AI-200 Containerized AI Workloads Practice Test 7 — 15 Questions

Question 1

You are troubleshooting high latency in an AI inference workload on AKS. You suspect the issue is caused by container startup time (cold starts). Which feature helps mitigate this?

Accepted Answer

Azure Container Registry Artifact Streaming.. Azure Container Registry (ACR) Artifact Streaming (also called streaming artifacts) allows container image layers to be pulled on demand as the container starts, rather than downloading the entire image first. This dramatically reduces cold-start time for large AI inference images by letting the container begin execution while layers stream in the background. It directly addresses the container startup latency described.

Answer

Configuring Vertical Pod Autoscaler.

Answer

Increasing the memory limit for the pod.

Answer

Using a smaller base OS distribution.

Question 2

You are deploying a high-performance AI model in AKS. You need to ensure the container has access to the underlying host's NVIDIA GPU. What must be configured in the Pod spec?

Accepted Answer

Define a Resource Request for 'nvidia.com/gpu'.. To give a container access to an NVIDIA GPU in Kubernetes/AKS, you must declare a resource request (and typically a limit) for `nvidia.com/gpu` in the container spec. The NVIDIA device plugin on the node advertises GPUs as extended resources, and the scheduler uses this request to bind the pod to a GPU-equipped node and allocate the device.

Answer

Mount the host path '/dev/nvidia0'.

Answer

Use an InitContainer to install the driver.

Answer

Set 'privileged: true' in the security context.

Question 3

You are deploying a model that requires a specific version of a non-standard OS library. You want to ensure the build environment is consistent across your team. What should you use?

Accepted Answer

A Dockerfile with fixed base image tags.. A Dockerfile with pinned base image tags (e.g., python:3.11.7-slim rather than python:latest) guarantees that every team member and CI run builds against the exact same OS libraries and toolchain. This reproducibility is the core requirement for consistent build environments.

Answer

Manual installation on the build agent.

Answer

Install the library via a post-deployment script.

Answer

Use the 'latest' tag for the base image.

Question 4

You have an AI workload that requires persistent storage for large model checkpoints. Which storage type should you mount to an AKS pod for optimal performance?

Accepted Answer

Azure Disk (Premium).. Azure Disk (Premium) is the correct choice because it provides low-latency, high-IOPS block storage that can be mounted as a ReadWriteOnce volume to an AKS pod via a PersistentVolumeClaim. For large model checkpoints that require fast sequential and random I/O during training or inference, Premium SSD-backed Azure Disks deliver the performance Azure Files Standard cannot match.

Answer

Azure Files (Standard).

Answer

Ephemeral OS Disk.

Answer

Azure Blob Storage (container mount).

Question 5

You are managing multiple containerized AI models in AKS. You want to implement a service mesh to handle traffic splitting and mTLS. Which tool should you integrate?

Accepted Answer

Istio.. Istio is a full-featured service mesh that provides traffic splitting (via VirtualService and DestinationRule), mutual TLS (mTLS) between workloads, observability, and policy enforcement. It is the standard choice for AKS service mesh requirements, and AKS offers an Istio add-on for simplified installation and lifecycle management. This directly satisfies the traffic-splitting and mTLS requirements.

Answer

Calico.

Answer

Azure Application Gateway Ingress Controller (AGIC).

Answer

Azure Load Balancer.

Question 6

Which Azure feature allows you to scan images in your registry for vulnerabilities before deploying them to your production cluster?

Accepted Answer

Microsoft Defender for Containers.. Microsoft Defender for Containers is the Azure service that provides vulnerability scanning for container images stored in Azure Container Registry (ACR) and other registries. It automatically scans images on push and continuously monitors for new vulnerabilities, giving you a security assessment before deployment. This aligns with the question's requirement to scan images in your registry for vulnerabilities.

Answer

Azure Monitor.

Answer

Azure Key Vault.

Answer

Azure Policy.

Question 7

Your containerized AI application needs to access sensitive API keys. What is the most secure way to provide these to your application in Azure Container Apps?

Accepted Answer

Use Azure Key Vault references.. Azure Key Vault references let Container Apps pull secrets at runtime from Key Vault using the app's managed identity, so the secret value never appears in the YAML, image, or environment in plaintext. This centralizes secret management, enables rotation without redeploying, and provides audit trails. It is the recommended pattern for sensitive API keys in Container Apps.

Answer

Store them in environment variables in the YAML file.

Answer

Hardcode them in the application code.

Answer

Store them in a sidecar container.

Question 8

You need to view the logs of a container that recently crashed in an AKS cluster. Which command is used?

Accepted Answer

kubectl logs --previous.. The `kubectl logs --previous` command retrieves the logs from the previous (crashed) container instance in a pod. When a container crashes and restarts, the current container's logs may be empty or show only the new startup, so the `--previous` flag is essential to access the terminated container's output. This is the standard kubectl mechanism for post-mortem debugging of crashed containers in AKS.

Answer

kubectl get pods.

Answer

az aks logs.

Answer

kubectl describe pod.

Question 9

You are setting up auto-scaling for a containerized AI web app in Azure Container Apps. You want to scale based on the number of concurrent HTTP requests. Which scaler do you use?

Accepted Answer

HTTP scaler.. The HTTP scaler in Azure Container Apps scales replicas based on the number of concurrent HTTP requests, which directly matches the requirement to scale on concurrent HTTP request count. It is a KEDA-based scaler configured in the container app's scale rules with a `concurrentRequests` threshold.

Answer

Azure Service Bus scaler.

Answer

CPU usage scaler.

Answer

Memory usage scaler.

Question 10

Which command-line interface tool is used to deploy and manage container images directly to Azure Container Registry?

Accepted Answer

az acr.. The Azure CLI command group 'az acr' is specifically designed to manage Azure Container Registry, including building, pushing, and pulling container images directly to/from ACR. It provides native integration with ACR and supports tasks like creating registries, managing credentials, and running ACR Tasks. This makes it the correct tool for deploying and managing container images directly to ACR.

Answer

helm.

Answer

docker build.

Answer

kubectl.

Question 11

You want to ensure your AI inference service is highly available across multiple regions. What is the recommended approach for container distribution?

Accepted Answer

Enable ACR Georeplication.. ACR geo-replication lets a single registry definition replicate images to multiple Azure regions automatically, so each regional inference endpoint pulls from a local replica with low latency and survives a regional outage. It also supports regional failover without manual image copying.

Answer

Store images in a public Docker Hub account.

Answer

Use a single global ACR endpoint.

Answer

Manually copy images using a script.

Question 12

You are using Azure Container Apps. You need to deploy a new version of your AI model without downtime. Which deployment strategy should you configure?

Accepted Answer

Traffic splitting between revisions.. Azure Container Apps supports multiple revisions and allows you to split incoming traffic between them by percentage or label. By deploying the new model as a new revision and gradually shifting traffic, you achieve zero-downtime deployment and can perform canary or blue-green releases. This is the native mechanism for safe, progressive rollout in Container Apps.

Answer

Overwrite the current revision.

Answer

Rolling update.

Answer

Scale to zero and redeploy.

Question 13

Which Azure feature allows you to set up a private, internal-only container registry?

Accepted Answer

Azure Private Link.. Azure Private Link allows you to create a private endpoint for an Azure Container Registry (ACR), which assigns a private IP address from your virtual network. This makes the registry accessible only from within your VNet or connected networks, eliminating public internet exposure. It provides internal-only access without requiring public IPs or exposing the registry to the internet.

Answer

Azure Bastion.

Answer

Public access with firewall rules.

Answer

VPN Gateway.

Question 14

You notice that your AKS pods are stuck in 'ContainerCreating' state. You check the events and see 'FailedMount'. What is the most likely cause?

Accepted Answer

The associated Persistent Volume Claim (PVC) is missing or cannot be bound.. A 'FailedMount' event during the ContainerCreating phase almost always indicates that the pod's volume mount could not be satisfied — most commonly because the PersistentVolumeClaim (PVC) is missing, in a Pending state, or cannot bind to an available PersistentVolume. Since the container hasn't started yet, the failure is at the storage attachment stage, not at runtime. This is the classic signature of a PVC/PV binding problem in AKS.

Answer

The node is out of CPU resources.

Answer

The container crashed immediately.

Answer

The container image is too large.

Question 15

You are deploying an AI workload to Azure Container Apps. You need to ensure the container scales down to zero when there is no traffic. What should you configure?

Accepted Answer

Set minimum replicas to 0.. Azure Container Apps scales to zero when the minimum replica count is set to 0. This allows the platform to deprovision all replicas during periods of no traffic, eliminating compute cost, and scale back up when a request arrives (subject to the configured scale rules and HTTP ingress).

Answer

Set maximum replicas to 0.

Answer

Enable the 'Always On' flag.

Answer

Configure an external HTTP trigger.