailure.

Answer

Always

Answer

UnlessStopped

Answer

OnFailure

Question 2

When configuring an Azure Container Instances container group, which TWO properties can you define?

Accepted Answer

DNS name label for public IP resolution. An ACI container group supports defining networking properties like DNS name labels, environment variables, restart policies, and resource requests.

Answer

AKS node pool sizing

Answer

Virtual machine scale set autoscaling rules

Answer

Kubernetes namespace allocation

Question 3

You are setting up image builds for a multi-architecture (AMD64 and ARM64) AI model container using Azure Container Registry Tasks. Which command or feature should you use to build images for both architectures simultaneously?

Accepted Answer

az acr build with a multi-step task or docker buildx configuration. ACR Tasks support multi-architecture builds using Docker buildx commands within a task definition file or quick task execution.

Answer

Azure DevOps pipeline running docker push directly

Answer

az aks create with --node-os-sku

Answer

az acr import

Question 4

You are configuring enterprise networking for an AKS cluster running sensitive AI models. Which THREE networking features should you implement for cluster security?

Accepted Answer

Azure Firewall or user-defined routes for outbound egress filtering. Securing AKS network traffic involves Azure CNI network policies, private cluster API server endpoints, and outbound traffic filtering via Azure Firewall.

Answer

Public IP assignment to every worker node

Answer

Disabling all internal kube-dns resolution

Question 5

You are troubleshooting high latency in an AI inference workload on AKS. You suspect the issue is caused by container startup time (cold starts). Which feature helps mitigate this?

Accepted Answer

Azure Container Registry Artifact Streaming.. Image Pull Secrets and ACR 'Artifact Streaming' (or pre-pulling images) are designed to reduce startup latency.

Answer

Configuring Vertical Pod Autoscaler.

Answer

Increasing the memory limit for the pod.

Answer

Using a smaller base OS distribution.

Question 6

You are running a distributed AI training job on AKS using MPI. Which network configuration is critical for performance?

Accepted Answer

Enable Azure Accelerated Networking on the node pool.. For distributed training, high-bandwidth/low-latency networking like InfiniBand or Azure Accelerated Networking is required.

Answer

Use an internal VNET peering.

Answer

Enable standard load balancing.

Answer

Disable the pod network policy.

Question 7

You are designing a secure MLOps pipeline using Azure Container Registry. Which THREE practices should you implement to secure your AI container images?

Accepted Answer

Use managed identities instead of admin credentials for registry authentication. Securing container images in ACR involves vulnerability scanning, access control with managed identities, and content signing.

Answer

Disable role-based access control (RBAC) on the registry to simplify management

Answer

Enable anonymous pull access for all public developers

Question 8

Your team is evaluating Azure Container Apps versus Azure Kubernetes Service (AKS) for hosting containerized AI workloads. Which TWO characteristics are advantages of Azure Container Apps over standard AKS? (Choose two.)

Accepted Answer

Simplified container management without direct exposure or management of Kubernetes master nodes. Azure Container Apps provides simplified serverless management without exposing Kubernetes control plane complexity and offers native scale-to-zero capabilities.

Answer

Requirement to manage custom CNI overlay networking routing tables manually

Answer

Mandatory manual configuration of KEDA controllers and Ingress controllers

Answer

Complete low-level administrative access to kernel modules and cluster root certificates

Question 9

You are deploying a custom text-embedding model container to Azure Container Apps. You need to configure scaling rules so that the container scales out based on incoming HTTP traffic and Azure Service Bus queue length. Which TWO scalers can you configure? Each correct answer presents part of the solution.

Accepted Answer

azure-servicebus scaler. Azure Container Apps uses KEDA under the hood and natively supports scaling based on HTTP traffic (http scaler) and Azure Service Bus queues (azure-servicebus scaler).

Answer

cpu memory-limit scaler

Answer

azure-blob-storage scaler

Answer

container-registry scaler

Question 10

You want to ensure your AI inference service is highly available across multiple regions. What is the recommended approach for container distribution?

Accepted Answer

Enable ACR Georeplication.. Georeplication in ACR ensures images are available locally in multiple regions, improving deployment speed and availability.

Answer

Store images in a public Docker Hub account.

Answer

Use a single global ACR endpoint.

Answer

Manually copy images using a script.