AI-200 Practice Test 4 — 10 Questions

Question 1

You are configuring an Azure Kubernetes Service (AKS) cluster to host GPU-accelerated AI model inference workloads using NVIDIA GPUs. Which component must you install in the cluster to enable containerized workloads to utilize the GPU nodes?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

NVIDIA GPU Operator. The NVIDIA GPU Operator automates the management of all NVIDIA software components needed to provision GPUs in Kubernetes.

Answer

NVIDIA Device Plugin for Kubernetes

Answer

KEDA scaler

Answer

Azure Monitor agent

Question 2

Which TWO Azure services can store and serve private Docker container images for AI workloads?

Accepted Answer

Azure Container Instances (pulling from ACR). Azure Container Registry and Azure Container Instances (via image pull secrets) interact with container images, while ACR is the dedicated private registry.

Answer

Azure Cognitive Services

Answer

Azure Bastion

Answer

Azure Logic Apps

Question 3

You are configuring authentication between an Azure Container App running an AI model and an Azure OpenAI resource. To adhere to security best practices, you must avoid storing API keys in environment variables or code. How should you configure this?

Accepted Answer

Configure a system-assigned managed identity on the Container App and grant it Cognitive Services OpenAI User role on the Azure OpenAI resource. Managed identities allow Azure resources to authenticate to services supporting Microsoft Entra authentication without embedding credentials.

Answer

Hardcode the secondary endpoint key into the Docker image build arguments

Answer

Enable anonymous public access on the Azure OpenAI resource for internal virtual network traffic

Answer

Store the Azure OpenAI primary key in an Azure Key Vault and reference it via Container App secrets with plain text retrieval

Question 4

Your data science team pushes container images to Azure Container Registry (ACR). You need to ensure that every image pushed is automatically scanned for known vulnerabilities before being deployed to production. Which ACR feature should you enable?

Accepted Answer

Microsoft Defender for Cloud vulnerability scanning. Microsoft Defender for Cloud integrates with ACR to provide vulnerability scanning for container images upon push or import.

Answer

ACR Tasks

Answer

Azure Policy geo-replication rules

Answer

Content Trust signing

Question 5

You are configuring an Azure Kubernetes Service (AKS) cluster for enterprise AI workloads. Which THREE practices should you implement to enhance cluster security and isolation? (Choose three.)

Accepted Answer

Configure Microsoft Entra Workload Identity for pod-to-Azure service authentication. Enterprise AKS security best practices include enabling Azure Policy for Kubernetes, using Azure RBAC for Kubernetes authorization, and utilizing Workload Identity for secure credential-less access to Azure services.

Answer

Disable TLS on the API server to improve inter-node communication speed

Answer

Share a single service principal across all namespaces for simplified administration

Question 6

You have a large AI model file (5GB) that needs to be loaded into your container at startup. What is the recommended way to handle this?

Accepted Answer

Mount the model from an Azure File Share.. Mounting the file from Azure Blob Storage or an Azure File Share avoids bloating the container image and speeds up deployment.

Answer

Download the model via `curl` at runtime.

Answer

Embed the model in the container image.

Answer

Use a base64 encoded string in the environment variable.

Question 7

Your containerized AI application requires a specific version of a kernel driver that is not installed on the AKS nodes. What is the most efficient way to manage this?

Accepted Answer

Use a privileged InitContainer to load the driver.. Using an InitContainer with appropriate privileges to install the driver on the host is a common pattern for specific hardware needs.

Answer

Mount the /proc filesystem as read-write.

Answer

Run the application as root.

Answer

Rebuild the AKS cluster.

Question 8

Which TWO of the following are true about Azure Container Apps?

Accepted Answer

It is a serverless container platform.. ACA is serverless and supports KEDA for scaling.

Answer

You must manage the underlying Kubernetes nodes.

Answer

It is not compatible with Dapr.

Answer

It does not support VNETs.

Question 9

An AKS cluster is configured with KEDA for autoscaling an AI inferencing service based on Azure Queue Storage length. The pods fail to scale. Which component should you inspect first?

Accepted Answer

The ScaledObject resource status.. The ScaledObject is the KEDA custom resource that defines the trigger. If it is misconfigured, the autoscaler will not function.

Answer

The Azure Container Registry webhook settings.

Answer

The Horizontal Pod Autoscaler (HPA) resource directly.

Answer

The Cluster Autoscaler logs.

Question 10

You want to track the latency of your model inference API in production. Which Azure tool should you integrate into your containerized application?

Accepted Answer

Azure Application Insights.. Application Insights is the standard for monitoring performance metrics and telemetry in Azure.

Answer

Azure Storage Queue.

Answer

Azure Event Hubs.

Answer

Azure Data Factory.