AI-200 Practice Test 35 — 15 Questions

Question 1

Your organization uses Azure Service Bus Queues. A downstream processing service is undergoing maintenance and will be offline for 4 hours. You want to temporarily pause message processing without losing messages or triggering dead-letter timeouts. What is the recommended approach?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Set the queue status to 'Disabled' via the Azure Portal or SDK.. If workers are simply stopped, messages remain safely in the queue locked or unlocked depending on whether receivers are polling. Stopping the consumer application effectively pauses processing while the broker securely stores the messages.

Answer

Export all messages to Azure Blob Storage and purge the queue.

Answer

Delete the Service Bus queue and recreate it when maintenance finishes.

Question 2

Which TWO Azure services or features can be used to securely store and reference secrets such as connection strings for an Azure AI Search service without hardcoding them?

Accepted Answer

Managed Identities. Azure Key Vault and Managed Identities (or App Configuration secret references) are the standard mechanisms for secure secret management in Azure.

Answer

Azure Blob Storage public containers

Answer

Azure DevOps variable groups with unencrypted plain text

Answer

Local application configuration JSON files

Question 3

Your AI ingestion pipeline ingests millions of clickstream events per second from IoT devices and streams them into an Azure ML training pipeline. Which Azure service is specifically designed for high-throughput, low-latency telemetry ingestion at this scale?

Accepted Answer

Azure Event Hubs. Azure Event Hubs is a big data streaming platform and event ingestion service capable of receiving and processing millions of events per second.

Answer

Azure Notification Hubs

Answer

Azure Event Grid

Answer

Azure Service Bus Queues

Question 4

An enterprise AI system uses Azure Service Bus Topics to distribute work items. One of your subscriptions has a high volume of low-priority messages that block high-priority tasks. You want to enable high-priority messages to be processed first without creating separate topics. Which Service Bus feature should you use?

Accepted Answer

Create multiple subscriptions with SQL filters evaluating a custom 'Priority' property.. Azure Service Bus supports receiving messages by Sequence Number or using message priorities via sessions/filters, but Service Bus queues/subscriptions natively support peek and receive by priority if implemented with multiple subscriptions or SQL filters. However, Service Bus also supports partitioning and sorting. Wait, Service Bus does not have a native integer priority queue out of the box unless implemented via multiple subscriptions with SQL filters checking a Priority property.

Answer

Configure Event Grid advanced filters on the Service Bus topic.

Answer

Enable Service Bus Priority Queueing in the namespace configuration settings.

Answer

Enable Auto-forwarding from the low-priority queue to the dead-letter queue.

Question 5

An AI application uses Azure Service Bus queues for task distribution. A background worker receives a message, but needs more time to complete the lengthy AI inference task before the message lock expires. Which method should the worker invoke?

Accepted Answer

RenewLockAsync. The worker should call `RenewLockAsync` on the message receiver to extend the lock duration and prevent other workers from picking up the message.

Answer

AbandonAsync

Answer

DeadLetterAsync

Answer

CompleteAsync

Question 6

Your team is preparing an Azure AI application for production release. You need to implement robust monitoring and observability. Which TWO of the following steps should be taken? (Choose two)

Accepted Answer

Configure Azure Monitor metric alerts and action groups for resource utilization and throttling thresholds.. Configuring Application Insights SDK for request/dependency tracing and setting up Azure Monitor metric alerts for CPU/throttling are core observability steps.

Answer

Delete all log analytics workspaces weekly.

Answer

Rely solely on manual user bug reports without automated telemetry.

Answer

Disable all diagnostic logging to reduce storage overhead.

Question 7

You are designing a multi-tenant AI document processing system. Tenants upload documents, and events are dispatched via Azure Event Grid. You need to ensure that tenant isolation is maintained and that events are securely delivered to tenant-specific webhook endpoints using Azure AD (Entra ID) authentication. Which authentication mechanism should you configure on the Event Grid subscription?

Accepted Answer

Configure a Managed Identity and Microsoft Entra ID authentication on the Event Grid webhook subscription destination.. Event Grid supports delivering events to webhook endpoints secured by Microsoft Entra ID by configuring an Azure AD application and managed identity.

Answer

Configure a Shared Access Signature (SAS) token on the Event Grid topic endpoint.

Answer

Attach an IP firewall rule on the Event Grid namespace to restrict delivery sources.

Answer

Enable Basic Authentication with a static API key in the Event Grid subscription schema settings.

Question 8

You are managing an Azure Service Bus Premium namespace. Your application requires strict transactional messaging where a worker receives a message from Queue A, processes it, and sends a resulting message to Queue B. If any step fails, both actions must be rolled back. How should you implement this?

Accepted Answer

Wrap the receive and send operations inside a .NET TransactionScope block.. Using .NET TransactionScope with Service Bus allows receiving from Queue A and sending to Queue B within a single atomic transaction.

Answer

Set the message session ID to the same value on both queues.

Answer

Enable Event Grid automatic forwarding between queues.

Answer

Use Event Hubs checkpoints for transactional rollback.

Question 9

Your company policy requires securing AI model endpoints by disabling public internet access and ensuring all API requests use secure managed identities. Which TWO actions must you take? (Choose two)

Accepted Answer

Disable public network access on the Azure AI service resource and configure a private endpoint.. Disabling public network access requires Private Endpoints, and managed identity authentication requires configuring the target service's access control via Azure RBAC.

Answer

Expose the AI endpoint via an unencrypted HTTP binding for maximum performance.

Answer

Store all AI model weights and endpoint keys in public GitHub repositories for CI/CD access.

Answer

Configure a shared access signature (SAS) token with a 10-year expiration period.

Question 10

You are writing a Python application that sends telemetry data to an Azure Event Hub. To ensure high performance and non-blocking batch sends, which method from the `azure-eventhub` SDK should you use?

Accepted Answer

producer.create_batch() followed by producer.send_batch(). The `EventHubProducerClient` provides `create_batch()` to construct a batch object, and `send_batch()` to send it asynchronously or synchronously.

Answer

event_grid_publisher.upload_blob()

Answer

client.publish_to_service_bus_queue()

Answer

producer.send_single_event_blocking() for every record

Question 11

You are configuring role-based access control for an Azure AI Search service. A data scientist needs to index content and query documents, but must not be permitted to manage service-level keys or change admin configurations. Which built-in role should you assign?

Accepted Answer

Search Index Data Contributor. Search Index Data Contributor allows users to read, write, and search index data, adhering to the principle of least privilege without granting admin key management rights.

Answer

Search Service Contributor

Answer

Cognitive Services Contributor

Answer

Storage Blob Data Reader

Question 12

You are troubleshooting a scenario where an Azure App Service hosting an AI frontend cannot communicate with an Azure OpenAI endpoint secured by a private endpoint in a different virtual network. Which THREE of the following networking configurations should you verify? (Choose three)

Accepted Answer

Virtual network peering between the App Service VNet and the private endpoint VNet.. Virtual network peering, private DNS zone integration, and App Service VNet integration must be correctly configured for private endpoint communication across VNets.

Answer

Azure Front Door geo-filtering rules blocking all international DNS queries.

Answer

Local admin passwords on the App Service worker instances.

Question 13

You are designing a big data telemetry ingestion pipeline using Azure Event Hubs. Which THREE configuration options or properties must you consider when planning Event Hubs capacity and scaling? (Choose three)

Accepted Answer

Partition Count. When planning Event Hubs capacity, you must consider Throughput Units (or Processing Units in dedicated clusters), Partition Count, and Message Retention Period.

Answer

Service Bus Lock Duration

Answer

Event Grid Webhook Handshake Timeout

Question 14

An enterprise deployment of Azure OpenAI requires data encryption using a key that your security team fully manages and controls in Azure Key Vault. What must you configure?

Accepted Answer

Configure Customer-Managed Keys (CMK) using an Azure Key Vault key with soft-delete and purge protection enabled, linked via a managed identity.. Customer-managed keys (CMK) can be used with Azure OpenAI by configuring an encryption setting on the cognitive services account pointing to an Azure Key Vault key with soft-delete and purge protection enabled.

Answer

Store the API keys in Azure Key Vault and enable automatic rotation every 7 days.

Answer

Configure infrastructure encryption at rest using a Microsoft-managed default key.

Answer

Enable Always Encrypted on the Azure OpenAI resource configuration plane.

Question 15

You are troubleshooting a custom LLM application deployed to an Azure Kubernetes Service (AKS) cluster. Requests are failing intermittently with HTTP 429 errors from Azure OpenAI. You need to implement a resilient observability and retry strategy using Azure Monitor. Which metric should you monitor to identify throttling?

Accepted Answer

Monitor the 'Requests' metric filtered by Response Code 429 and set up smart detection rules in Application Insights.. HTTP 429 errors correspond to rate limiting (Tokens Per Minute or Requests Per Minute limits exceeded). The 'Processed Prompt Tokens' and 'Generated Tokens' metrics along with Azure Monitor alerts on 'Requests' metric with dimension 'Response Code: 429' are standard.

Answer

Monitor 'Disk Queue Length' on the persistent volumes attached to the pods.

Answer

Monitor 'CPU Utilization' of the AKS pods running the client application.

Answer

Monitor 'Network Outbound' bytes from the AKS cluster.