Courseiva

Microsoft Certified: Azure AI Apps and Agents Developer Associate (AI-103) (AI-103) (AI-103) — Questions 76150

510 questions total · 7pages · All types, answers revealed

Page 1

Page 2 of 7

Page 3
76
MCQeasy

You are preparing a prompt template for a summarization task. You want to provide three distinct examples of input text and expected summaries before asking the model to process the target text. What is this prompting technique called?

A.Retrieval-augmented generation
B.Chain-of-thought prompting
C.Few-shot prompting
D.Zero-shot prompting
AnswerC

Few-shot prompting guides the model by supplying demonstrations of the desired task.

Why this answer

Providing examples within the prompt is known as few-shot prompting. Zero-shot has no examples, and chain-of-thought involves reasoning steps.

77
MCQmedium

How do you handle sensitive user data when using an Azure AI Agent?

A.Send all data to the model; the model will ignore it.
B.Increase the model parameter size.
C.Store user PII in the vector index.
D.Use Data Masking/PII filtering before the data reaches the agent.
AnswerD

Data sanitization is a critical step in maintaining privacy compliance.

Why this answer

Data privacy practices dictate that sensitive data should be anonymized before being sent to the model or excluded from training.

78
Multi-Selecthard

When designing a RAG-based agent, which THREE factors directly influence the quality of the retrieved information?

Select 3 answers
A.The system prompt's instructions on retrieval.
B.The use of hybrid search (combining keyword and vector search).
C.The granularity and quality of the chunked documents in the index.
D.The frequency of the model's training updates.
E.The model's temperature setting.
AnswersA, B, C

Clear instructions on how to use retrieved data help the model utilize it effectively.

Why this answer

Retrieval quality is dependent on the quality of the indexed data, the search query construction, and the effectiveness of the search algorithm.

79
Multi-Selecthard

Your enterprise architecture team is reviewing the security posture of an Azure AI deployment that handles sensitive financial documents. Which TWO actions should you implement to secure data in transit and at rest? (Choose two.)

Select 2 answers
A.Enforce a minimum TLS version of 1.2 or higher for all API requests to secure data in transit.
B.Configure customer-managed keys (CMK) using Azure Key Vault for encryption at rest.
C.Grant 'Contributor' permissions to all developer accounts to simplify key rotation.
D.Disable diagnostic logging to prevent sensitive document text from being stored in Log Analytics.
E.Use Microsoft-managed keys exclusively without integrating Azure Key Vault.
AnswersA, B

Enforcing minimum TLS versions ensures secure encryption standards for data moving across the network.

Why this answer

Customer-managed keys (CMK) via Azure Key Vault protect data at rest, and enforcing TLS 1.2 or TLS 1.3 secures data in transit. Disabling diagnostics, using standard keys, or disabling RBAC reduces security.

80
MCQhard

You are managing an Azure OpenAI model deployment in an active-passive multi-region disaster recovery architecture. A regional outage occurs, and you failover traffic to the secondary region. However, clients report receiving authentication errors. What is the most likely cause?

A.Azure automatically deletes API keys during a regional failover.
B.The client application's managed identity has not been granted the required RBAC roles on the secondary Azure OpenAI resource.
C.Azure OpenAI models require re-training after any regional failover event.
D.The primary region's DNS zone must be manually deleted for failover to work.
AnswerB

RBAC role assignments do not replicate automatically across resources; the managed identity must be assigned permissions on the secondary resource.

Why this answer

Managed identities are region-specific or require proper role assignments on the secondary resource instance.

81
MCQmedium

You are deploying an Azure OpenAI model in Azure AI Foundry and need to restrict access so that only specific virtual networks within your enterprise can invoke the model endpoint. Which feature should you configure?

A.API key rotation policies
B.Azure Private Link with private endpoints
C.Cross-Origin Resource Sharing (CORS) headers
D.Model rate limit quotas
AnswerB

Private endpoints secure traffic between your virtual network and the Azure OpenAI service.

Why this answer

Private endpoints and virtual network rules restrict network access to Azure OpenAI resources securely.

82
MCQeasy

What is the primary purpose of a 'Vector Store' in a RAG-based agentic application?

A.To store embeddings for efficient semantic similarity search.
B.To generate text responses.
C.To log user conversations for analytics.
D.To fine-tune the LLM.
AnswerA

This is the core function of a vector database.

Why this answer

Vector stores allow for semantic search, which finds content based on meaning rather than exact keyword matching.

83
MCQmedium

You are configuring content safety filters in Azure AI Foundry for a public-facing generative AI application. You need to ensure that the application detects and blocks potential jailbreak attempts and protected material text. Which component should you configure?

A.Azure Key Vault access policies restricting model endpoint tokens.
B.Azure AI Content Safety text moderation service with jailbreak and protected material detection enabled.
C.Azure API Management rate-limiting policies configured to drop requests containing long prompts.
D.Azure Monitor activity log alerts for anomalous token usage.
AnswerB

Content Safety includes dedicated blocklists and classifiers designed specifically to catch prompt injection, jailbreak attempts, and copyrighted text.

Why this answer

Azure AI Content Safety provides specialized detectors for hate speech, sexual content, violence, self-harm, jailbreak attacks, and protected material detection.

84
Multi-Selectmedium

You are configuring prompt engineering practices for a generative AI application in Azure AI Foundry. Which THREE practices should you follow to ensure high output quality and reliability? (Choose three.)

Select 3 answers
A.Specify the desired output format explicitly (e.g., JSON schema or markdown tables).
B.Embed all system instructions inside the user prompt string without using system roles.
C.Rely entirely on vague, implicit instructions to give the model creative freedom.
D.Use delimiters such as triple backticks or XML tags to clearly separate instructions from user-provided data.
E.Incorporate few-shot examples of edge cases and expected behaviors.
AnswersA, D, E

Explicit formatting instructions ensure parsable and structured outputs.

Why this answer

Effective prompt engineering involves clear separation of context/instructions, few-shot examples, and specifying output formats.

85
MCQeasy

Which authentication method is recommended to prevent 'key leakage' in Azure AI Services?

A.Storing keys in a plaintext file.
B.Creating custom headers for API requests.
C.Regenerating keys every 30 days.
D.Using Microsoft Entra ID authentication.
AnswerD

Entra ID eliminates the need for shared keys, removing the risk of key leakage.

Why this answer

Microsoft Entra ID (formerly Azure AD) provides role-based access control without needing to rotate or manage static subscription keys.

86
MCQeasy

You need to detect the primary language of customer feedback submissions before routing them to downstream translation and analysis pipelines. Which Azure AI Language API endpoint should your application call?

A./languages/detect
B./keyphrases
C./language/:analyze-text
D./sentiment
AnswerA

The language detection endpoint is used specifically to detect document languages.

Why this answer

The language detection endpoint ('/languages/detect') identifies the language of input documents.

87
MCQmedium

You are designing an agentic workflow where an orchestrator agent delegates sub-tasks to specialized worker agents (e.g., a research agent and a coding agent). Which framework or service native to Azure AI supports multi-agent orchestration patterns?

A.Azure Data Factory pipeline authoring
B.Semantic Kernel or Microsoft AutoGen
C.Azure Stream Analytics query editor
D.Azure Logic Apps standard workflow designer
AnswerB

Semantic Kernel and AutoGen provide robust frameworks for building multi-agent conversational and task-oriented workflows.

Why this answer

Microsoft AutoGen and Semantic Kernel are core frameworks supported within Azure AI for multi-agent orchestration and collaborative agent workflows.

88
MCQmedium

Your development team has created a custom model using Azure Machine Learning. You need to deploy this model as a real-time web service endpoint with auto-scaling capabilities. Which deployment target should you select?

A.Azure Functions consumption plan
B.Azure Container Registry webhook
C.Azure Batch cluster
D.Azure Managed Online Endpoint
AnswerD

Managed Online Endpoints handle provisioning, scaling, and load balancing for real-time model inference in Azure ML.

Why this answer

Azure Managed Online Endpoints provide a scalable, managed infrastructure for deploying machine learning models with automatic scaling.

89
MCQhard

You are designing an automated pipeline to deploy Azure AI Custom Vision projects using Infrastructure as Code (IaC) with Bicep. You need to reference an existing Custom Vision training resource in your deployment script without hardcoding its endpoint URL or primary key. Which Bicep construct should you use to retrieve these properties dynamically?

A.The ARM template 'reference()' function inside a Bicep file
B.An Azure Key Vault secret data source
C.A Bicep module output parameter from a separate template
D.The Bicep 'existing' keyword reference
AnswerD

Using 'resource cognitiveAccount 'Microsoft.CognitiveServices/accounts@2023-05-01' = existing' allows retrieving runtime properties and keys securely.

Why this answer

The 'existing' keyword in Bicep allows you to reference an already deployed Azure resource to read its properties or output keys without recreating it.

90
Multi-Selecthard

When composing multiple individual Custom Neural models into a single composed model in Azure AI Document Intelligence, which THREE behaviors or characteristics apply? Each correct selection represents a valid aspect.

Select 3 answers
A.Composed models require a separate Azure resource endpoint for each individual sub-model.
B.All sub-models included in a composed model must share the same major API version.
C.Composed models support an unlimited number of sub-models without any performance impact.
D.The composed model automatically classifies incoming documents and routes them to the appropriate sub-model.
E.You can query the composed model using a single model ID, which simplifies client application code.
AnswersB, D, E

Azure Document Intelligence requires component models in a composed model to be created with compatible API versions.

Why this answer

Composed models route documents automatically to the correct underlying model, share a single endpoint, and require all component models to be built using the same major API version.

91
MCQhard

You are implementing Retrieval-Augmented Generation (RAG) using Azure AI Search and Azure OpenAI. Users report that when searching for technical product specifications, the system occasionally retrieves outdated product manuals because newer versions share similar titles. What configuration change should you make to improve retrieval accuracy?

A.Increase the chunk size parameter in the document ingestion pipeline to 4000 tokens
B.Decrease the temperature parameter of the Azure OpenAI generation model to 0.0
C.Switch the embedding model from text-embedding-ada-002 to text-embedding-3-small
D.Enable semantic search and semantic ranking on the Azure AI Search index
AnswerD

Semantic ranking uses advanced language models to re-rank search results, significantly improving relevancy for technical queries.

Why this answer

Enabling semantic search and semantic ranking in Azure AI Search allows the system to understand user intent and rank results based on deep semantic meaning rather than just keyword matches.

92
MCQeasy

You are configuring an Azure AI Document Intelligence prebuilt model to extract key-value pairs from standard invoices. Which API operation should your application call to process the document asynchronously?

A.POST /documentintelligence/documentModels/prebuilt-invoice:train?api-version=2024-02-29-preview
B.POST /documentintelligence/models/prebuilt-invoice/analyze?api-version=2024-02-29-preview
C.POST /formrecognizer/v2.1/prebuilt/invoice/analyze
D.POST /documentintelligence/documentModels/prebuilt-invoice:analyze?api-version=2024-02-29-preview
AnswerD

This is the correct endpoint and model ID for analyzing invoices.

Why this answer

The prebuilt invoice model uses the document analysis feature via the analyzeDocument operation, passing the prebuilt-invoice model ID.

93
MCQhard

You are configuring a custom named entity recognition project in Language Studio. You have tagged your training documents and want to split your dataset into training and testing sets. What are the recommended split options available in Language Studio?

A.Splitting exclusively by alternating lines within each document.
B.External split configuration via an Azure DevOps pipeline YAML file.
C.Automatic split by percentage or manual assignment of documents to sets.
D.Command-line split using Azure PowerShell scripts only.
AnswerC

Language Studio supports both automatic percentage-based splitting and manual document assignment.

Why this answer

Language Studio allows you to automatically split your labeled dataset (e.g., 80% training / 20% testing) or manually assign documents to training and testing sets.

94
MCQhard

You are designing a secure hybrid network architecture for an Azure OpenAI resource. Virtual machines inside a spoke virtual network must access the OpenAI service via a Private Endpoint. Additionally, domain name resolution must rely on an enterprise private DNS server hosted on-premises connected via ExpressRoute. Which DNS zone must you configure in Azure?

A.privatelink.openai.azure.com Private DNS zone
B.privatelink.cognitiveservices.azure.com Private DNS zone
C.azurewebsites.net public DNS zone
D.cognitiveservices.azure.com public DNS zone
AnswerA

Azure private endpoints for OpenAI require the 'privatelink.openai.azure.com' DNS zone to resolve the private IP address correctly.

Why this answer

Private endpoints require configuring a Private DNS Zone matching the service's domain suffix (e.g., privatelink.openai.azure.com) linked to the virtual network.

95
MCQeasy

You are managing prompt assets in Azure AI Foundry. Your team collaborates on developing, testing, and versioning system prompts. Which feature in Azure AI Foundry should you use to store and manage these prompt templates?

A.Azure Storage Blob lifecycle management policies
B.Prompt flow / Prompt management workspace assets
C.Azure App Service deployment slots
D.Azure Key Vault secret versions
AnswerB

Azure AI Foundry provides prompt management and prompt flow capabilities to version and test prompt templates.

Why this answer

Prompt flow and prompt management tools in Azure AI Foundry allow teams to author, version, and share prompt templates collaboratively.

96
MCQeasy

You are writing a system prompt for an Azure OpenAI model deployed in Azure AI Foundry. You want to ensure the model responds only using the provided context and refuses to answer if the context is insufficient. What technique should you use?

A.Configure Azure AI Content Safety severity levels to high
B.Set the model temperature to 1.0 and top_p to 0.0
C.Enable semantic caching on the Azure OpenAI deployment
D.Include explicit grounding instructions and a negative constraint in the system prompt
AnswerD

System prompt engineering allows you to define constraints such as 'If the answer cannot be found in the context, state 'I do not know'.'

Why this answer

Grounding instructions combined with explicit refusal behavior in system prompts establish strict boundaries for RAG applications.

97
MCQeasy

You are designing an AI application and want to test different foundation models (e.g., GPT-4o vs. Llama 3) side-by-side using the same prompt and test dataset. Which feature in Azure AI Foundry should you use?

A.Azure Monitor workbook performance graphs
B.Azure Cosmos DB cross-region replication
C.Side-by-side evaluation in Azure AI Foundry playground
D.Azure Front Door traffic routing
AnswerC

The AI Foundry playground supports side-by-side model comparisons to evaluate quality and response style.

Why this answer

Model evaluation and playground comparison tools in Azure AI Foundry allow developers to compare outputs across different models side-by-side.

98
MCQhard

You are designing an agent that needs to access user-specific data from OneDrive. How should you handle the authentication for this tool call?

A.Disable authentication for the API.
B.Use a Managed Identity for the agent.
C.Hardcode the OAuth tokens in the tool definition.
D.Request the user to provide credentials via the chat interface.
AnswerB

Managed Identities ensure secure and automated access to Azure resources.

Why this answer

Managed Identities provide the secure, token-based authentication required for services to communicate without storing credentials.

99
MCQeasy

Which file format is NOT natively supported for training custom models in Azure AI Document Intelligence?

A.PDF
B.JPEG
C.BMP
D.DOCX
AnswerD

DOCX is not directly supported as a training input format.

Why this answer

Azure AI Document Intelligence supports PDF, JPEG, PNG, TIFF, and BMP, but not native Word documents (DOCX) for training sets without conversion.

100
MCQhard

You are building an agentic application that uses function calling. The model frequently hallucinates arguments for complex tool schemas. Which technique should you apply to improve function calling reliability?

A.Convert all tool arguments into unstructured natural language text.
B.Remove all parameter descriptions from the tool schema to reduce prompt token count.
C.Set the model frequency penalty to high values.
D.Enhance the JSON schema with detailed parameter descriptions, enum constraints, and strict schema validation settings.
AnswerD

Explicit parameter descriptions and strict schemas drastically reduce malformed or hallucinated tool arguments.

Why this answer

Providing clear docstrings, descriptions for every parameter in the JSON schema, and strict mode (if supported) guides the model to populate correct arguments.

101
Multi-Selecteasy

Which THREE prebuilt document models are natively available out-of-the-box in Azure AI Document Intelligence? Each correct selection represents a valid prebuilt model.

Select 3 answers
A.Prebuilt W-2 tax form model
B.Prebuilt Invoice model
C.Prebuilt Video Sentiment analyzer
D.Prebuilt 3D CAD Model Analyzer
E.Prebuilt Receipt model
AnswersA, B, E

The Prebuilt W-2 model is part of the U.S. tax form prebuilt models suite.

Why this answer

Azure AI Document Intelligence provides specific prebuilt models for invoices, receipts, and W-2 tax forms, among others.

102
MCQeasy

What is the primary benefit of using the Model Catalog in Azure AI Foundry?

A.Automated prompt engineering
B.Centralized discovery and deployment of models
C.Network security configuration
D.Automatic data labeling
AnswerB

This simplifies model management.

Why this answer

The Model Catalog provides a centralized location to discover and deploy models.

103
MCQhard

You are deploying a custom AI model using a container image stored in Azure Container Registry (ACR). How do you ensure the deployment can pull the image securely?

A.Use the ACR 'admin' password in the configuration.
B.Assign the 'AcrPull' role to the endpoint's managed identity.
C.Deploy the model from a local machine.
D.Make the ACR public.
AnswerB

Managed identity-based access is the most secure way to pull from ACR.

Why this answer

Granting the AI service's managed identity the 'AcrPull' role on the registry allows it to pull images securely without shared secrets.

104
MCQmedium

You are testing an agent in the Azure AI Foundry playground. You observe that the agent answers questions about its internal prompt. What is the most effective way to prevent this?

A.Delete the search index.
B.Use a higher-parameter model.
C.Update the system prompt to explicitly refuse requests about its instructions.
D.Disable the playground.
AnswerC

Reinforcing the agent's persona and rules is the primary defense against prompt injection/leakage.

Why this answer

System prompts should clearly define the agent's identity and boundaries to prevent prompt leakage.

105
MCQhard

Your enterprise application uses Custom Vision. Due to compliance policies, you must ensure that your training data and model endpoints reside within a specific Azure region with strict data residency guarantees. Which resource configuration should you use?

A.Use the Global resource endpoint for Custom Vision.
B.Use Azure AI Vision multi-service account with global routing.
C.Create a Custom Vision training and prediction resource in the targeted Azure region.
D.Store images in Azure Blob Storage with geo-replication.
AnswerC

Regional Custom Vision resources ensure that training data and API calls remain within that specific geography.

Why this answer

Custom Vision resources must be created in an Azure region that supports Custom Vision, and data remains within that region. Using a Cognitive Services multi-service resource or regional Custom Vision resource ensures regional residency.

106
MCQhard

You are configuring rate limiting and request throttling for multiple client applications consuming an Azure OpenAI endpoint. Different clients have different tier agreements (Bronze, Silver, Gold). Where should you implement these tiered rate-limiting policies?

A.Azure API Management (APIM)
B.Azure Application Gateway custom WAF rules
C.Azure OpenAI service built-in tier settings
D.Network Security Group (NSG) outbound rules
AnswerA

APIM allows you to define custom policies (rate-limit-by-key, quota) to enforce different tier limits for distinct client groups.

Why this answer

Azure API Management (APIM) provides advanced rate-limiting, quota enforcement, and policy expressions based on subscription keys or JWT tokens for different client tiers.

107
MCQhard

You are analyzing customer product reviews using the Azure AI Language REST API. You submit a batch of documents for sentiment analysis. One of the returned JSON objects includes a 'confidenceScores' property containing 'positive', 'neutral', and 'negative' values, but the overall document sentiment is listed as 'mixed'. What condition causes the service to return 'mixed'?

A.The document contains an equal number of uppercase and lowercase words.
B.The confidence scores for both positive and negative sentiments exceed established thresholds within the same document.
C.The document length exceeds the 5,120 character limit.
D.The language detection confidence score is below 0.5.
AnswerB

A mixed sentiment is assigned when significant positive and negative polarities coexist in the same text.

Why this answer

The service returns a 'mixed' sentiment when the confidence scores for both positive and negative emotions are significant within the same document, preventing a clear single classification.

108
MCQhard

You are implementing prompt engineering for a customer support agent. To minimize hallucinations when the model lacks information, which Prompt Flow technique is most effective?

A.Chain-of-thought prompting
B.Instructional grounding to only answer from context
C.Increasing the Top_P parameter
D.Few-shot prompting with varied examples
AnswerB

This restricts the model to the provided context and reduces hallucinations.

Why this answer

Prompt engineering for RAG requires explicit instructions to use provided context and say 'I don't know' if missing.

109
MCQeasy

You are deploying an Azure AI Speech resource using an ARM template. Which parameter defines the name of the resource instance?

A.sku
B.name
C.location
D.kind
AnswerB

The 'name' property sets the name of the deployed Azure resource.

Why this answer

The 'name' property in ARM template resource definitions specifies the name of the resource.

110
MCQhard

You are designing an agentic workflow in Azure AI Agent Service where multiple specialized agents need to collaborate to solve complex, multi-step financial analysis tasks. One agent manages the workflow state and decides which sub-agent to invoke next. What architectural pattern is best suited for this implementation?

A.Orchestrator-workers pattern, where a central agent dynamically assigns sub-tasks to specialized worker agents based on intermediate results.
B.Single monolithic prompt pattern, where all instructions are combined into one massive system prompt without multi-agent handoffs.
C.Map-reduce batch processing pattern, where all sub-agents execute independently in parallel without communication.
D.Static sequential pipeline, where agents execute strictly in a predefined linear order without conditional branching.
AnswerA

This pattern is ideal for complex workflows requiring dynamic task delegation, state management, and specialized agent collaboration.

Why this answer

The orchestrator-workers (or router) pattern uses a central orchestrator agent to manage state, evaluate progress, and delegate tasks to specialized worker agents.

111
MCQhard

You are troubleshooting a performance issue where your application's calls to Azure AI Vision experience high latency. Your application is hosted in Azure West US, but your Azure AI Vision resource was accidentally created in Azure Southeast Asia. What is the recommended remediation?

A.Increase the timeout threshold in the HTTP client configuration.
B.Recreate the Azure AI Vision resource in the West US region close to your application hosting.
C.Enable Azure ExpressRoute between West US and Southeast Asia.
D.Switch from REST API to gRPC protocol.
AnswerB

Co-locating the AI resource in the same Azure region as the application significantly reduces network latency.

Why this answer

To minimize network latency, cognitive services resources should be deployed in the same Azure region as the consuming application.

112
Multi-Selectmedium

You are configuring text summarization using the Azure AI Language REST API. Which THREE parameters or configuration options are associated with summarization requests? (Choose three.)

Select 3 answers
A.maxSentenceCount parameter
B.Audio sample rate frequency
C.Abstractive summarization task definition
D.Image resolution DPI setting
E.Extractive summarization task definition
AnswersA, C, E

maxSentenceCount controls sentence count in extractive summaries.

Why this answer

Summarization requests involve specifying the task type (e.g., extractive or abstractive), setting summary length parameters (like maxSentenceCount or maxSummaryLength), and providing document inputs.

113
MCQmedium

You are integrating Document Intelligence with Azure Blob Storage. You need to provide the model with a set of documents for training. How should you prepare the data?

A.Convert all files to CSV
B.Upload files and corresponding .labels.json and .ocr.json files
C.Store files in an Azure SQL database
D.Upload raw files only
AnswerB

The model requires the document and its associated labeling metadata.

Why this answer

Training requires documents to be stored in an Azure Blob Storage container with associated .labels.json files generated by the labeling tool.

114
MCQeasy

You are deploying an Azure OpenAI model in Azure AI Foundry and want to evaluate its performance and safety against a validation dataset before moving to production. Which tool should you use?

A.Azure Monitor Log Analytics query packs
B.Azure Advisor cost recommendations
C.Model evaluation in Azure AI Foundry
D.Azure API Management developer portal
AnswerC

Azure AI Foundry provides built-in model evaluation wizards and SDK functions to assess quality and safety metrics.

Why this answer

Azure AI Foundry evaluation tools allow developers to run automated evaluations using metrics like groundedness, relevance, and coherence against test datasets.

115
MCQhard

You are troubleshooting an Azure AI Language asynchronous summarization job. You submitted a batch of documents using the `/analyze` endpoint with long-running operations (LRO). How should your application check the status and retrieve the results of the job?

A.Listen for incoming webhook notifications on an Azure Event Grid subscription attached to the text analytics resource.
B.Query the Azure Monitor metrics API for job completion status.
C.Poll the URL provided in the 'operation-location' response header using a GET request until the status is 'succeeded'.
D.Repeatedly send synchronous POST requests to the same document endpoint until a 200 OK is returned.
AnswerC

Asynchronous batch jobs in Azure AI Language require polling the operation-location URI.

Why this answer

Asynchronous operations return an 'operation-location' response header. Your application must poll that URL using a GET request until the status returns 'succeeded'.

116
MCQmedium

Your development team requires secure, passwordless authentication from an Azure Function to an Azure AI Vision resource. Which authentication mechanism should you implement to adhere to security best practices?

A.Shared Access Signature (SAS) tokens with read-only permissions
B.Basic authentication using service administrator username and password
C.Primary API Key passed in the Ocp-Apim-Subscription-Key header
D.Microsoft Entra managed identity
AnswerD

Managed identities provide an automatically managed identity in Microsoft Entra ID for applications to use when connecting to resources.

Why this answer

Managed identities eliminate the need for developers to manage credentials and allow Azure resources to authenticate to Azure services supporting Microsoft Entra ID. API keys and connection strings present credential rotation and leakage risks.

117
MCQeasy

What is the purpose of 'Azure Advisor' in an AI solution?

A.To manage user identities.
B.To automatically patch the AI models.
C.To provide best practice recommendations for resources.
D.To host the web frontend for the AI application.
AnswerC

Advisor analyzes your configuration and suggests improvements based on best practices.

Why this answer

Azure Advisor provides personalized recommendations for cost optimization, security, reliability, and performance.

118
MCQhard

You are troubleshooting a Custom Vision object detection model that has low precision and high false-positive rates for a specific object class. During data analysis, you notice that negative images (images without the object) lack background variety. What is the recommended remediation step?

A.Increase the probability threshold in the prediction API call.
B.Remove all tagged bounding boxes and retrain as a multi-class classification model.
C.Apply aggressive data augmentation to duplicate existing positive images.
D.Add diverse negative images containing background environments similar to where false positives occur.
AnswerD

Adding challenging negative images helps reduce false positives by providing negative context.

Why this answer

Adding more diverse negative images that resemble difficult backgrounds helps the model distinguish the target object from confusing background elements.

119
MCQmedium

Your application uses the Azure AI Document Intelligence Prebuilt Receipt model to process customer receipts. A receipt contains a custom tip amount that is not explicitly categorized by the default prebuilt schema. How should you extract this custom value?

A.Call the Azure OpenAI service directly with the raw image to guess the tip amount.
B.Pass a custom JSON schema parameter in the Prebuilt Receipt API request body to extend its extraction fields.
C.Modify the prebuilt receipt model schema directly in the Azure Portal to add a new required field.
D.Use the Prebuilt Layout model alongside custom regex rules or train a Custom model to capture the custom tip field.
AnswerD

Because prebuilt receipt schemas are fixed, capturing non-standard fields requires training a custom model or applying layout extraction with custom regex rules.

Why this answer

When prebuilt models do not cover specific custom fields, you can combine the Prebuilt Read/Layout model output with custom parsing logic, or train a custom model if needed, but for prebuilt models, leveraging general key-value pairs or post-processing layout text is standard.

120
MCQmedium

You need to ensure that your agent's response is formatted as valid JSON. How should you approach this?

A.Set the temperature to 0.5.
B.Use an external library to convert text to JSON.
C.Ask the user to request JSON.
D.Define the JSON schema in the system prompt instructions.
AnswerD

Explicit instructions on formatting guide the model to follow the required structure.

Why this answer

Using structured outputs or defining the schema in the system prompt is the standard way to enforce output formats in LLMs.

121
MCQhard

You are implementing an agentic workflow where an agent needs to search a vector database, inspect the retrieved results, and if the results are insufficient, reformulate the query and search again before answering. What agent design pattern are you implementing?

A.Static zero-shot generation pattern
B.Direct REST API proxy pattern
C.Database indexing batch pattern
D.Self-Correction / Reflection pattern
AnswerD

The reflection pattern enables agents to evaluate their work and iteratively refine their approach.

Why this answer

Self-Correction / Reflection pattern allows agents to evaluate their intermediate outputs, detect gaps or failures, and take corrective action (like query re-writing) before finalizing their response.

122
Multi-Selectmedium

When designing prompt engineering strategies for complex reasoning tasks in Azure OpenAI, which TWO techniques help reduce hallucinations and improve output reliability? (Choose TWO)

Select 2 answers
A.Few-shot prompting providing high-quality input-output demonstration examples
B.Chain-of-thought (CoT) prompting instructing step-by-step reasoning
C.Disabling system prompts entirely to maximize model freedom
D.Setting the top_p parameter to 0.0 while setting temperature to 2.0
E.Encoding all prompt variables in hexadecimal format
AnswersA, B

Demonstration examples set clear expectations for format, tone, and accuracy.

Why this answer

Few-shot prompting with clear examples and chain-of-thought reasoning significantly improve complex task accuracy and reduce hallucinations.

123
MCQeasy

Which Azure feature allows you to control which users can modify or delete your Azure AI resources?

A.Azure RBAC.
B.Conditional Access policies.
C.Azure Firewall.
D.Resource Locks.
AnswerA

RBAC is specifically designed to manage access to Azure resources.

Why this answer

Azure RBAC (Role-Based Access Control) manages fine-grained permissions for users on Azure resources.

124
MCQeasy

What is the primary function of the 'layout' model in Azure AI Document Intelligence?

A.To translate text into different languages
B.To classify document types
C.To extract key-value pairs from receipts
D.To extract text, tables, and document structure
AnswerD

The layout model provides the structural footprint of a document.

Why this answer

The layout model identifies text, tables, selection marks, and structure within a document.

125
Multi-Selectmedium

Which TWO metrics are reported by Document Intelligence Studio to evaluate model performance?

Select 2 answers
A.Recall
B.Throughput
C.Latencey
D.Precision
E.Confidence score
AnswersA, D

Included in evaluation.

Why this answer

Precision and Recall are the core metrics provided for every field in a custom model.

126
MCQhard

You are analyzing multi-language documents containing mixed English and Japanese text using Azure AI Vision Read API. How should you specify the language parameter to ensure optimal OCR accuracy?

A.Use the legacy OCR v3.0 endpoint with multi-language flag.
B.You must submit English and Japanese pages separately in distinct API calls.
C.Set language=en-US exclusively.
D.Omit the language parameter or set language=unk to enable automatic language detection across supported languages.
AnswerD

Read API automatically detects languages when language is not specified or set to auto/unknown.

Why this answer

The Read API supports automatic language detection, but you can also specify the `language` parameter or rely on auto-detection for multilingual documents.

127
MCQeasy

You are provisioning an Azure AI services account and need to select the kind of resource. Which kind parameter value should you select for an Azure OpenAI deployment?

A.CognitiveSearch
B.MachineLearning
C.OpenAI
D.BotService
AnswerC

OpenAI is the correct resource kind parameter for provisioning Azure OpenAI services.

Why this answer

The 'OpenAI' kind is specified when creating Azure OpenAI resources.

128
MCQmedium

Your organization has deployed an Azure AI Custom Vision model. You need to automate the retraining pipeline whenever new training images are uploaded to an Azure Blob Storage container. Which Azure service should you use to trigger the retraining pipeline?

A.Azure ExpressRoute monitor
B.Azure Backup service
C.Azure Event Grid
D.Azure Monitor alert rules
AnswerC

Event Grid integrates natively with Azure Blob Storage to trigger event-driven workflows when new blobs are uploaded.

Why this answer

Azure Event Grid reacts to storage events (such as blob creation) and can trigger workflows or Azure Functions to start retraining.

129
Multi-Selectmedium

You are designing an image analysis solution using Azure AI Vision 4.0. Which TWO visual features can be requested in a single Image Analysis API analyze request? (Choose two.)

Select 2 answers
A.tags
B.Custom Vision Classification
C.read
D.Azure AI Face Analyze
E.Azure AI Document Intelligence Layout
AnswersA, C

Tags can be combined with other features in a single request.

Why this answer

Image Analysis 4.0 supports combining multiple features such as 'tags', 'objects', 'read', 'caption', 'denseCaptions', 'smartCrops', 'people', and 'brands' in one analyze call.

130
MCQeasy

When creating a new project in the Custom Vision portal, you need to choose a classification type. You want to tag an image with multiple independent tags (e.g., 'outdoor', 'sunset', 'mountain'). Which classification type should you select?

A.Multilabel
B.Object Detection
C.Binary Classification
D.Multiclass
AnswerA

Multilabel classification allows multiple tags to be assigned to a single image.

Why this answer

Multilabel classification allows zero or more tags to be applied to each image independently.

131
MCQeasy

You are reviewing the pricing details for Azure AI Language. How is billing calculated for pre-built text analysis features such as sentiment analysis and key phrase extraction?

A.Hourly uptime of the resource endpoint
B.Number of unique client application connections
C.Total gigabytes of training data uploaded
D.Number of text records (documents) processed
AnswerD

Billing is based on the number of text records processed.

Why this answer

Text analysis features are billed based on the number of text records (documents) processed, where each record is up to 1,000 characters.

132
MCQmedium

You are building an automated invoice processing pipeline using Azure AI Document Intelligence. Some incoming invoices contain handwritten vendor signatures and handwritten approval dates. Which feature must you ensure is supported and enabled when configuring your analysis request?

A.Rely on the built-in OCR capability which detects both printed and handwritten text across supported models.
B.Enable the 'handwritten=true' query parameter in the API call header.
C.Train a custom neural model exclusively with handwritten signature samples.
D.Deploy a separate Azure AI Vision Handwritten Text container and pipe its output into the Document Intelligence request.
AnswerA

Document Intelligence OCR engine detects both printed and handwritten text natively without special switches.

Why this answer

Document Intelligence automatically supports handwritten text detection, but understanding its performance implications on custom or prebuilt models is crucial for accuracy.

133
MCQmedium

You are developing a multi-agent orchestration solution using Azure AI Agent Service and want to ensure that user inputs are safely evaluated before they are passed to the model. Which component should you configure to inspect and filter incoming prompts for malicious content and restricted topics?

A.Azure Key Vault access policies
B.Azure AI Content Safety integrated into the model gateway
C.Azure Cognitive Search semantic ranker
D.Azure API Management rate limiting policy
AnswerB

Azure AI Content Safety provides prompt shielding and text moderation directly within the model gateway or agent pipeline.

Why this answer

Azure AI Content Safety is integrated into Azure AI Foundry and agent services to inspect prompts and completions for safety violations, jailbreak attempts, and restricted topics before they reach the model.

134
MCQmedium

You are using Custom Vision to train an object detection model. You want to evaluate model performance before publishing an iteration. Which metric represents the overall accuracy of the model across all classes at various confidence thresholds?

A.Perplexity
B.Word Error Rate (WER)
C.BLEU Score
D.Mean Average Precision (mAP)
AnswerD

mAP summarizes object detection accuracy across multiple classes and thresholds.

Why this answer

Mean Average Precision (mAP) is the standard metric used in Custom Vision and object detection to evaluate overall model accuracy.

135
MCQhard

You are deploying a custom text classification model using Azure AI Language. The model undergoes frequent retraining as new business data arrives. You need to establish a model versioning strategy that allows zero-downtime client updates while ensuring seamless rollback capability if regression occurs. What is the recommended architectural approach?

A.Delete the original resource before deploying the updated model version.
B.Overwrite the existing model artifact in place with the new training run using the exact same name.
C.Create a completely new Azure AI resource in a different subscription for every single model iteration.
D.Deploy each model version with a unique deployment name and update the application client configuration or routing rules to shift traffic progressively.
AnswerD

Using unique deployment names or version tags allows you to canary new models and quickly switch traffic back to the previous version if errors increase.

Why this answer

Deploying models with distinct version identifiers and updating the endpoint configuration or using deployment slots/version tags allows routing traffic dynamically.

136
Multi-Selectmedium

When configuring role-based access control (RBAC) in Azure AI Foundry and Azure OpenAI, which TWO built-in Azure roles are commonly assigned to developers and services? (Choose TWO)

Select 2 answers
A.Storage Blob Data Owner
B.Cognitive Services OpenAI User
C.Virtual Machine Contributor
D.Network Contributor
E.Azure AI Developer
AnswersB, E

Cognitive Services OpenAI User allows principals to invoke model deployments.

Why this answer

Cognitive Services OpenAI User and Azure AI Developer are standard built-in RBAC roles used to secure access to Azure AI resources.

137
Multi-Selecthard

When designing an automated document processing pipeline using Azure AI Vision Read API, which THREE architectural considerations should you account for? (Choose three.)

Select 3 answers
A.Ensure document files adhere to supported page count and file size limits.
B.Expect synchronous JSON responses containing all extracted text directly on the initial POST call.
C.Handle asynchronous polling using the Operation-Location response header.
D.Configure the API to store extracted text permanently in local memory without pagination.
E.Implement retry logic with exponential backoff for HTTP 429 rate limit responses.
AnswersA, C, E

Exceeding size or page limits results in validation errors.

Why this answer

Read API is asynchronous, returns HTTP 202, requires polling the Operation-Location URL, and processes documents page-by-page or up to supported multi-page limits.

138
Multi-Selecthard

You are planning the deployment of Azure AI containers in an on-premises disconnected environment. Which THREE prerequisites and operational considerations must you address? Each correct answer presents part of the solution.

Select 3 answers
A.Submit an online application and obtain billing approval from Microsoft to use disconnected containers.
B.Ensure the host environment has network connectivity to Azure at least once every 30 days to sync billing data.
C.Rely on perpetual offline execution without ever reporting telemetry to Azure.
D.Configure a local license mount file supplied by Microsoft during container startup.
E.Connect the container permanently to an active Azure SQL database over the public internet.
AnswersA, B, D

Disconnected containers require explicit Microsoft approval and container registry access agreements.

Why this answer

Application for approval, license downloading, and periodic re-authentication are required for disconnected containers.

139
MCQmedium

You are building an automated support ticketing system. You need to extract names, email addresses, and phone numbers from user messages while leaving non-sensitive text untouched. Which feature of Azure AI Language should you use?

A.Key phrase extraction
B.Personally Identifiable Information (PII) detection
C.Named Entity Recognition (NER)
D.Custom text classification
AnswerB

PII detection specifically locates and redacts sensitive personal data elements.

Why this answer

PII detection identifies sensitive personal information and allows you to redact or mask those entities.

140
MCQhard

You are implementing a text classification pipeline using Azure AI Language. You want to deploy your trained custom model to a production endpoint. What is required before you can assign traffic to the model deployment in Language Studio?

A.You must successfully complete model training and create a deployment in Language Studio.
B.You must export the model container and deploy it to an Azure Kubernetes Service (AKS) cluster.
C.You must submit a support ticket to Microsoft to enable custom model endpoints.
D.You must convert the model files to ONNX format.
AnswerA

Deploying a custom model requires a trained model and an active deployment name.

Why this answer

Before a custom model can be deployed and used for inference, it must be successfully trained, and then assigned to a deployment name.

141
MCQhard

You are tuning the prompt for a generative AI application in Azure AI Foundry. The model frequently hallucinates when asked complex multi-part questions. You decide to use chain-of-thought (CoT) prompting. How should you structure the prompt to implement CoT effectively?

A.Set the model seed parameter to a fixed integer value for reproducibility
B.Reduce the maximum completion token limit to 150 tokens
C.Instruct the model to think step-by-step and show its intermediate reasoning before providing the final answer
D.Instruct the model to output its response exclusively in JSON format with strict schema validation
AnswerC

Asking the model to break down its reasoning step-by-step significantly improves accuracy on complex tasks.

Why this answer

Chain-of-thought prompting involves guiding the model to articulate intermediate reasoning steps before arriving at the final conclusion.

142
MCQmedium

You are troubleshooting an Azure AI Document Intelligence custom extraction model. When you test a new document, certain currency values are being extracted with the currency symbol missing. Where should you look in the JSON response structure to find the normalized value?

A.In the styles collection under the isHandwritten property.
B.In the documentFields array under the valueCurrency object property.
C.In the paragraphs collection under the boundingRegions array.
D.In the analyzeResults object under the content property.
AnswerB

Extracted fields provide typed values such as valueCurrency, valueNumber, or valueDate which contain normalized representations.

Why this answer

Document Intelligence extracts fields with both a raw text representation and a normalized value (e.g., currency, number, date) when applicable.

143
MCQmedium

Your application uploads images to Azure AI Vision via URLs. One of your URLs is failing with an invalid image error, even though the image opens correctly in web browsers. What is the most likely reason?

A.Azure AI Vision does not support URL-based inputs; you must upload binary bytes.
B.The image file size exceeds 500 MB.
C.Image URLs are restricted to PNG format only.
D.The URL requires HTTP Basic Authentication or redirects that the vision service cannot resolve.
AnswerD

The image URL must be publicly accessible and directly downloadable without authentication or complex session cookies.

Why this answer

Azure AI Vision must be able to publicly access the URL without authentication barriers (like cookies, redirects, or private IP spaces).

144
MCQhard

You are implementing a multi-region disaster recovery strategy for an Azure OpenAI deployment. If the primary region goes down, how should you configure traffic redirection to the secondary region using Azure Front Door?

A.Use geographic routing based on the client IP location.
B.Use weighted routing with a 50/50 split between regions.
C.Use priority routing with the primary region set to priority 1 and the secondary region set to priority 2.
D.Use performance-based routing to the lowest latency node.
AnswerC

Priority routing ensures all traffic goes to the primary region unless health probes fail, failing over to priority 2.

Why this answer

Configuring a priority routing method in Azure Front Door enables automatic failover to the secondary region when the primary endpoint fails health probes.

145
MCQhard

You are managing an enterprise Azure OpenAI deployment with high traffic volumes. To prevent unexpected bill increases due to sudden usage spikes, you need to implement a cost-control mechanism that halts requests once a specific financial limit is reached. What is the native approach to achieve this?

A.Configure an Azure API Management (APIM) policy to track token usage and reject requests when the quota is exceeded.
B.Set a hard spending limit directly inside the Azure AI Services resource properties pane.
C.Create an Azure Cost Management budget with an action group running a script to delete the OpenAI resource.
D.Enable Microsoft Defender for Cloud auto-remediation rules for high billing.
AnswerA

Placing Azure OpenAI behind Azure APIM allows you to enforce rate-limiting, token-bucket quotas, and custom policies that block requests before they hit Azure.

Why this answer

Azure AI Services do not have a built-in automated hard-stop mechanism based directly on spend thresholds; however, budgets with action groups can trigger alerts or automated runbooks, though real-time hard stopping typically requires throttling or custom API management policies.

146
MCQmedium

Your application calls Azure AI Vision API and receives an HTTP 429 Too Many Requests response. What does this error signify, and how should your application handle it?

A.The service is undergoing maintenance. Fail over to a secondary region.
B.The image file format is unsupported. Convert to PNG.
C.Your API key is invalid. Refresh your subscription key immediately.
D.You have exceeded your pricing tier rate limits. Implement exponential backoff and retry the request.
AnswerD

HTTP 429 represents throttling due to rate limits; exponential backoff is the standard remediation.

Why this answer

HTTP 429 indicates rate limiting (quota exceeded). The application should implement exponential backoff and retry the request.

147
MCQhard

You are implementing opinion mining as part of sentiment analysis in Azure AI Language. An incoming review states, 'The room was spacious, but the staff was rude.' What does opinion mining return for this sentence?

A.A binary classification indicating whether the review is spam or genuine.
B.A single neutral sentiment score for the entire document.
C.A translated version of the review in English.
D.Aspect targets ('room', 'staff') along with their corresponding evaluations ('spacious', 'rude') and individual sentiments.
AnswerD

Opinion mining provides granular aspect-based sentiment analysis, linking targets to assessments.

Why this answer

Opinion mining targets specific aspects (e.g., 'room', 'staff') and associates a separate sentiment and assessment (e.g., 'spacious' is positive, 'rude' is negative) for each aspect.

148
MCQhard

You are processing large PDF documents. You only need the text in the table of contents. What is the most cost-effective approach?

A.Use a custom template model
B.Split the PDF into individual pages before uploading
C.Use the 'pages' query parameter
D.Process the entire PDF
AnswerC

This limits processing to the specified range, reducing consumption.

Why this answer

Using the 'pages' parameter in the API call allows you to restrict processing to specific pages, saving costs.

149
MCQmedium

You are evaluating a Custom Vision classification model. You want to programmatically test the model against a validation dataset without using the portal UI. Which endpoint should your script call?

A.POST /computervision/imageanalysis:analyze
B.POST /customvision/v3.3/Training/{projectId}/images
C.GET /vision/v3.2/models
D.POST /customvision/v3.3/Prediction/{projectId}/classify/iterations/{publishedName}/image
AnswerD

This is the standard Custom Vision iteration prediction endpoint for image classification.

Why this answer

Predictions are queried via the Prediction endpoint of the Custom Vision project.

150
MCQeasy

You want to monitor the cost and latency of your agentic application in production. Which service should you integrate with your Azure AI Foundry project?

A.Azure OpenAI Studio.
B.Azure AI Search.
C.Azure Application Insights.
D.Azure AI Content Safety.
AnswerC

Application Insights provides the telemetry required for monitoring performance and costs.

Why this answer

Azure Monitor combined with Application Insights is the standard for tracking telemetry in Azure AI services.

Page 1

Page 2 of 7

Page 3

All pages