AI-300 Practice Test 5 — 10 Questions

Question 1

You are managing a multi-workspace environment. You need to restrict the ability to create new compute clusters to only specific users. Where should you apply this control?

Accepted Answer

Azure RBAC on the Workspace. RBAC (Role-Based Access Control) at the workspace level determines which users can interact with compute resources.

Answer

Network Security Group

Answer

Azure Storage Access Policies

Answer

Azure ML Datastore configuration

Question 2

In Azure ML, what is a 'Component'?

Accepted Answer

A reusable pipeline step. A component is a reusable, versioned building block for an ML pipeline.

Answer

A storage account

Answer

A user role

Answer

A physical server

Question 3

Which Azure feature is used to define infrastructure as code for your Azure ML workspace?

Accepted Answer

Azure Bicep. Azure Bicep is the recommended tool for defining and deploying Azure resources as code.

Answer

Azure Portal

Answer

PowerShell

Answer

Azure CLI

Question 4

You want to automate the testing of your prompt flows as part of your CI/CD pipeline. Which tool should you use?

Accepted Answer

Prompt Flow CLI. The 'pf' (Prompt Flow) CLI is designed to run flows and evaluations programmatically in CI/CD pipelines.

Answer

Azure Logic Apps

Answer

Azure Functions

Answer

Azure AI Search test console

Question 5

Which THREE steps are necessary to successfully fine-tune an Azure OpenAI model?

Accepted Answer

Prepare and upload a training dataset in JSONL format.. Option B is correct because Azure OpenAI fine-tuning requires a training dataset uploaded as a JSONL file with chat-completion formatted examples (messages with role/content pairs), which the service uses to adapt the model. Option D is correct because you must choose a base model that supports fine-tuning (for example gpt-35-turbo, gpt-4o-mini, or babbage-002/davinci-002) and that is available in the region where you create the fine-tune job. Option E is correct because after submitting the fine-tuning job you track its status and metrics (training loss, token usage, and completion state) via the Azure OpenAI Studio or the REST API, and you only deploy the resulting model once the job succeeds. Option A is not needed because Azure OpenAI manages the weight updates internally; you never edit model weights in code. Option C is not required because content filtering is a separate safety configuration and disabling the input filter is neither necessary nor recommended for fine-tuning.

Answer

Manually update the model weights in the code.

Answer

Disable the input filter in the portal.

Question 6

When implementing LLM-as-a-judge for evaluation, which TWO factors can influence the reliability of your results?

Accepted Answer

The specific prompt instructions provided to the judge LLM. Option B is correct because the prompt instructions given to the judge LLM directly shape its evaluation criteria, rubric interpretation, and output format, so vague or biased instructions produce inconsistent, unreliable judgments. Option E is correct because the judge LLM's own capability—its reasoning ability, context window, training quality, and susceptibility to position or verbosity bias—bounds how accurately it can assess responses, making a weaker judge less reliable than a stronger one. Options A, C, and D do not belong: dashboard color is purely cosmetic, workspace token quota affects capacity/cost rather than judgment reliability, and storage account location affects latency, residency, and compliance but not the judge's evaluation quality.

Answer

The color of the application dashboard

Answer

The number of tokens available in the workspace quota

Answer

The location of the storage account

Question 7

A data scientist needs to access data in an Azure Data Lake Storage Gen2 account from Azure ML. You need to ensure the workspace uses the most secure method to access this data. What should you configure?

Accepted Answer

User-Assigned Managed Identity. A User-Assigned Managed Identity lets the Azure ML workspace authenticate to ADLS Gen2 via Microsoft Entra ID without storing credentials, and it can be scoped to specific resources with least-privilege RBAC (e.g., Storage Blob Data Reader). This is Microsoft's recommended, most secure access pattern for workspace-to-storage connectivity.

Answer

Shared Key

Answer

Public Access

Answer

Account SAS

Question 8

You need to monitor the 'latency' and 'token usage' of your model deployments in real-time. Which tool provides the most granular view?

Accepted Answer

Azure Monitor with diagnostic logs. Azure Monitor with diagnostic logs is the correct choice because it captures granular, per-request telemetry from Azure OpenAI and Azure AI model deployments, including latency, token usage (prompt/completion tokens), HTTP status codes, and model-level metrics. Diagnostic settings route these logs to Log Analytics, where KQL queries can slice latency and token consumption by deployment, model, and time window in near real-time. This is the only option that exposes token-level metrics rather than aggregate cost or activity metadata.

Answer

Azure Billing dashboard

Answer

Azure Activity Log

Answer

Azure AI Foundry 'Overview' tab

Question 9

Which THREE security features are essential for a production Azure ML deployment?

Accepted Answer

Key Vault integration.. Key Vault integration (A) is essential because it securely stores and centrally manages secrets, keys, and certificates used by the Azure ML workspace, compute, and endpoints, keeping credentials out of code and configuration files. Managed Identity (B) is essential because it gives the workspace and its compute resources an automatically managed identity in Microsoft Entra ID, enabling passwordless, least-privilege access to Key Vault, Storage, and ACR without embedding credentials. Virtual Network (VNet) (D) is essential because it provides network isolation for the workspace, compute clusters/instances, and private endpoints, restricting traffic to approved subnets and preventing exposure over the public internet. Opening inbound ports in the NSG (C) is not a security feature but a weakening of the perimeter, since production workloads should minimize inbound exposure and instead use private endpoints or Azure Bastion/JIT access. Public IP exposure (E) is not a security feature either, as assigning public IPs increases the attack surface and contradicts the private-networking posture expected in production.

Answer

Open inbound ports in NSG.

Answer

Public IP exposure.

Question 10

Your Azure ML training job fails with an 'Out of Memory' error on a GPU cluster. You need to ensure the job runs successfully without modifying the model code. What should you do?

Accepted Answer

Change the VM size to one with higher memory. The 'Out of Memory' error on a GPU cluster indicates the VM size has insufficient GPU memory (VRAM) for the training job. Changing to a VM size with higher memory (e.g., from NC6 to NC12 or ND series) directly addresses the root cause without modifying model code. Azure ML supports resizing the compute cluster by selecting a different VM SKU, which provides more GPU memory and allows the job to run successfully.

Answer

Increase the idle time for the compute cluster

Answer

Enable auto-scale to zero

Answer

Update the workspace storage account