AI-200 Multiple Select — 60 Questions

Question 1

You are troubleshooting an AI application container in an AKS cluster that cannot resolve external domain names (e.g., huggingface.co). Which TWO Kubernetes components should you investigate?

Accepted Answer

kube-dns service endpoint mapping. DNS resolution issues in AKS typically point to CoreDNS pod status, kube-dns service configuration, or node network routing.

Answer

Horizontal Pod Autoscaler configuration

Answer

Persistent Volume Claim binding state

Answer

Ingress controller SSL certificate expiration

Question 2

Which TWO actions can you perform using Azure Container Registry Tasks (ACR Tasks)?

Accepted Answer

Automate image builds upon Git source code repository commits. ACR Tasks enable building container images in the cloud, automating multi-architecture builds, and running quick patch tasks.

Answer

Manage Azure Virtual Machine backups

Answer

Configure Azure Front Door routing rules

Answer

Deploy AKS clusters automatically

Question 3

You are designing a high-performance AI inference architecture on Azure Kubernetes Service (AKS). Which THREE AKS features or configurations should you incorporate to optimize performance and resource utilization? (Choose three.)

Accepted Answer

Cluster Autoscaler to automatically scale node pool size based on pending pod demands. Optimizing AKS for AI workloads includes utilizing GPU-optimized node pools, node taint/tolerations to dedicate nodes to AI tasks, and cluster autoscaler for dynamic scaling.

Answer

Running all pods exclusively on single-core, low-memory burstable VMs (B-series)

Answer

Disabling the Kubernetes scheduler to manually place every container instance

Question 4

You are scaling an AI workload in Azure Container Apps. Which TWO scale rule triggers are natively supported without custom KEDA extensions?

Accepted Answer

HTTP concurrent requests. Azure Container Apps natively supports scaling based on HTTP requests, CPU, memory, and Azure Service Bus without manual KEDA manifest configuration.

Answer

Azure Virtual Machine disk I/O throughput

Answer

Active directory login failure rate

Answer

Custom hardware temperature sensors

Question 5

When configuring an Azure Container Instances container group, which TWO properties can you define?

Accepted Answer

DNS name label for public IP resolution. An ACI container group supports defining networking properties like DNS name labels, environment variables, restart policies, and resource requests.

Answer

AKS node pool sizing

Answer

Virtual machine scale set autoscaling rules

Answer

Kubernetes namespace allocation

Question 6

You are configuring enterprise networking for an AKS cluster running sensitive AI models. Which THREE networking features should you implement for cluster security?

Accepted Answer

Azure Firewall or user-defined routes for outbound egress filtering. Securing AKS network traffic involves Azure CNI network policies, private cluster API server endpoints, and outbound traffic filtering via Azure Firewall.

Answer

Public IP assignment to every worker node

Answer

Disabling all internal kube-dns resolution

Question 7

You are designing a secure MLOps pipeline using Azure Container Registry. Which THREE practices should you implement to secure your AI container images?

Accepted Answer

Use managed identities instead of admin credentials for registry authentication. Securing container images in ACR involves vulnerability scanning, access control with managed identities, and content signing.

Answer

Disable role-based access control (RBAC) on the registry to simplify management

Answer

Enable anonymous pull access for all public developers

Question 8

Your team is evaluating Azure Container Apps versus Azure Kubernetes Service (AKS) for hosting containerized AI workloads. Which TWO characteristics are advantages of Azure Container Apps over standard AKS? (Choose two.)

Accepted Answer

Simplified container management without direct exposure or management of Kubernetes master nodes. Azure Container Apps provides simplified serverless management without exposing Kubernetes control plane complexity and offers native scale-to-zero capabilities.

Answer

Requirement to manage custom CNI overlay networking routing tables manually

Answer

Mandatory manual configuration of KEDA controllers and Ingress controllers

Answer

Complete low-level administrative access to kernel modules and cluster root certificates

Question 9

You are deploying a custom text-embedding model container to Azure Container Apps. You need to configure scaling rules so that the container scales out based on incoming HTTP traffic and Azure Service Bus queue length. Which TWO scalers can you configure? Each correct answer presents part of the solution.

Accepted Answer

azure-servicebus scaler. Azure Container Apps uses KEDA under the hood and natively supports scaling based on HTTP traffic (http scaler) and Azure Service Bus queues (azure-servicebus scaler).

Answer

cpu memory-limit scaler

Answer

azure-blob-storage scaler

Answer

container-registry scaler

Question 10

Which TWO Azure services can store and serve private Docker container images for AI workloads?

Accepted Answer

Azure Container Instances (pulling from ACR). Azure Container Registry and Azure Container Instances (via image pull secrets) interact with container images, while ACR is the dedicated private registry.

Answer

Azure Cognitive Services

Answer

Azure Bastion

Answer

Azure Logic Apps

Question 11

You are configuring an Azure Kubernetes Service (AKS) cluster for enterprise AI workloads. Which THREE practices should you implement to enhance cluster security and isolation? (Choose three.)

Accepted Answer

Configure Microsoft Entra Workload Identity for pod-to-Azure service authentication. Enterprise AKS security best practices include enabling Azure Policy for Kubernetes, using Azure RBAC for Kubernetes authorization, and utilizing Workload Identity for secure credential-less access to Azure services.

Answer

Disable TLS on the API server to improve inter-node communication speed

Answer

Share a single service principal across all namespaces for simplified administration

Question 12

Which TWO of the following are true about Azure Container Apps?

Accepted Answer

It is a serverless container platform.. ACA is serverless and supports KEDA for scaling.

Answer

You must manage the underlying Kubernetes nodes.

Answer

It is not compatible with Dapr.

Answer

It does not support VNETs.

Question 13

Which THREE of the following items should be configured to ensure your AI workload in AKS is observable?

Accepted Answer

Prometheus and Grafana.. Logging, metrics, and tracing are the three pillars of observability in AKS.

Answer

Azure Backup.

Answer

Azure Bastion.

Question 14

When managing Azure Container Registry (ACR), administrators can use ACR Tasks to automate tasks. Which TWO scenarios are valid use cases for ACR Tasks? (Choose two.)

Accepted Answer

Triggering container image rebuilds automatically when a base image is updated. ACR Tasks supports automated container image builds on source code commits (CI) and automated OS/framework patching base image updates.

Answer

Providing a managed Kubernetes API control plane

Answer

Executing automated container vulnerability scans directly inside registry storage

Answer

Running a persistent, multi-node enterprise database cluster inside ACR

Question 15

Your development team is planning to deploy a containerized natural language processing model to Azure Container Apps. Which TWO features are natively supported by Azure Container Apps for managing application lifecycle and traffic? (Choose two.)

Accepted Answer

Built-in KEDA-based autoscaling including scaling to zero. Azure Container Apps natively supports multi-revision management and traffic splitting between revisions, as well as KEDA autoscaling.

Answer

Automatic deployment of bare-metal hypervisors

Answer

Direct root SSH access to individual container instances for interactive debugging

Answer

Direct manual configuration of control plane Kubernetes master nodes

Question 16

Which TWO of the following are valid ways to reduce the size of a container image?

Accepted Answer

Use multi-stage Docker builds.. Multi-stage builds and using lighter base images are the two most effective strategies for image size reduction.

Answer

Use the 'latest' tag for all dependencies.

Answer

Enable ACR Geo-replication.

Answer

Install all dependencies in one RUN command.

Question 17

When designing an AI architecture that uses Azure AI Search, which TWO methods can be used to ingest documents and their vector embeddings into the search index? (Choose two)

Accepted Answer

Push API using HTTP POST requests to upload documents directly. Azure AI Search supports pushing data via the Push API (REST/SDK) or pulling data using indexers connected to data sources like Blob Storage or Cosmos DB.

Answer

Direct mounting of an NFS network share as the search index

Answer

FTP file transfer into the search engine storage directory

Answer

Direct SQL Server backup restore (.bak file import)

Question 18

You are designing a data layer architecture for an enterprise AI assistant that requires high-performance vector search, structured filtering, and multi-tenant isolation. Which THREE design patterns should you consider? (Choose three)

Accepted Answer

Combining vector similarity with metadata filters to narrow search scope. Effective AI data layer design patterns include logical partitioning for multi-tenancy, pre-filtering metadata, and hybrid retrieval combining keyword and vector search.

Answer

Storing all tenant data in a single unindexed JSON blob without partition keys

Answer

Hardcoding all user prompts directly into the search index schema

Question 19

When configuring vector search in Azure Cosmos DB for NoSQL, which TWO steps are required to prepare a container for vector search before inserting documents? (Choose two)

Accepted Answer

Define the vectorEmbeddingPolicy at container creation or update. Preparing a Cosmos DB container for vector search requires adding a vector embedding policy and defining vector indexes in the indexing policy.

Answer

Mount an NFS network share for vector file storage

Answer

Install the pgvector extension on the container

Answer

Create a relational foreign key constraint to Azure SQL

Question 20

Which THREE of the following are benefits of using ACR Tasks for containerized AI workloads?

Accepted Answer

Triggering builds on base image updates.. ACR Tasks automate builds, secure workflows, and integrate with source control triggers.

Answer

Automatic scaling of the registry.

Answer

Direct deployment to Azure SQL.