AI-200 Practice Test 31 — 15 Questions

Question 1

You are setting up monitoring for a custom machine learning scoring script running inside an Azure Container Instance. You want to track custom metrics such as inference prediction confidence scores over time in Application Insights. How should you record these custom metrics in your Python scoring script?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use the Application Insights TelemetryClient track_metric() method. Using the `track_metric` method of the Application Insights `TelemetryClient` in Python allows you to record custom numerical metrics and send them to Azure Monitor.

Answer

Save the metrics as text files in an Azure Blob Storage account and run hourly KQL queries

Answer

Print JSON strings to standard output and rely on Log Analytics automatic table parsing

Answer

Update Azure Key Vault secrets with the metric values

Question 2

Your application uses Azure Event Grid to deliver events to an Azure Function webhook. Due to a downstream database outage, the Azure Function returns HTTP 500 errors. How does Event Grid handle event delivery when the endpoint fails?

Accepted Answer

Event Grid retries delivery using an exponential backoff retry policy for up to 24 hours.. Event Grid implements a robust retry policy with exponential backoff and jitter for up to 24 hours by default. If delivery still fails, events can be dead-lettered to a storage account if configured.

Answer

Event Grid stops the event subscription until manually restarted by an administrator.

Answer

Event Grid immediately discards the event upon receiving the first HTTP 500 error.

Answer

Event Grid automatically migrates the event to an Azure Service Bus queue.

Question 3

You are designing an enterprise-grade event-driven system where producers send financial transactions to Azure Event Hubs. You must guarantee that every single message is accounted for and that no data is lost even if an entire availability zone suffers a catastrophic failure. Which deployment configuration should you select for your Event Hubs namespace?

Accepted Answer

Deploy an Event Hubs namespace in a region supporting Availability Zones with zone redundancy enabled (Premium or Dedicated tier).. To achieve high availability across availability zones, you must deploy Event Hubs in a region that supports Availability Zones, and use a Geo-Disaster Recovery or zone-redundant Premium/Dedicated tier namespace.

Answer

Configure Event Grid system topics with auto-delete set to false.

Answer

Deploy a Basic tier Event Hubs namespace with 30 consumer groups.

Answer

Use Azure Storage Queues configured with RA-GRS replication.

Question 4

You are debugging a Python application integrated with Application Insights. You notice that custom telemetry events generated in a background worker thread are not appearing in Application Insights. What is the most likely cause of this issue?

Accepted Answer

The application terminated or the worker thread exited before the telemetry client buffer was flushed. Application Insights telemetry client buffers messages in memory and flushes them asynchronously. If the background worker thread exits or the application shuts down without explicitly calling `flush()`, telemetry items in the buffer are lost.

Answer

Log Analytics ingestion rate limiting always drops multi-threaded telemetry

Answer

Application Insights automatically blocks all telemetry generated outside of HTTP request threads

Answer

The instrumentation key was incorrectly formatted as a GUID

Question 5

Your team is developing an AI solution that uses Azure Cognitive Services. You need to ensure that the API keys cannot be extracted from the client-side mobile application. What is the recommended architectural pattern to achieve this?

Accepted Answer

Implement a backend API proxy (e.g., Azure Functions or API Management) that authenticates mobile clients and calls Cognitive Services using secure server-side keys. Routing mobile client requests through an intermediary backend service (such as Azure API Management or Azure Functions) that holds the API keys securely prevents embedding keys in mobile code.

Answer

Use Azure Front Door to strip API keys from incoming mobile requests

Answer

Store the Cognitive Services API key in an encrypted local SQLite database on the mobile device

Answer

Configure Cognitive Services for anonymous public access and rely on mobile app version checks

Question 6

You need to export Azure Monitor metric and log data to an external SIEM solution for security auditing. Which Azure feature should you use to stream this telemetry in real-time to an external Event Hub?

Accepted Answer

Diagnostic settings configured to stream to an Azure Event Hub. Diagnostic settings in Azure Monitor support streaming platform logs and metrics directly to Azure Event Hubs, which can then forward data to external SIEM tools like Splunk or QRadar.

Answer

Azure Backup vault scheduled jobs

Answer

Azure Advisor recommendations export

Answer

Azure Resource Graph queries

Question 7

Your enterprise AI application is deployed across multiple Azure regions for high availability. You need to ensure that logs from Application Insights instances in all regions are aggregated into a single central Log Analytics workspace for unified querying. How should you configure this?

Accepted Answer

Configure each Application Insights resource to use the same shared centralized Log Analytics workspace during creation. When creating or configuring Application Insights resources, you can specify an existing Log Analytics workspace as the backend destination for multiple Application Insights resources across regions.

Answer

Deploy a separate Log Analytics workspace in every region and use Azure Backup to copy tables

Answer

Write a custom Python script that downloads logs from each region every hour and uploads them to Azure Blob Storage

Answer

Use Azure Traffic Manager to merge log data streams at the DNS level

Question 8

You are architecting an AI-driven video analytics pipeline using Azure Event Hubs. You need to ensure that frames belonging to the exact same video session are processed in strict chronological order by the same backend stream analytics worker. How should you partition your Event Hub?

Accepted Answer

Include the video session ID as the Partition Key when publishing events to the Event Hub.. To guarantee ordered processing for a specific entity, you must use a Partition Key when sending events to Event Hubs. All events with the same partition key are automatically routed to the same underlying partition.

Answer

Increase the consumer group count to match the number of active video sessions.

Answer

Set the message TTL to zero and enable capture mode on the Event Hub namespace.

Answer

Deploy an Azure Service Bus Session-enabled queue in front of the Event Hubs ingestion layer.

Question 9

Your Python AI application is deployed to Azure App Service and connects to Azure Key Vault using a managed identity. Recently, you rotated the Key Vault secret value, but your App Service application is still retrieving the old secret value. What is the most likely reason for this behavior?

Accepted Answer

The application or Key Vault reference client is caching the secret value locally in memory. Azure Key Vault references or SDK client-side caching can cause applications to cache secrets for a period before fetching the updated value.

Answer

Log Analytics ingestion latency delayed the secret propagation

Answer

Managed identities cannot read updated secrets without a subscription reboot

Answer

Azure Key Vault automatically prevents secret updates within 30 days of creation

Question 10

You are designing an enterprise messaging solution using Azure Service Bus. You need to ensure that messages published within a transaction (involving multiple messages sent to different queues) either all succeed or all fail together. What feature should you use?

Accepted Answer

Service Bus client transaction scope (TransactionScope in .NET). Azure Service Bus supports transactions using .NET TransactionScope or SendVia features, allowing multiple messages to be sent transactionally within the same messaging namespace.

Answer

Storage Account atomic blob leases

Answer

Event Grid atomic batch publishing mode

Answer

Event Hubs transaction coordinator checkpointing

Question 11

You are designing a message-based architecture in Azure Service Bus where certain high-priority messages must bypass standard messages in the queue and be processed immediately. What feature should you implement?

Accepted Answer

Implement custom application logic that peeks and receives messages by sequence number, while utilizing multiple queues for high versus low priority.. Azure Service Bus supports message deferral and dead-lettering, but for out-of-order priority processing, developers can implement message prioritization using multiple queues or retrieve messages by sequence number using Peek/Receive methods.

Answer

Enable Express Queues to bypass disk I/O for high-priority messages.

Answer

Configure Event Grid priority routing filters.

Answer

Set the Priority property on the BrokeredMessage header to 10.

Question 12

You are designing an AI streaming pipeline using Azure Event Hubs with Apache Kafka enabled. Existing Java producers using the Kafka producer API need to authenticate against Event Hubs securely using Microsoft Entra ID (OAuth 2.0). How should you configure the Kafka producer client properties?

Accepted Answer

Configure security.protocol=SASL_SSL, sasl.mechanism=OAUTHBEARER, and implement an OAuthBearerTokenCallbackHandler for Microsoft Entra ID token acquisition.. Event Hubs Kafka endpoints support SASL OAuthBearer authentication. You must configure `security.protocol=SASL_SSL`, `sasl.mechanism=OAUTHBEARER`, and supply a custom callback handler to generate Microsoft Entra access tokens.

Answer

Use plain text authentication with the Event Hub root SAS key as the username and password.

Answer

Deploy an Event Grid webhook proxy between the Kafka producer and Event Hubs.

Answer

Set the bootstrap.servers property to the Service Bus AMQP connection string.

Question 13

You need to prevent accidental deletion of a production Azure OpenAI resource that contains critical customer deployment configurations. Which Azure resource lock configuration should you apply?

Accepted Answer

CanNotDelete resource lock. Applying a 'CanNotDelete' resource lock prevents any user from deleting the resource while still allowing read and modify operations.

Answer

ReadOnly resource lock

Answer

Azure Policy deny assignment

Answer

Network Security Group deny rule

Question 14

Your Python-based AI service runs on an Azure Virtual Machine and connects to Azure OpenAI. To adhere to security best practices, you decide to eliminate storage of credentials on the VM disk by enabling a system-assigned managed identity on the virtual machine. How does your Python code obtain an access token using this managed identity?

Accepted Answer

Use DefaultAzureCredential from the azure-identity library to automatically authenticate via the VM's IMDS endpoint. Using the `DefaultAzureCredential` or `ManagedIdentityCredential` from the `azure-identity` package allows the Python code to query the local Azure Instance Metadata Service (IMDS) endpoint to obtain access tokens securely.

Answer

Use static storage account connection strings hardcoded in environment variables

Answer

Make an unauthenticated HTTP GET request to the public Azure OpenAI endpoint with no headers

Answer

Read the plain-text password from a file located in /etc/passwd on the virtual machine

Question 15

You want to create a centralized dashboard in the Azure portal that displays custom AI model performance metrics alongside infrastructure CPU and memory metrics. Which Azure Monitor feature should you create?

Accepted Answer

Azure Workbook. Azure Workbooks provide a flexible canvas for data analysis and building rich visual reports within the Azure portal, combining metrics and Log Analytics queries.

Answer

Azure Service Bus queue

Answer

Azure Key Vault access policy

Answer

Azure Container Registry webhook