AI-200 Practice Test 33 — 15 Questions

Question 1

You are securing an Azure AI Search service. Which THREE of the following actions are recommended for implementing a robust security posture? (Choose THREE)

Accepted Answer

Enable Private Endpoint access and disable public network access.. Private endpoints, RBAC, and disabling API keys in favor of Entra ID are the three pillars of securing AI Search.

Answer

Store all search index data in a public blob container for faster access.

Answer

Use an Admin API key for all read-only client applications.

Question 2

Your development team is implementing an event-driven microservices architecture using Azure Service Bus. You need to ensure strict FIFO (First-In, First-Out) message processing order for related financial transaction events in an AI fraud-detection workflow. Which THREE configuration steps are required? (Choose three)

Accepted Answer

Implement a MessageSession receiver in your client application to process messages sequentially per session.. To enforce strict FIFO ordering in Service Bus, you must enable sessions on the queue, ensure related messages share the same session ID, and use a sequential processing pattern on the receiver side.

Answer

Configure partitioning on the Service Bus namespace tier.

Answer

Enable duplicate detection with a 10-minute history window.

Question 3

You are reviewing security logs in Azure Key Vault and notice unexpected access attempts from an unrecognized IP address. You need to immediately revoke all active Azure Active Directory tokens issued to a specific compromised user or service principal across your Azure AI applications. What action should you take?

Accepted Answer

Revoke user refresh tokens using Azure AD PowerShell (Revoke-AzureADUserAllRefreshToken) or Microsoft Entra admin center. Revoking refresh tokens in Azure Active Directory forces all active sessions and tokens for the specified user or service principal to become invalid immediately.

Answer

Restart the Azure portal browser session

Answer

Change the Azure subscription display name

Answer

Delete the Azure Monitor Log Analytics workspace

Question 4

You are building an event-driven architecture where an Azure Function needs to process messages from an Azure Service Bus queue. To optimize cost and resource utilization during quiet periods, you want the Azure Function host to scale down to zero instances when the queue is empty, and scale out rapidly when messages arrive. Which hosting plan should you choose?

Accepted Answer

Azure Functions Premium Plan or Consumption Plan. Azure Functions Premium Plan or Consumption Plan supports scale-to-zero and scaling based on Azure Service Bus queue length metrics via the Azure Functions Service Bus trigger scaler.

Answer

Azure Virtual Machines with autoscale rules

Answer

Azure App Service Dedicated (App Service Plan - S1 tier)

Answer

Azure Kubernetes Service with manual pod scaling

Question 5

You are designing a high-scale event ingestion pipeline using Azure Event Hubs in a secure enterprise environment. Public internet access must be disabled entirely. Producers and consumers reside in a peered Virtual Network (VNet). How should you configure network connectivity to the Event Hubs namespace?

Accepted Answer

Configure Private Endpoints for the Event Hubs namespace and disable public network access.. To secure Event Hubs without public internet access, you must configure private endpoints using Azure Private Link, placing network interfaces inside the VNet and disabling public network access on the namespace.

Answer

Enable Service Bus Relay hybrid connections across the VNet gateway.

Answer

Deploy an Azure Bastion host in the subnet connected to the Event Hubs SAS key manager.

Answer

Configure IP firewall rules to allow the default gateway IP of the VNet.

Question 6

You are migrating a custom RAG solution to Azure. Your data pipeline generates text embeddings using Azure OpenAI text-embedding-ada-002 and stores them alongside relational metadata in Azure SQL Database. To perform vector similarity searches efficiently directly inside Azure SQL, which data type and extension should you leverage?

Accepted Answer

Using the VECTOR data type and the vector_distance() function.. Azure SQL Database supports native vector data types and functions via integrations and extensions, allowing storage of vectors in binary or specialized formats and querying using vector distance functions like vector_distance().

Answer

Using varbinary(max) columns combined with Azure Analysis Services tabular models.

Answer

Creating a CLR stored procedure wrapping Python NumPy libraries.

Answer

Storing vectors as NVARCHAR(MAX) JSON strings and parsing them with OPENJSON.

Question 7

You are designing an application that requires low-latency vector search for a high-traffic AI chatbot. You need to ensure the vector index remains performant as the dataset grows into millions of documents. Which index configuration in Azure AI Search should you implement to optimize for speed over absolute recall accuracy?

Accepted Answer

HNSW. HNSW (Hierarchical Navigable Small World) allows for approximate nearest neighbor search, providing the best performance-to-accuracy balance for large datasets.

Answer

Flat Indexing

Answer

Exhaustive KNN

Answer

Partitioned Indexing

Question 8

You are building an AI financial transactions ledger using Azure Service Bus. Each transaction must be processed strictly in order per account ID, and if a transaction fails, subsequent transactions for that specific account must wait until the issue is resolved. Which feature should you use?

Accepted Answer

Service Bus Sessions (SessionId set to the account ID). Azure Service Bus Sessions provide guaranteed FIFO ordering and session-level locking. All messages sharing the same SessionId are locked by a single worker, ensuring serial processing per session.

Answer

Event Hubs partitions with round-robin load balancing

Answer

Azure Storage Queues with invisible timeout properties

Answer

Event Grid advanced filters keyed by account ID

Question 9

You are configuring vector indexing in Azure Cosmos DB for MongoDB (vCore). You need to choose an indexing type for your vector property to balance query performance and recall accuracy for high-dimensional data. Which vector index type should you select for approximate nearest neighbor (ANN) search?

Accepted Answer

HNSW (Hierarchical Navigable Small World). Azure Cosmos DB for MongoDB (vCore) supports both DiskANN and HNSW (Hierarchical Navigable Small World) index types for vector search. HNSW and DiskANN provide ANN search capabilities, with DiskANN being optimized for large-scale datasets stored on SSDs.

Answer

FULLTEXT index

Answer

B-Tree index

Answer

HASH index

Question 10

When troubleshooting a Python AI application integrated with Application Insights, you want to ensure comprehensive error tracking and telemetry collection. Which TWO of the following SDK practices should you implement? (Choose two)

Accepted Answer

Wrap unhandled exception handling with telemetry_client.track_exception() to capture stack traces.. Using standard exception tracking methods and flushing telemetry buffers before application shutdown prevents data loss.

Answer

Disable the Application Insights telemetry client entirely in production to save bandwidth.

Answer

Route all application logs exclusively to local text files on ephemeral container storage.

Answer

Store plain-text passwords in telemetry custom dimensions.

Question 11

You are building an event-driven workflow where an external partner application needs to send custom events to your Azure backend. You decide to use Azure Event Grid Custom Topics. When the partner publishes an event, which event schema format must the JSON payload adhere to?

Accepted Answer

CloudEvents v1.0 schema or Event Grid schema. Azure Event Grid supports the CloudEvents v1.0 schema as well as the native Event Grid schema for custom topics.

Answer

OData v4 batch request format

Answer

SOAP 1.2 XML envelope format

Answer

AMQP 1.0 message format exclusively

Question 12

You want to monitor the security posture and compliance score of your Azure AI resources. Which TWO of the following tools should you use? (Choose two)

Accepted Answer

Azure Policy compliance dashboard for regulatory standard evaluations. Microsoft Defender for Cloud and Azure Policy are the primary tools for assessing security posture and policy compliance.

Answer

Azure Container Registry storage tiers

Answer

Azure DNS zone editor

Answer

Azure Cost Management for billing forecasts

Question 13

You are designing an enterprise AI event-driven pipeline. Events from multiple SaaS applications are published to an Azure Event Grid domain. You need to ensure that a rogue tenant cannot exhaust the delivery throughput of other tenants. Which feature should you leverage?

Accepted Answer

Deploy separate Event Grid topics or distinct Event Domains per tenant with dedicated custom access keys or managed identities.. Azure Event Grid domains allow multi-tenant isolation by grouping topics under a single domain resource, and quotas/throttling are managed at the tier level, but for tenant isolation, separate Event Grid topics/domains or enterprise tier configurations are utilized.

Answer

Set the maximum delivery retry count to zero for all tenants.

Answer

Enable Azure DDoS Protection Standard on the storage account dead-letter container.

Answer

Configure Service Bus partitioned queues in front of the Event Grid domain.

Question 14

Your application consumes messages from an Azure Service Bus queue using PeekLock mode. Which THREE actions can your worker code perform on a received message object? Each correct answer represents a valid Service Bus SDK operation.

Accepted Answer

DeadLetterAsync() to move the message to the dead-letter sub-queue. Under PeekLock mode, workers can Complete, Abandon, or Dead-letter a message.

Answer

CommitTransactionAsync() directly on the message instance

Answer

CaptureToBlobAsync() to archive the message to storage

Question 15

You are developing an enterprise retrieval-augmented generation (RAG) application using Azure AI Search. You need to configure a vector index to store dense vector embeddings alongside traditional text fields. Which property within the Azure AI Search index definition must be explicitly configured with a vector search profile to enable HNSW (Hierarchical Navigable Small World) algorithm indexing?

Accepted Answer

vectorSearchProfile. The vectorSearch configuration block inside an Azure AI Search index definition requires a profiles array where algorithms and vectorizer settings are tied together. Each searchable vector field then references the vector search profile via the vectorSearchProfile property.

Answer

vectorIndexKind

Answer

compressionMethod

Answer

similarityFunction