AI-200 Practice Questions 2 — 50 Questions

Question 1

You are designing an application that stores vector embeddings in Azure SQL Database. Which data type should you use to store vector data natively in modern Azure SQL?

Accepted Answer

VECTOR native data type. Azure SQL Database supports the vector data type (along with native vector functions like vector_distance) to store and query high-dimensional embeddings efficiently.

Answer

VARCHAR(MAX) JSON string

Answer

FLOAT array collection

Answer

VARBINARY(MAX) blob

Question 2

You need to configure network security for an Azure Container Apps environment that hosts an internal AI scoring API. The API must only be reachable from a specific Azure Virtual Network (VNet) and blocked from public internet access. How should you configure the environment?

Accepted Answer

Deploy the Container Apps environment with an internal Virtual Network integration and internal load balancer. Deploying Azure Container Apps with an internal Load Balancer (ILB) restricts ingress to a private IP within an integrated Virtual Network.

Answer

Attach a Private Endpoint to the Azure Container Registry hosting the app

Answer

Enable IP security restrictions on the default public ingress

Answer

Configure an Azure Front Door instance with WAF rules in front of the public endpoint

Question 3

You are troubleshooting intermittent network timeout errors between microservices in an AKS cluster running an AI pipeline. You suspect that network policies are blocking required inter-pod communication. Which CNI plugin must be configured in AKS to enforce these network policies?

Accepted Answer

Azure CNI with Azure Network Policies or Calico enabled. Azure CNI with Azure Network Policies or Calico network policies must be enabled in AKS to enforce namespace and pod-level traffic rules.

Answer

Kubernetes standard kube-proxy in IPVS mode only

Answer

Azure Virtual Network NAT Gateway

Answer

Kubenet basic networking without network policies

Question 4

You are deploying a model that requires a specific version of a non-standard OS library. You want to ensure the build environment is consistent across your team. What should you use?

Accepted Answer

A Dockerfile with fixed base image tags.. Multi-stage Dockerfiles ensure the build environment is defined as code and consistent.

Answer

Manual installation on the build agent.

Answer

Install the library via a post-deployment script.

Answer

Use the 'latest' tag for the base image.

Question 5

You are deploying an AI model to AKS that requires a specific kernel module. What is the recommended strategy to ensure the node has this module?

Accepted Answer

Use a privileged InitContainer to load the module.. Using a Custom Node Image or a DaemonSet to load the module is the standard way to handle kernel dependencies.

Answer

Ask Microsoft support to update the kernel.

Answer

Modify the AKS cluster configuration file.

Answer

Include the module in the Docker image.

Question 6

You are using Azure Container Apps to host a web API for an AI model. You want to ensure that only authorized traffic reaches the container. How should you secure the endpoint?

Accepted Answer

Enable 'Authentication' in the Ingress settings.. Container Apps can be placed in a VNET or use 'Ingress' settings with 'Authentication' enabled (e.g., Azure AD).

Answer

Configure an Azure Firewall in front of the Container App.

Answer

Use the --allow-all flag in the deployment command.

Answer

Place the container in a Public IP configuration.

Question 7

Which THREE of the following are benefits of using ACR Tasks for containerized AI workloads?

Accepted Answer

Triggering builds on base image updates.. ACR Tasks automate builds, secure workflows, and integrate with source control triggers.

Answer

Automatic scaling of the registry.

Answer

Direct deployment to Azure SQL.

Question 8

Which TWO of the following can be used to manage secrets in a containerized AI workload?

Accepted Answer

Azure Key Vault Secret Store CSI driver.. Kubernetes Secrets and Azure Key Vault (with FlexVolume or Secret Store CSI) are the two standard ways.

Answer

Embedding them in the image.

Answer

Azure Data Lake.

Answer

Writing secrets to a log file.

Question 9

You notice that your AKS pods are stuck in 'ContainerCreating' state. You check the events and see 'FailedMount'. What is the most likely cause?

Accepted Answer

The associated Persistent Volume Claim (PVC) is missing or cannot be bound.. FailedMount typically occurs when a requested volume (like a PVC or Secret) cannot be attached or accessed.

Answer

The node is out of CPU resources.

Answer

The container crashed immediately.

Answer

The container image is too large.

Question 10

Which similarity metric measures the cosine of the angle between two vectors, focusing on orientation rather than magnitude, and is commonly used in Azure AI Search?

Accepted Answer

cosine. Cosine distance/similarity measures the angle between two vectors and is one of the standard supported metrics in Azure AI Search and Cosmos DB.

Answer

manhattan

Answer

euclidean

Answer

dotProduct

Question 11

You are configuring vector search options in Azure Cosmos DB for NoSQL. Which TWO distance metrics are supported when defining a vector embedding policy? (Choose two)

Accepted Answer

euclidean. Azure Cosmos DB for NoSQL supports cosine, dotproduct, and euclidean distance metrics for vector similarity search.

Answer

hamming

Answer

manhattan

Answer

jaccard

Question 12

Which Azure feature allows you to scan images in your registry for vulnerabilities before deploying them to your production cluster?

Accepted Answer

Microsoft Defender for Containers.. Microsoft Defender for Containers (formerly Defender for ACR) provides scanning for images in ACR.

Answer

Azure Monitor.

Answer

Azure Key Vault.

Answer

Azure Policy.

Question 13

You are designing an MLOps pipeline on Azure Kubernetes Service (AKS) for a computer vision model. You need to configure GPU sharing among multiple inference pods on the same node to optimize cost. Which TWO actions should you take? Each correct answer presents part of the solution.

Accepted Answer

Enable GPU time-slicing or NVIDIA Multi-Instance GPU (MIG) configuration.. To achieve GPU sharing in AKS, you can utilize the NVIDIA GPU Operator alongside Kubernetes device plugins or time-slicing features, which enable multiple containers to share a single physical GPU.

Answer

Set the pod priority class to system-node-critical.

Answer

Deploy the KEDA scaler with an Azure Queue trigger.

Answer

Configure the Azure CNI plugin for dynamic IP allocation.

Question 14

Which Azure feature allows you to set up a private, internal-only container registry?

Accepted Answer

Azure Private Link.. Private Link allows you to access ACR over a private IP address from your VNET.

Answer

Azure Bastion.

Answer

Public access with firewall rules.

Answer

VPN Gateway.

Question 15

Which command-line interface tool is used to deploy and manage container images directly to Azure Container Registry?

Accepted Answer

az acr.. The Azure CLI (az acr) is the standard tool for managing ACR resources.

Answer

helm.

Answer

docker build.

Answer

kubectl.

Question 16

You are using Azure Container Apps. You need to deploy a new version of your AI model without downtime. Which deployment strategy should you configure?

Accepted Answer

Traffic splitting between revisions.. Blue-Green or Canary deployments in ACA allow traffic shifting between revisions without downtime.

Answer

Overwrite the current revision.

Answer

Rolling update.

Answer

Scale to zero and redeploy.

Question 17

Which TWO of the following are valid autoscaling options for AKS?

Accepted Answer

Cluster Autoscaler (CA).. Horizontal Pod Autoscaler and Cluster Autoscaler are the two main ways to scale AKS.

Answer

Manual registry scaling.

Answer

Storage capacity scaling.

Answer

Azure Service Bus scaling.

Question 18

You are using Azure OpenAI Service to generate embeddings for your documents before storing them in Azure Cosmos DB for NoSQL. The embedding model outputs vectors with a length of 1536. When defining the vector embedding policy in Cosmos DB, what value should you specify for the dimensions property?

Accepted Answer

1536. The dimensions property in the Azure Cosmos DB vector embedding policy must exactly match the output dimensions of the embedding model used (1536 for text-embedding-ada-002).

Answer

3072

Answer

512

Answer

768

Question 19

You are optimizing search performance in Azure AI Search. You notice that vector queries are consuming excessive memory and slowing down. You decide to enable exhaustive k-NN fallback for specific queries. What does exhaustive k-NN do?

Accepted Answer

It searches all vectors exactly without relying on an approximate nearest neighbor graph. Exhaustive k-NN performs an exact search over all vectors in the index rather than an approximate search using an HNSW graph, ensuring 100% recall at the expense of higher query latency.

Answer

It compresses the vector index by 50%

Answer

It shards the index across multiple search units

Answer

It caches query results in Redis

Question 20

Which distance metric in Azure Cosmos DB vector search calculates the inner product of two vectors, measuring both magnitude and angle?

Accepted Answer

dotproduct. The dotproduct distance metric computes the inner product of two vectors.

Answer

cosine

Answer

euclidean

Answer

manhattan