Courseiva

Microsoft Certified: Azure AI Apps and Agents Developer Associate (AI-103) (AI-103) (AI-103) — Questions 175

510 questions total · 7pages · All types, answers revealed

Page 1 of 7

Page 2
1
MCQeasy

You need to ensure that an Azure AI services resource is accessible only from a specific virtual network. Which configuration should you update in the Azure portal?

A.The Networking blade to configure Private endpoints.
B.The Resource tags to add a network security group.
C.The Authentication blade to disable local keys.
D.The Identity blade to assign a User Assigned Managed Identity.
AnswerA

Private endpoints are the correct tool for VNET-based isolation.

Why this answer

Private endpoints provide secure, private access to Azure AI services via a private IP address within your VNET.

2
MCQhard

You are designing an agentic workflow where an agent needs to maintain conversational context and remember user preferences across multiple disparate sessions over several weeks. Which architectural component should you implement?

A.Increasing the model context window to 1,000,000 tokens for every request.
B.A persistent semantic memory store integrated with the agent's context pipeline.
C.Using a stateless function with zero memory persistence.
D.Storing the entire conversation history in a local client-side cookie.
AnswerB

Persistent memory allows the agent to recall and store user facts and preferences across different sessions.

Why this answer

Long-term memory implemented via vector stores or external databases allows agents to retrieve historical interactions across sessions.

3
Multi-Selecthard

You are designing an enterprise text analysis solution with high availability and security requirements. Which THREE practices should you implement? (Choose three.)

Select 3 answers
A.Store subscription keys in plain text configuration files inside the source code repository.
B.Implement exponential backoff retry logic in client applications to handle rate limiting (429 errors).
C.Authenticate API calls using managed identities instead of hardcoded subscription keys.
D.Disable TLS encryption on HTTP client requests to improve API throughput.
E.Configure private endpoints to restrict network access to your virtual network.
AnswersB, C, E

Retry logic with exponential backoff handles transient throttling gracefully.

Why this answer

Enterprise best practices include deploying private endpoints, using managed identities for authentication, and implementing retry logic with exponential backoff for resilience.

4
MCQmedium

Your organization is preparing for an annual external security audit. The auditor requests proof that all Azure AI resources comply with ISO 27001 standards. Where can you download the official compliance audit reports for Azure AI services?

A.Microsoft Service Trust Portal
B.Microsoft 365 Admin Center security center
C.Visual Studio subscription benefits page
D.Azure OpenAI Studio compliance tab
AnswerA

The Service Trust Portal is the authoritative repository for compliance reports, audit artifacts, and regulatory certifications for Azure.

Why this answer

Microsoft Service Trust Portal provides access to audit reports, compliance certifications, and security assessments for Azure services.

5
MCQmedium

Your company processes complex purchase orders that vary significantly in layout across different vendors. You decide to train a Custom Neural model using Azure AI Document Intelligence Studio. What is the minimum number of documents required to train a Custom Neural model?

A.1 document
B.50 documents
C.5 documents
D.100 documents
AnswerC

The minimum document requirement for training a Custom Neural model in Azure AI Document Intelligence is 5.

Why this answer

Azure AI Document Intelligence Custom Neural models require a minimum of 5 training documents per distinct layout to successfully train a model.

6
Multi-Selecteasy

Which TWO resources are required to set up an Azure AI Foundry project?

Select 2 answers
A.An Azure Data Factory instance.
B.A virtual machine.
C.A dedicated Kubernetes cluster.
D.An Azure AI Services or Azure OpenAI resource.
E.A storage account (Azure Blob Storage).
AnswersD, E

This is the core compute/service resource.

Why this answer

A project requires a backing resource (Azure AI Services or Azure OpenAI) and a storage mechanism (Azure Storage) to function.

7
MCQmedium

You are developing a customer support agent using Microsoft Foundry. The agent needs to call a custom weather API tool when a user asks about local conditions. How should you define this capability in the agent configuration?

A.Register a custom function tool by providing an OpenAPI schema definition that describes the weather API endpoints, parameters, and expected responses.
B.Upload the compiled C# library containing the API client code directly into the agent code interpreter workspace.
C.Add the weather API endpoint URL as a grounding data source under the vector store settings.
D.Configure a managed data connection pointing to the weather API URL within Azure AI Search.
AnswerA

Providing an OpenAPI schema allows the model to correctly format requests and interpret responses from custom external APIs.

Why this answer

In Microsoft Foundry and Azure AI Agent Service, you configure custom tools by defining them as OpenAPI specifications or functions that the model can invoke via function calling capabilities.

8
MCQeasy

You need to extract text from a multi-page PDF document using Azure AI Vision Read API. How are pages represented in the JSON response structure?

A.They are organized under a 'readResult.pages' or 'pages' array in the analyze result.
B.All text from all pages is merged into a single unstructured string without page separation.
C.Pages are returned as separate JPEG files in a ZIP archive.
D.Each page requires a separate API transaction starting with a new POST request.
AnswerA

Multi-page document results are structured page by page within the analysis payload.

Why this answer

The Read API output organizes results by pages, where each page object contains dimensions, language, lines, and words.

9
MCQeasy

Your development team needs to test a new Azure AI Language service feature without incurring ongoing charges when the service is idle. Which billing model is appropriate for initial prototyping?

A.Pay-as-you-go (Consumption-based metering)
B.Dedicated hardware hosting
C.Reserved Instance 3-year term
D.Commitment tier (Pre-purchased capacity)
AnswerA

You are billed strictly per transaction, resulting in zero cost when idle.

Why this answer

The pay-as-you-go pricing model charges only for transactions processed, meaning no charges accrue when the service is idle.

10
MCQeasy

What is the primary purpose of the 'selection marks' detection in the layout model?

A.To OCR printed text
B.To detect checkboxes and radio buttons
C.To identify table borders
D.To find handwritten signatures
AnswerB

Selection marks represent interactive form elements.

Why this answer

Selection marks (like checkboxes) are critical for forms where users indicate options.

11
Multi-Selectmedium

Your organization is planning to deploy multiple Azure AI services and needs to implement robust cost management and governance practices. Which TWO actions should you take? (Choose two.)

Select 2 answers
A.Implement Azure Policy to enforce mandatory cost-tracking tags on all AI resource deployments.
B.Deploy all development, test, and production AI resources into a single shared resource group to simplify administration.
C.Disable diagnostic logging across all AI resources to reduce Azure storage and log ingestion costs.
D.Organize AI resources into separate resource groups and subscriptions based on business units and environments.
E.Use the Free (F0) pricing tier for all production workloads to eliminate infrastructure costs.
AnswersA, D

Azure Policy ensures all resources have required tags for accurate cost categorization and chargeback.

Why this answer

Using Azure Policy enforces tagging and resource rules, while resource groups separate environments for accurate billing allocation and cost tracking.

12
MCQmedium

You are configuring a custom extraction model in Azure AI Document Intelligence and want to compose multiple specialized models into a single endpoint that automatically classifies and routes documents. Which REST API endpoint should you use to create this composed model?

A.PUT /documentintelligence/documentModels/{modelId}?api-version=2024-02-29-preview
B.POST /documentintelligence/documentModels:compose?api-version=2024-02-29-preview
C.POST /documentintelligence/documentModels:train?api-version=2024-02-29-preview
D.POST /documentintelligence/models:classify?api-version=2024-02-29-preview
AnswerB

The compose endpoint combines multiple custom models into a single composed model.

Why this answer

Composed models (orchestration or composed models) are created using the documentModels:build or compose operations depending on the API version. Specifically, the compose operation combines multiple model IDs.

13
MCQhard

You are automating document processing. You want to trigger a workflow only after a Document Intelligence operation finishes. What is the standard way to implement this?

A.Poll the 'operation-location' URL
B.Use a fixed-delay thread sleep
C.Use a WebSocket
D.Wait for a push notification
AnswerA

This is the documented pattern for asynchronous operations.

Why this answer

The Document Intelligence API returns a 'operation-location' URL; you poll this URL to check the status until completion.

14
MCQmedium

You are processing customer feedback emails that contain both English and Spanish paragraphs within the same message. You need to perform sentiment analysis on each paragraph separately. What should you do?

A.Use custom text classification instead of sentiment analysis.
B.Submit the entire email as a single document with the language set to auto-detect.
C.Split the email into individual paragraphs and submit them as separate documents in the request payload.
D.Translate the entire email to French before calling sentiment analysis.
AnswerC

Splitting mixed-language text into distinct documents ensures accurate processing and language association.

Why this answer

Because language detection and sentiment analysis operate per document, you should split the multi-lingual email into separate document chunks (or paragraphs) and specify the language parameter for each document if necessary.

15
MCQmedium

You have trained a Custom Vision classification model. You need to export the model to run locally on an edge device using ONNX format. Which project domain must you select when creating the project to support export?

A.General (compact)
B.Retail
C.Food (compact) for edge deployment
D.General
AnswerA

Compact domains are optimized for mobile and edge deployment and support export.

Why this answer

To export Custom Vision models to formats like ONNX, TensorFlow, or Docker, you must select a domain marked with '(compact)'.

16
MCQmedium

You need to ensure that an AI model deployment is resilient to regional outages. What should you implement?

A.A single large VM.
B.Azure Front Door with regional endpoints.
C.Azure Storage redundancy.
D.Local VNET peering.
AnswerB

Front Door provides global load balancing and can route traffic to healthy regional endpoints.

Why this answer

Global load balancing using services like Azure Front Door or Traffic Manager allows for failover across regions.

17
MCQmedium

You are developing a custom extraction model using Azure AI Document Intelligence Studio. Your training dataset consists of multi-page invoices with varying structures, and some fields appear only on the final page. How should you structure your tagging configuration?

A.Create a separate custom model for the final page and chain them using an orchestration model.
B.Split every multi-page invoice into individual single-page documents before uploading.
C.Define all late-appearing fields as optional metadata parameters in the training configuration JSON file.
D.Tag the fields on whatever page they appear across the sample documents in Document Intelligence Studio.
AnswerD

Document Intelligence custom models support multi-page documents natively, allowing you to tag fields wherever they appear.

Why this answer

Custom neural and template models support multi-page documents where fields can be tagged across any page of the document set during training.

18
MCQeasy

You are deploying an Azure OpenAI resource and want to authenticate client applications using Microsoft Entra ID instead of static API keys. Which role must be assigned to the application's managed identity to permit it to invoke model deployments?

A.Storage Blob Data Contributor
B.Key Vault Secrets Officer
C.Cognitive Services OpenAI User
D.Contributor
AnswerC

This role grants permissions to invoke model endpoints within an Azure OpenAI resource without granting full administrative privileges.

Why this answer

Cognitive Services OpenAI User is the standard least-privilege role assigned to principals that need to run inference against deployed models.

19
MCQhard

You are deploying an Azure AI Document Intelligence container in an on-premises disconnected environment. The container requires periodic license validation against Azure. What is the maximum duration the container can operate offline before requiring reconnection to Azure for billing and metering validation?

A.Up to 30 days
B.Exactly 7 days
C.Maximum of 24 hours
D.Indefinitely without any connection required
AnswerA

Disconnected containers must connect to Azure at least once every 30 days to sync usage data for billing and metering.

Why this answer

Disconnected containers for Azure AI services require synchronization with Azure at least every designated billing period, typically up to 29 or 30 days depending on the specific service terms.

20
MCQhard

You are calling the Azure AI Language REST API for Named Entity Recognition (NER) and receive an HTTP 429 status code. How should your application handle this error?

A.Switch the API endpoint to use the Free pricing tier.
B.Regenerate the subscription key and restart the client service.
C.Immediately re-submit the request with doubled payload size.
D.Implement an exponential backoff retry policy and resend the request after a delay.
AnswerD

Rate limit errors require backing off and retrying after the specified Retry-After duration.

Why this answer

HTTP 429 indicates 'Too Many Requests' (rate limiting). The client application should implement exponential backoff and retry the request.

21
MCQhard

You are deploying a model that requires significant GPU resources. You want to ensure the deployment only scales when the average CPU load exceeds 70%. Which feature of Azure AI managed endpoints do you configure?

A.The 'Load Balancer' settings in the VNET.
B.Azure Front Door health probe settings.
C.The 'Endpoints' deployment configuration 'autoscaling' settings.
D.The 'Compute' instance restart policy.
AnswerC

Autoscaling rules are defined within the endpoint deployment properties.

Why this answer

Autoscaling settings on Azure AI managed endpoints allow you to define rules based on resource utilization metrics like CPU or GPU load.

22
Multi-Selecthard

Which THREE fields are typically returned by the prebuilt-receipt model?

Select 3 answers
A.MerchantName
B.EmployeeID
C.TransactionDate
D.PatientName
E.Total
AnswersA, C, E

Extracted by prebuilt-receipt.

Why this answer

The prebuilt-receipt model extracts MerchantName, TransactionDate, and Total, among others.

23
MCQhard

An agent is prone to 'hallucinations' when responding to specific niche queries. What is the most effective way to reduce these hallucinations using RAG?

A.Retrain the base LLM on the niche dataset.
B.Increase the system prompt length.
C.Set the grounding threshold to a higher value in the agent configuration.
D.Lower the temperature setting to 0.0.
AnswerC

A higher grounding threshold ensures only the most relevant documents are passed to the model.

Why this answer

Increasing the 'top_k' or relevance threshold ensures the retrieved data is highly specific to the query, reducing ambiguity.

24
MCQeasy

You are setting up budget alerts for your Azure AI services to prevent unexpected overspending. Which Azure tool should you use to create these alerts and automatically trigger an action group when the budget threshold reaches 90%?

A.Azure Monitor alerts
B.Azure Cost Management + Billing budgets
C.Microsoft Defender for Cloud pricing settings
D.Azure Advisor cost recommendations
AnswerB

Budgets in Cost Management allow currency threshold alerts and action group integrations.

Why this answer

Azure Cost Management + Billing allows you to create budgets and configure alert conditions tied to action groups for automated responses.

25
MCQeasy

You are testing an image analysis application in Python. You want to retrieve object bounding boxes using Azure AI Vision 4.0. Which feature string should you pass to the client?

A.VisualFeatures.TAGS
B.VisualFeatures.CAPTION
C.VisualFeatures.OBJECTS
D.VisualFeatures.READ
AnswerC

VisualFeatures.OBJECTS (or string 'objects') requests object detection bounding boxes.

Why this answer

The correct feature string for object detection in Image Analysis 4.0 is 'objects'.

26
MCQeasy

You are configuring a Microsoft Foundry project to deploy a multimodal model. You need to ensure that the model deployment scales automatically based on request volume while minimizing management overhead. Which deployment type should you select?

A.Standard deployment
B.Local container deployment
C.Provisioned Throughput deployment
D.Batch deployment
AnswerA

Standard deployment provides auto-scaling and managed infrastructure suitable for dynamic request volumes.

Why this answer

Standard deployment in Azure AI Foundry supports automatic scaling based on traffic volume with managed infrastructure. Provisioned Throughput is for dedicated guaranteed capacity, and Batch deployments are for asynchronous processing.

27
Multi-Selecthard

Your organization is establishing a governance framework for Azure AI resources. You need to ensure cost control, tagging compliance, and security posture management across all subscriptions. Which THREE Azure services or features should you deploy? Each correct answer presents part of the solution.

Select 3 answers
A.Microsoft Defender for Cloud for security posture and compliance assessments
B.Azure Bastion for database query optimization
C.Azure Policy for automated tag enforcement and region restriction
D.Azure Cost Management budgets with alerts for spending thresholds
E.Azure Traffic Manager for database scaling
AnswersA, C, D

Defender for Cloud provides vulnerability tracking and secure score recommendations.

Why this answer

Azure Policy enforces tags, Cost Management handles budgets, and Defender for Cloud handles security posture.

28
MCQmedium

Your company requires that all Azure AI service endpoints are accessible only from within a specific Azure Virtual Network (VNet) and that public internet access is completely disabled. How should you configure the Azure AI resource networking settings?

A.Set the routing preference to Microsoft network routing and enable service endpoints on the default subnet.
B.Disable public network access on the Networking blade and create a Private Endpoint associated with your VNet and subnet.
C.Configure the firewall to allow only the corporate public IP address range and keep public network access enabled.
D.Deploy an Azure Application Gateway in front of the Azure AI multi-service account endpoint.
AnswerB

This completely disables public access and routes traffic securely via a private IP within the VNet.

Why this answer

Disabling public access and configuring private endpoints ensures that traffic flows securely through the Microsoft backbone network and is isolated to the specified VNet.

29
MCQmedium

You need to extract data from a document that includes handwritten signatures and printed text. Which capability is required?

A.Object Detection
B.Handwritten OCR (Read)
C.Custom Template model
D.Form Recognizer 2.0 API
AnswerB

The Read feature handles both printed and handwritten text.

Why this answer

The Read capability, which is part of the Document Intelligence service, supports both machine-printed text and handwriting.

30
MCQeasy

Which tool provides a graphical user interface for labeling documents for custom models?

A.Azure CLI
B.Azure Storage Explorer
C.Document Intelligence Studio
D.Visual Studio Code
AnswerC

The Studio is the designated GUI for these tasks.

Why this answer

Document Intelligence Studio is the web-based tool provided by Azure for labeling and training.

31
MCQmedium

You are deploying a Custom Vision model as a Docker container. You need to verify that the container is running and healthy before routing production traffic to it. Which health check endpoint should your load balancer ping?

A./status
B./ping
C./health
D./ready
AnswerD

The /ready endpoint indicates whether the container has initialized and is ready to accept prediction requests.

Why this answer

Cognitive Services containers provide a standard liveness/readiness health check endpoint at `/live` or `/ready` depending on container configuration.

32
MCQmedium

You are configuring automatic evaluation in Azure AI Foundry using the groundedness metric. The evaluation pipeline requires a source context and an LLM-generated response. What does the groundedness metric assess?

A.Whether the generated response is derived exclusively from the source context without unsupported claims
B.The cost per token consumed during inference
C.The sentiment and tone of the user prompt
D.The speed and latency of the model response in milliseconds
AnswerA, D

Groundedness checks for hallucinations by verifying that statements in the answer are supported by the retrieval context.

Why this answer

The groundedness metric measures whether the model's generated answers can be verified solely from the provided source context, detecting hallucinations.

33
Multi-Selectmedium

Which THREE roles or permissions are typically required to successfully create, train, and manage custom models in Azure AI Document Intelligence Studio? (Choose THREE)

Select 3 answers
A.Global Administrator on the Microsoft Entra ID tenant
B.Cognitive Services User to invoke model prediction APIs
C.Storage Blob Data Contributor on the Azure Storage account holding training datasets
D.Network Contributor on the subscription virtual network
E.Cognitive Services Contributor on the Azure AI Document Intelligence resource
AnswersB, C, E

This role permits calling analyze and prediction endpoints.

Why this answer

Managing Document Intelligence resources requires appropriate Azure RBAC roles such as Cognitive Services Contributor, Cognitive Services User, and Blob Storage access.

34
Multi-Selecthard

Your enterprise organization operates under strict data residency and sovereignty requirements. You are deploying Azure OpenAI and Azure AI Language services. Which THREE architectural decisions ensure compliance with data residency mandates? Each correct answer presents part of the solution.

Select 3 answers
A.Verify Microsoft's data privacy commitments guaranteeing that customer data is not used to train base models.
B.Configure diagnostic log storage accounts within the same region and compliance boundary.
C.Store unencrypted customer prompts on public GitHub repositories.
D.Route all inference requests through public relay nodes located in foreign countries to save bandwidth costs.
E.Deploy all Azure AI resources exclusively within the compliant domestic Azure region (e.g., Australia Southeast).
AnswersA, B, E

Enterprise agreements ensure customer data remains private and is not used for base model training.

Why this answer

Deploying in local regions, verifying data privacy terms, and avoiding cross-region logging ensure compliance.

35
MCQeasy

You are deploying an Azure AI resource and want to organize it logically within your Azure hierarchy. Which scope is the highest level at which you can assign Azure RBAC roles for your AI resource?

A.Management Group
B.Tenant root group
C.Resource Group
D.Azure AI Resource instance
AnswerA

Management groups organize subscriptions and allow role assignments to cascade down to all child subscriptions and resources.

Why this answer

The Management Group scope is higher than subscription, resource group, and resource scopes in Azure RBAC hierarchy.

36
Multi-Selecthard

Which THREE authentication/authorization mechanisms are supported for accessing Azure AI services securely?

Select 3 answers
A.Azure AI API Keys.
B.FTP credentials.
C.Microsoft Entra ID (RBAC).
D.Shared Access Signatures (SAS).
E.Anonymous public access.
AnswersA, C, D

Keys are the traditional method for quick service authentication.

Why this answer

Entra ID, API keys, and SAS tokens are all standard methods for accessing Azure AI services.

37
MCQmedium

You need to extract information from a business card. Which prebuilt model should you select?

A.prebuilt-businessCard
B.prebuilt-taxDocument
C.prebuilt-idDocument
D.prebuilt-layout
AnswerA

This model is designed for cards.

Why this answer

The 'prebuilt-businessCard' model is specifically optimized for contact details on business cards.

38
MCQmedium

Your development team needs to deploy an Azure AI Search service and connect it to an Azure SQL Database containing source documents. Security requirements state that credentials must not be stored in application code. Which authentication method should you use between Azure AI Search and Azure SQL Database?

A.Shared Access Signature (SAS) token
B.Hardcoded SQL administrator password in indexer configuration
C.Anonymous access connection string
D.Managed Identity
AnswerD

Using a managed identity for Azure AI Search allows secure, credential-free authentication to Azure SQL Database.

Why this answer

Managed identities allow Azure services like AI Search to authenticate to other Azure services like SQL Database without storing credentials.

39
Multi-Selectmedium

When designing an Azure AI Foundry project architecture, which TWO resources are typically linked to the Azure AI Hub to enable full model deployment and search capabilities? (Choose TWO)

Select 2 answers
A.Azure AI Search service
B.Azure SQL Database relational server
C.Azure OpenAI service
D.Azure Stream Analytics job cluster
E.Power BI embedded analytics workspace
AnswersA, C

Azure AI Search provides vector and hybrid search capabilities for RAG grounding.

Why this answer

Azure OpenAI and Azure AI Search are core resources linked to Azure AI Hub workspaces for model hosting and RAG search indexer capabilities.

40
Multi-Selectmedium

When configuring role-based access control (RBAC) for an Azure AI Services account, which TWO built-in roles are appropriate for assigning to users who only need to invoke AI models without managing the underlying resource infrastructure? Each correct answer presents part of the solution.

Select 2 answers
A.Owner
B.Cognitive Services OpenAI User
C.Contributor
D.Cognitive Services User
E.Storage Blob Data Reader
AnswersB, D

Grants permissions specifically to execute inference requests against Azure OpenAI models.

Why this answer

Cognitive Services User and Cognitive Services OpenAI User grant least-privilege inference permissions.

41
MCQeasy

You want to detect whether corporate logos appear in user-submitted images using Azure AI Vision. Which visual feature parameter should you request?

A.features=brands
B.features=domain-specific
C.features=objects
D.features=tags
AnswerA

The brands feature detects logos and brands within images.

Why this answer

The 'brands' visual feature detects known commercial brands and logos in an image.

42
MCQmedium

Your application processes images submitted by users. You want to ensure that images containing inappropriate or explicit content are rejected before further processing. Which Azure AI Vision feature should you evaluate first?

A.Custom Vision Object Detection
B.Image Analysis Read feature
C.Analyze Image with features=adult
D.Azure AI Language Content Moderation
AnswerC

The adult feature evaluates images for adult and racy content scores.

Why this answer

The adult content feature detects adult, racy, and gory content to flag inappropriate images.

43
MCQmedium

You are building a generative AI application that summarizes long legal documents. Users complain that summaries omit important clauses located in the middle of the document due to the model's attention limitations over extremely long texts. What phenomenon does this represent, and how can you mitigate it?

A.Token overflow error; mitigate by increasing Azure AI Search semantic ranker depth
B.Lost in the middle phenomenon; mitigate using map-reduce or recursive summarization patterns
C.Embedding drift; mitigate by retraining the text-embedding-ada-002 model
D.Prompt injection; mitigate by enabling Azure AI Content Safety prompt shields
AnswerB

Map-reduce summarizes smaller chunks first and then combines them, bypassing context attention limitations.

Why this answer

The 'lost in the middle' phenomenon occurs when LLMs overlook information in the middle of long contexts. Mitigation involves chunking or map-reduce summarization patterns.

44
Multi-Selectmedium

You are configuring an Azure AI Language service resource in the Azure portal. Which THREE settings or blades are available for managing the resource? (Choose three.)

Select 3 answers
A.Virtual machine size selector
B.Container registry integration blade
C.Keys and Endpoint
D.Pricing tier
E.Identity
AnswersC, D, E

Keys and Endpoint manages API keys and service URLs.

Why this answer

In the Azure portal, resource management blades for Azure AI Language include Keys and Endpoint, Pricing tier, and Identity (managed identities). Diagnostic settings and Access control are also standard Azure resource blades.

45
Multi-Selecthard

You are troubleshooting a RAG application in Azure AI Foundry where retrieved search results are irrelevant to user queries. Which THREE actions should you take to diagnose and improve retrieval quality? (Choose THREE)

Select 3 answers
A.Evaluate whether document chunk sizes and overlaps align with query granularity
B.Inspect embedding vector distances and similarity scores of retrieved documents
C.Increase the Azure OpenAI model temperature parameter to 1.5
D.Configure Azure Key Vault access policies for the search service
E.Enable semantic ranking in Azure AI Search to re-rank results based on deep language understanding
AnswersA, B, E

Poor chunking sizes can split vital context or bundle unrelated topics, ruining retrieval precision.

Why this answer

Analyzing embeddings, evaluating chunking strategies, and testing hybrid search or semantic ranking are key steps to diagnose and resolve poor retrieval quality.

46
MCQmedium

You need to export logs from your Azure AI service to an external SIEM (Security Information and Event Management) system. What is the best way to achieve this?

A.Copy the files manually from Blob Storage.
B.Configure a diagnostic setting to stream logs to an Event Hub.
C.Use an Azure Logic App to poll the REST API.
D.Enable public access on the log file store.
AnswerB

Event Hubs are designed to ingest massive amounts of data for real-time processing by SIEMs.

Why this answer

Azure Monitor diagnostic settings allow you to stream logs to an Event Hub, which is a common integration point for third-party SIEMs.

47
Multi-Selectmedium

Which TWO monitoring strategies are effective for detecting 'data drift' in a deployed AI model?

Select 2 answers
A.Tracking changes in input data distribution.
B.Analyzing model prediction accuracy against ground truth.
C.Checking the physical temperature of the CPU.
D.Monitoring total API request volume.
E.Restarting the endpoint every hour.
AnswersA, B

Significant shifts in input data are a primary indicator of drift.

Why this answer

Monitoring input data distributions and model performance metrics are the two primary ways to detect drift.

48
MCQhard

You are building an agent that needs to execute Python code safely to calculate financial projections requested by users. Which tool in Azure AI Agent Service should you enable to allow the agent to write and run code in an isolated environment?

A.Code Interpreter tool
B.Azure Container Instances dynamic scaling group
C.Azure Functions webhook integration
D.Azure AI Search vector embedding tool
AnswerA

Code Interpreter allows the agent to generate and execute Python code in a secure sandbox to solve data problems.

Why this answer

The Code Interpreter tool in Azure AI Agent Service provides a secure, sandboxed Python execution environment where agents can run generated code and analyze data.

49
MCQhard

You are designing a high-throughput, low-latency architecture for an Azure OpenAI application. Clients are distributed globally across North America, Europe, and Asia. To ensure minimal latency and high availability, you decide to deploy multiple Azure OpenAI instances in different regions. How should you route incoming client requests to the nearest optimal region?

A.Azure ExpressRoute global reach
B.Azure Bastion global routing profile
C.Azure Local Traffic Manager (LTM)
D.Azure Front Door with latency-based routing
AnswerD

Azure Front Door routes global traffic to the lowest-latency regional Azure OpenAI backend endpoint.

Why this answer

Azure Front Door provides global HTTP/HTTPS load balancing, latency-based routing, and web application firewall protection.

50
Multi-Selectmedium

When planning the deployment of an Azure AI Search service, which TWO sizing and capacity parameters must you configure during creation? Each correct answer presents part of the solution.

Select 2 answers
A.Virtual CPU core count per hypervisor
B.Replicas
C.Partitions
D.Linux kernel version
E.Active Directory domain controller IP
AnswersB, C

Replicas control query throughput and high availability.

Why this answer

Replicas and partitions are the core capacity parameters configured during search service creation.

51
MCQhard

You are monitoring an Azure OpenAI deployment in Azure AI Foundry and notice an increase in HTTP 429 (Too Many Requests) errors. Your application needs to handle these rate limit spikes gracefully. What is the recommended architectural solution?

A.Restart the Azure OpenAI resource from the Azure Portal
B.Implement exponential backoff and jitter retry logic in the application SDK
C.Set the model temperature parameter to 0.0
D.Switch the authentication method from API keys to Managed Identity
AnswerB

Exponential backoff with jitter prevents thundering herd problems and allows requests to succeed as capacity opens up.

Why this answer

Implementing retry logic with exponential backoff and jitter in the application code handles transient rate-limiting errors (HTTP 429) gracefully.

52
MCQmedium

You are integrating Azure AI Language into a secure enterprise application. Management mandates that all data sent to the API must remain within your Azure region and that no customer data is used to train Microsoft's foundational models. Which feature of Azure AI Language supports this?

A.Switching from synchronous to asynchronous batch processing.
B.Using the Free (F0) pricing tier.
C.Using custom text classification with customer-managed keys (CMK) and disabling public network access.
D.Enabling abstractive summarization with cross-region replication.
AnswerC

Restricting network access and using regional endpoints with encryption/CMK ensures data residency and privacy compliance.

Why this answer

Azure AI services provide data privacy and residency guarantees where customer data is encrypted in transit/rest and is never used to train foundational models. Utilizing Standard endpoints with customer-managed keys (CMK) further enhances security.

53
MCQeasy

You are deploying an Azure AI Document Intelligence resource. You need to ensure that only client requests coming from your corporate public IP address range can access the endpoint. Which networking configuration should you apply?

A.Configure Azure Bastion access restriction rules.
B.Attach an Azure Application Gateway with a WAF policy.
C.Enable Microsoft Entra conditional access policies on the API keys.
D.Configure firewall virtual networks and IP address ranges in the Azure AI resource networking settings.
AnswerD

Adding allowed public IP address ranges to the resource firewall blocks all other public traffic.

Why this answer

IP firewall rules on Azure AI services allow restricting inbound access to specified public IP address ranges or CIDR blocks.

54
MCQhard

You are configuring an Azure AI Document Intelligence container for deployment in an on-premises disconnected environment. Which environment variable is mandatory for the container to start successfully and report billing usage?

A.EULA=accept, billing=<billing-endpoint-uri>, apikey=<api-key>
B.AZURE_COGNITIVE_SERVICES_TENANT_ID
C.AZURE_AI_CONNECTOR_CONNECTION_STRING
D.DOCUMENT_INTELLIGENCE_MODEL_CACHE_DIR
AnswerA

Containers require accepting the EULA, providing the billing endpoint, and the API key for meter reporting.

Why this answer

Disconnected containers require the billing endpoint and API key, along with accepting the license agreement.

55
MCQmedium

You are training a custom template model in Azure AI Document Intelligence and notice that one of your key fields is consistently failing to extract on documents where the label text is vertically oriented. How should you address this issue?

A.Switch the model type from custom template to prebuilt read model.
B.Set the queryParameters property to 'orientation=vertical' in the training API request body.
C.Rotate the source PDF documents to landscape orientation prior to uploading them for training.
D.Re-examine and ensure all instances of the field across training samples are accurately tagged with correct bounding regions in Document Intelligence Studio.
AnswerD

Accurate labeling of bounding regions in training samples ensures the model learns the correct spatial features for unusual orientations.

Why this answer

Document Intelligence supports reading text at various orientations, but custom template models rely on consistent visual labeling. Ensuring the labeling captures the correct bounding regions and retraining helps resolve orientation issues.

56
MCQmedium

You are migrating an Azure AI service from one region to another. What is the most efficient way to migrate the configuration?

A.Restore a backup from a Recovery Services vault.
B.Use Azure Data Factory to copy the resource.
C.Manually recreate all resources in the new region.
D.Export the resource as an ARM template and deploy it to the new region.
AnswerD

ARM templates allow for automated, repeatable deployments to new locations.

Why this answer

Azure Resource Manager (ARM) templates or Bicep files are the standard for infrastructure as code, ensuring consistent replication.

57
MCQmedium

You are creating a Custom Vision project and need to select a domain. Your project involves classifying images of various food dishes. Which domain should you select to optimize model accuracy for food classification?

A.Landmark
B.Food
C.General
D.Retail
AnswerB

The Food domain is optimized for recognizing various dishes and food items.

Why this answer

Custom Vision offers domain-specific options such as Food, Retail, and Landmark to optimize neural networks for specific domains.

58
MCQhard

You are optimizing a RAG pipeline in Azure AI Foundry. The model is hallucinating when retrieving documents from a large corpus. Which strategy should you implement to improve grounding accuracy?

A.Increase the temperature of the model to 1.0
B.Use a larger embedding model
C.Implement a Cross-Encoder re-ranking step
D.Increase the chunk size to include the entire document
AnswerC

Re-ranking ensures only the most contextually relevant chunks are sent to the LLM.

Why this answer

Adding a re-ranking step after the initial search significantly improves the relevance of the context provided to the LLM.

59
MCQeasy

You need to view the latency of requests made to an Azure AI services endpoint. Where do you find this information?

A.The Subscription billing dashboard.
B.The 'Deployment' logs in the machine learning workspace.
C.Azure Advisor recommendations.
D.Azure Monitor metrics.
AnswerD

Metrics like 'Latency' or 'Total Requests' are native to the Azure AI resource monitor.

Why this answer

Azure Monitor metrics provide granular detail on latency and request rates for AI services.

60
Multi-Selecteasy

Which THREE options are available for configuring network security in Azure?

Select 3 answers
A.Azure Private Link / Private Endpoints.
B.Azure Storage Account Keys.
C.Azure Active Directory Groups.
D.Azure Firewall.
E.Network Security Groups (NSG).
AnswersA, D, E

Private Link provides secure, private network access.

Why this answer

NSGs, Firewalls, and Private Links are the standard network isolation tools in Azure.

61
MCQmedium

You are building an application that extracts named entities from technical specifications. You need to ensure that entity extraction respects casing requirements for part numbers (e.g., 'Model-X' vs 'Model-x'). Where can you configure case sensitivity for custom NER projects?

A.In the HTTP request headers of every API call.
B.In the Azure Monitor diagnostics logs.
C.In the Azure portal subscription access control blade.
D.In the project settings within Language Studio during project creation.
AnswerD

Case sensitivity settings are configured at the project level in Language Studio.

Why this answer

When creating a custom NER project in Language Studio, you can specify project settings such as whether entity extraction and text evaluation should be case-sensitive or case-insensitive.

62
Multi-Selecthard

Which THREE security principles should you follow when managing Azure AI resources?

Select 3 answers
A.Auditability and logging.
B.Maximum access for all administrators.
C.Defense in Depth.
D.Disable all security features to improve speed.
E.Principle of Least Privilege.
AnswersA, C, E

You must be able to track all actions for compliance.

Why this answer

Least privilege, defense in depth, and auditability are core pillars of secure cloud management.

63
MCQmedium

You are designing a RAG solution using Azure AI Search and Azure OpenAI. Users report that when querying technical documentation, the system misses highly relevant paragraphs because the exact keywords do not match the user's conversational query. How should you configure Azure AI Search to improve retrieval accuracy?

A.Switch the index analyzer to a standard whitespace analyzer to prevent stemming issues.
B.Enable semantic ranking on the Azure AI Search index and use hybrid search combining vector embeddings and keyword BM25.
C.Increase the number of retrieved documents (top_k) from 3 to 20 without changing the query type.
D.Convert all documents to uppercase before indexing to ensure case-insensitive matching.
AnswerB

Hybrid search combined with semantic ranking bridges the gap between keyword mismatches and semantic meaning.

Why this answer

Semantic ranking in Azure AI Search applies advanced machine learning models to understand the intent of the query and re-rank search results based on semantic relevance rather than pure keyword matching.

64
Multi-Selectmedium

You are preparing a dataset for fine-tuning an Azure OpenAI model in Azure AI Foundry. Which TWO data formatting and preparation requirements must you follow? (Choose TWO)

Select 2 answers
A.Include unencrypted passwords and PII in plain text to improve model empathy
B.Upload raw unstructured PDF files directly as the fine-tuning training dataset
C.Format training data as JSONL (JSON Lines) where each line is a chat completion example
D.Ensure training examples follow the expected system, user, and assistant message roles
E.Encode all training examples in binary audio wave files (.wav)
AnswersC, D

Azure OpenAI fine-tuning requires JSONL format matching chat message structures.

Why this answer

Fine-tuning data for Azure OpenAI must be formatted as valid JSONL where each line represents a chat completion training example.

65
Multi-Selectmedium

You are developing a .NET application that interacts with Azure AI Vision Read API. Which TWO objects or properties would you inspect in the asynchronous response to retrieve extracted text lines and their confidence scores? (Choose two.)

Select 2 answers
A.text
B.dominantColors
C.adultScore
D.smartCrops
E.lines
AnswersA, E

The text property holds the string content of the detected line or word.

Why this answer

The Read API response contains `analyzeResult.readResults` or `readResult.blocks`/`lines`, where each line has `text`, `boundingBox`, and `confidence` (in older versions) or text content.

66
MCQeasy

You are monitoring your Azure OpenAI deployment in Azure AI Foundry. You notice an increase in HTTP 429 status codes. What does this error indicate?

A.Internal server error at Microsoft
B.Model deployment not found
C.Rate limit or token quota exceeded (Too Many Requests)
D.Invalid API key authentication
AnswerC

HTTP 429 means you have hit your deployment's tokens-per-minute (TPM) or requests-per-minute (RPM) limits.

Why this answer

HTTP 429 indicates that the request rate or token usage has exceeded your allocated quota or rate limit.

67
MCQhard

You are managing an enterprise Azure OpenAI resource that experiences bursty traffic patterns. To optimize cost without sacrificing availability during sudden workload spikes, you decide to implement a caching layer for frequent prompts and responses. Which Azure service should you integrate in front of Azure OpenAI?

A.Azure Traffic Manager routing profile
B.Azure Cache for Redis
C.Azure ExpressRoute local gateway
D.Azure Content Delivery Network (CDN)
AnswerB

Caching frequent prompt-response pairs in Azure Cache for Redis reduces redundant API calls and accelerates response times.

Why this answer

Azure Cache for Redis can be used to cache LLM prompt responses, reducing API calls to Azure OpenAI and lowering costs and latency.

68
MCQmedium

You are deploying an Azure AI multi-service account in the West US region. The finance department requires that all resource deployment costs be tracked by department code using Azure Resource Manager tags. Which Azure feature should you use to enforce the mandatory application of the department tag across all future Azure AI resource deployments?

A.Azure Cost Management budgets
B.Azure role-based access control (RBAC)
C.Azure Blueprints
D.Azure Policy
AnswerD

Azure Policy is the correct service to audit and enforce resource properties like mandatory tags across Azure AI resource groups and subscriptions.

Why this answer

Azure Policy enables the enforcement of resource properties and tags at scale during deployment by evaluating resource definitions against rule conditions such as 'Tags'.

69
Multi-Selecthard

When analyzing documents using Azure AI Document Intelligence, which THREE properties can be found within the returned JSON result object for an extracted table cell? (Choose THREE)

Select 3 answers
A.columnIndex
B.audioTranscript
C.sentimentScore
D.content
E.rowIndex
AnswersA, D, E

columnIndex specifies the column index of the table cell.

Why this answer

Table cell objects contain properties such as rowIndex, columnIndex, content, and boundingRegions.

70
Multi-Selecthard

Which THREE file types are supported for direct processing by the Document Intelligence API?

Select 3 answers
A.DOCX
B.TIFF
C.JPEG
D.PDF
E.PPTX
AnswersB, C, D

Supported.

Why this answer

PDF, JPEG, and TIFF (and PNG) are standard supported input formats.

71
MCQhard

You are designing an agentic workflow in Azure AI Foundry that requires the agent to call an external REST API. Which component should you use to define the tool interface?

A.Azure AI Content Safety
B.LLM output parser
C.Tool definition using a Python function
D.Flow input schema
AnswerC

Defining tools as Python functions within a prompt flow allows the agent to execute code and call external APIs seamlessly.

Why this answer

In prompt flow, tools are defined using Python functions or specific tool definitions that map the schema for the LLM to understand how to invoke the external function.

72
MCQhard

You are setting up diagnostic logging for an Azure OpenAI resource. Your security team mandates that all log streams must be exported in real-time to a security information and event management (SIEM) platform outside Azure, such as Splunk. Which destination should you configure in the Azure Monitor diagnostic setting?

A.Send to a Microsoft Sentinel workbook
B.Configure an Azure Automation runbook webhook
C.Stream to an Azure Event Hub
D.Archive to an Azure Storage account container
AnswerC

Streaming logs to an Event Hub allows external SIEM solutions like Splunk to consume the log stream in real time.

Why this answer

Azure Monitor diagnostic settings can stream logs to Azure Event Hubs, which can then integrate with external SIEM platforms like Splunk.

73
MCQhard

You are integrating Azure AI Vision into a serverless Azure Functions architecture. A batch of 500 high-resolution images needs to be processed. To prevent function timeouts and optimize throughput, how should you architect the function triggers?

A.Use Azure Logic Apps with a synchronous batch loop.
B.Trigger a single synchronous Azure Function that loops through all 500 images sequentially within a single HTTP request.
C.Configure an Azure Event Grid subscription to directly invoke Azure AI Vision REST endpoints without compute logic.
D.Use a Blob Storage trigger to enqueue image messages onto an Azure Storage Queue, and configure Queue-triggered functions to process image analysis asynchronously.
AnswerD

Decoupling blob uploads from processing via queues prevents timeouts and enables resilient horizontal scaling.

Why this answer

Using Azure Blob Storage triggers combined with Azure Queue Storage and queue-triggered functions allows decoupled, scalable, asynchronous processing without function timeout bottlenecks.

74
MCQeasy

You are writing a Python script using the Azure AI Language SDK (`azure-ai-textanalytics`). Which client class should you instantiate to connect to your language resource?

A.LanguageServiceClient
B.TextAnalyticsClient
C.TextAnalysisClient
D.CognitiveServicesClient
AnswerB

TextAnalyticsClient is the correct Python SDK client class for text analysis.

Why this answer

The `TextAnalyticsClient` class is the main entry point for interacting with Azure AI Language text analysis features using the Python SDK.

75
MCQmedium

You are building an agentic workflow in Azure AI Foundry using the Semantic Kernel framework. The agent needs to call external APIs dynamically based on user intent. Which component should you register with the kernel to enable this capability?

A.A system prompt template
B.A plugin containing native or semantic functions
C.A sequential planner instance
D.A custom memory store
AnswerB

Plugins expose functions that the agent can invoke when responding to user requests.

Why this answer

Plugins (formerly known as skills in Semantic Kernel) are used to encapsulate functions and APIs that the agent can call dynamically. Prompts, memory, and planners serve different roles in orchestration.

Page 1 of 7

Page 2

All pages