Courseiva

Microsoft Certified: Azure AI Apps and Agents Developer Associate (AI-103) (AI-103) (AI-103) — Questions 376450

510 questions total · 7pages · All types, answers revealed

Page 5

Page 6 of 7

Page 7
376
Multi-Selectmedium

Which TWO of the following are valid ways to authenticate to the Document Intelligence service?

Select 2 answers
A.FTP Credentials
B.SSH Key
C.SQL Server Authentication
D.API Key
E.Microsoft Entra ID (RBAC)
AnswersD, E

Standard authentication method.

Why this answer

Authentication is primarily handled through an API key or Microsoft Entra ID (RBAC).

377
MCQhard

An agent is designed to summarize meeting transcripts but keeps including internal meeting notes in the final summary. What is the most effective way to address this?

A.Update the system prompt to clarify which sections of the transcript to include.
B.Lower the temperature.
C.Switch to a different model.
D.Add a 'stop_sequence' to the API call.
AnswerA

Instructional refinement is the best tool for controlling the scope of the model's summary.

Why this answer

Modifying the system prompt to explicitly define the inclusion/exclusion criteria for the summary is the most effective way to control agent output.

378
MCQhard

You are implementing a RAG pipeline where documents are chunked before embedding generation. You notice that semantic sentences are frequently split across chunk boundaries, resulting in degraded retrieval quality. Which chunking strategy should you implement to resolve this?

A.Sliding window chunking with token overlap
B.Fixed-character chunking with zero overlap
C.Paragraph-only splitting with maximum size limits of 10,000 tokens
D.Random token slicing
AnswerA

Token overlap ensures adjacent chunks share boundary context, preventing semantic fragmentation.

Why this answer

Semantic chunking or sliding window chunking with overlap ensures that context spanning sentence boundaries is preserved across adjacent chunks.

379
MCQhard

You are implementing a disaster recovery strategy for a critical image processing application that relies on Azure AI Vision. If the primary Azure region experiences an outage, how should you configure failover?

A.Use geo-replication on the Azure Blob Storage account to automatically fail over the AI service endpoints.
B.Configure Azure Site Recovery to replicate the Azure AI Vision service backend VMs.
C.Rely on automatic synchronous replication of Custom Vision models across all global Azure datacenters without application changes.
D.Deploy a secondary Azure AI Vision resource in a paired Azure region and configure your application to fail over to the secondary endpoint if errors occur.
AnswerD

Multi-region deployment with application-level failover or Traffic Manager ensures high availability.

Why this answer

Deploying a secondary Azure AI Vision resource in a paired region and updating the application configuration (or using Azure Front Door / Traffic Manager) enables regional failover.

380
MCQhard

You are implementing Retrieval-Augmented Generation (RAG) using Azure AI Search as the retriever and Azure OpenAI as the generator. Users report that the generated responses frequently miss critical context located in the middle of long retrieved documents. Which grounding optimization technique should you apply?

A.Increase the temperature parameter of the Azure OpenAI model to 1.2 to encourage creative synthesis of the middle content.
B.Switch the Azure AI Search retriever from hybrid search to pure keyword BM25 search.
C.Implement semantic ranking and reorder retrieved documents so the highest-scored chunks appear at the very beginning and end of the prompt context.
D.Reduce the chunk size to 64 tokens to force the retriever to return hundreds of tiny fragments.
AnswerC

Language models tend to pay more attention to information at the beginning and end of a long context window.

Why this answer

Lost-in-the-middle phenomena can be mitigated by placing the most relevant retrieved chunks at the beginning or end of the prompt context, or by employing ranker reordering strategies.

381
Multi-Selectmedium

When planning the model selection and versioning lifecycle for Azure OpenAI deployments in an enterprise environment, which TWO practices should you follow? (Choose two.)

Select 2 answers
A.Use deprecated model versions indefinitely to maintain identical outputs.
B.Monitor Microsoft documentation and deprecation notices for model version lifecycles.
C.Automatically upgrade all production model deployments to the latest preview version the moment it is released.
D.Test new model versions in a staging or development environment before promoting them to production.
E.Never update model versions once deployed to avoid any future validation work.
AnswersB, D

Tracking deprecation schedules prevents service disruptions when older model versions are retired.

Why this answer

Best practices include testing model updates in non-production environments first and reviewing deprecation schedules for model versions.

382
MCQeasy

You are evaluating a generative AI application in Azure AI Foundry using automated metrics. You need to measure how well the generated answers are supported by the retrieved source documents. Which evaluation metric should you use?

A.Word Error Rate (WER)
B.Groundedness
C.BLEU score
D.Perplexity
AnswerB

Groundedness evaluates whether the model response is faithful to the retrieved context.

Why this answer

Groundedness measures the extent to which the generated text is derived solely from the provided source context, preventing hallucinations.

383
MCQhard

You need to secure communications between an Azure App Service hosting your web app and an Azure AI Computer Vision service. The web app must authenticate to Computer Vision without storing API keys in application settings. Which feature should you enable?

A.Managed Identity on the App Service and RBAC role assignment on the Computer Vision resource.
B.API Management subscription keys
C.Cross-Origin Resource Sharing (CORS)
D.Storage account shared access signatures (SAS)
AnswerA

Managed identity removes stored credentials by utilizing Entra ID authentication securely.

Why this answer

A system-assigned or user-assigned managed identity allows the App Service to acquire Microsoft Entra tokens to authenticate to Computer Vision securely without embedded keys.

384
MCQeasy

You need to extract text lines, words, bounding polygons, and selection marks (such as radio buttons and checkboxes) from arbitrary documents without training. Which prebuilt model should you invoke?

A.Prebuilt Business Card model
B.Prebuilt ID Document model
C.Prebuilt Layout model
D.Custom Neural model
AnswerC

The Prebuilt Layout model extracts text, selection marks, paragraphs, and table structures from documents.

Why this answer

The Prebuilt Read model extracts text, layout structures, and selection marks across various document types without requiring any custom model training.

385
MCQmedium

You are deploying an Azure OpenAI GPT-4 model in a region experiencing high demand, and you need to guarantee a dedicated throughput level without contending with other tenants. Which deployment type should you select?

A.Serverless deployment
B.Standard deployment
C.Provisioned (PTU) deployment
D.Batch deployment
AnswerC

Provisioned deployments allocate dedicated capacity measured in Provisioned Throughput Units.

Why this answer

Provisioned Throughput Units (PTUs) provide reserved, guaranteed model throughput for predictable performance and workloads.

386
Multi-Selectmedium

You are designing an agentic workflow in Azure AI Foundry that needs to perform multiple tasks sequentially. Which THREE components are essential for defining the orchestration logic?

Select 3 answers
A.Azure Data Factory
B.Prompt flow
C.Tool definition (Function Calling)
D.Azure Logic Apps integration
E.Directed Acyclic Graph (DAG) logic
AnswersB, C, E

Prompt flow is the orchestration engine for agentic workflows.

Why this answer

Prompt flows, tool definitions, and control flow nodes are standard in Azure AI Foundry agent orchestration.

387
Multi-Selectmedium

You are designing an asynchronous text analysis workflow using the Azure AI Language service to process large volumes of documents (e.g., hundreds of megabytes of text files stored in Azure Blob Storage). Which TWO features support asynchronous batch processing jobs via the /analyze-text/jobs endpoint?

Select 2 answers
A.Standard sentiment analysis
B.Language detection
C.Custom text classification
D.Key phrase extraction
E.Text summarization (Abstractive)
AnswersC, E

Custom text classification supports asynchronous batch jobs for processing large numbers of documents.

Why this answer

Asynchronous batch operations in Azure AI Language are supported for resource-intensive tasks such as custom classification, custom NER, and abstractive/extractive summarization.

388
Multi-Selecteasy

Which TWO components are essential for creating an effective system prompt?

Select 2 answers
A.A clear definition of the agent's persona and objective.
B.A list of all users authorized to use the agent.
C.The full training dataset of the base model.
D.Constraints and instructions on how to handle edge cases or disallowed topics.
E.A list of all hardware components in the data center.
AnswersA, D

The persona sets the tone and purpose.

Why this answer

An effective system prompt defines the agent's role (persona) and its constraints (rules).

389
MCQeasy

You need to extract key concepts and main ideas from long-form technical support articles using the Azure AI Language service. Which feature should you invoke?

A.Personal Personally Identifiable Information (PII) detection
B.Language detection
C.Summarization
D.Key phrase extraction
AnswerD

Key phrase extraction pulls out the main talking points from unstructured text.

Why this answer

Key phrase extraction returns a list of strings denoting the main talking points in the input text.

390
MCQmedium

Your development team needs to deploy an Azure AI Language resource that can be accessed from an on-premises datacenter via an ExpressRoute circuit without traversing the public internet. Which Azure feature should you configure?

A.Azure Bastion host subnet
B.Azure Private Endpoint
C.NAT gateway resource attachment
D.Azure Front Door with Web Application Firewall
AnswerB

A Private Endpoint maps the Azure AI service to a private IP in your VNet, facilitating secure hybrid connectivity via ExpressRoute.

Why this answer

Azure Private Endpoint injects a private IP address from a virtual network into the Azure AI resource, allowing secure access over ExpressRoute or VPN.

391
Multi-Selecteasy

Which TWO prebuilt models are officially available in Azure AI Document Intelligence for extracting specialized domain data? (Choose TWO)

Select 2 answers
A.prebuilt-socialSecurityCard
B.prebuilt-architecturalDrawing
C.prebuilt-tax.us.w2
D.prebuilt-medicalChart
E.prebuilt-invoice
AnswersC, E

The US W-2 tax form is a supported prebuilt model.

Why this answer

Azure AI Document Intelligence provides prebuilt models for W-2 tax forms and invoices, among others.

392
MCQeasy

You are configuring an Azure AI Language resource and want to ensure that it can be accessed securely from an Azure Virtual Network (VNet) without traversing the public internet. Which Azure networking feature should you configure?

A.Private endpoints
B.Azure Front Door
C.Azure Bastion
D.VPN Gateway
AnswerA

Private endpoints secure traffic between your VNet and the Azure AI service.

Why this answer

Private endpoints allow you to connect securely to your Azure AI Language resource from a virtual network using private IP addresses.

393
MCQmedium

You are implementing a tool call in a Prompt Flow. The tool needs to interact with an external REST API. What is the recommended way to manage the API credentials securely?

A.Pass the key as a parameter in the input prompt
B.Hardcode the API key in the Prompt Flow code
C.Use an environment variable in the flow definition
D.Use an Azure AI Foundry Connection of type Custom
AnswerD

Connections store secrets securely.

Why this answer

Azure AI Foundry Connections securely store secrets for tool access.

394
MCQmedium

A company requires that all AI models be approved by a compliance officer before they are deployed to production. Which feature facilitates this workflow?

A.Azure AI Model Registry versioning and tagging.
B.Azure Service Bus queues.
C.Blob Storage access policies.
D.Azure Function webhooks.
AnswerA

Registry tags can be used to track model lifecycle states like 'Approved' or 'Development'.

Why this answer

Azure AI Model Catalog and Registry allow for lineage and approval tracking in enterprise environments.

395
Multi-Selecthard

Your organization is implementing strict network isolation for Azure OpenAI. Direct internet access from worker nodes is prohibited. Which THREE mechanisms must be correctly configured to allow secure communication? Each correct answer presents part of the solution.

Select 3 answers
A.Public network access disabled on the Azure OpenAI resource
B.Public IP addresses assigned directly to the AI service endpoint
C.Azure Bastion host attached to the OpenAI backend storage
D.Private DNS zone integration for openai.azure.com resolution
E.Azure Private Endpoint connected to the application virtual network subnet
AnswersA, D, E

Disabling public network access ensures traffic cannot bypass the private endpoint.

Why this answer

Private endpoint, private DNS zone, and disabling public access ensure secure network isolation.

396
MCQhard

You need to optimize the retrieval performance of your RAG agent. You find that the search engine returns too many irrelevant documents. What should you adjust?

A.Configure Hybrid Search settings in the search index.
B.Increase the model temperature.
C.Change the model to a newer version.
D.Reduce the system prompt length.
AnswerA

Hybrid search improves precision by combining semantic relevance with keyword matching.

Why this answer

Hybrid search (combining vector and keyword search) and adjusting ranking parameters can significantly improve retrieval accuracy.

397
MCQmedium

You are implementing a RAG solution where documents contain complex hierarchical headings. To ensure search chunks retain sufficient context about which section they belong to, what chunking strategy should you adopt?

A.Fixed-size character chunking with zero overlap
B.Random token sampling without structural awareness
C.Single-chunk whole document ingestion
D.Hierarchical (parent-child) chunking retaining section headers
AnswerD

Parent-child chunking links small child chunks to larger parent chunks or headers, maintaining context during retrieval.

Why this answer

Hierarchical chunking or parent-child chunking retains parent section headings and metadata within smaller searchable child chunks, preserving document context.

398
Multi-Selecthard

When establishing a governance strategy for Azure AI resources across multiple cloud teams, which THREE administrative tasks should an administrator perform? (Choose three.)

Select 3 answers
A.Apply Role-Based Access Control (RBAC) following the principle of least privilege.
B.Enforce naming conventions and allowed regions using Azure Policy.
C.Organize subscriptions under Azure Management Groups for hierarchical governance and policy inheritance.
D.Disable Azure Activity Logs to prevent administrative audit trails.
E.Assign the Owner role to all developers to streamline resource creation.
AnswersA, B, C

Least privilege ensures users only have access necessary for their tasks.

Why this answer

Governance involves applying Azure Policies, assigning least-privilege RBAC roles, and organizing resources into management groups and subscriptions.

399
MCQmedium

Your team needs to receive an email alert if the error rate for your AI endpoint exceeds 5% for more than 15 minutes. What should you create?

A.An Azure Service Health notification.
B.An Azure Monitor Alert rule with an Action Group.
C.A scheduled Azure Function that polls the API.
D.A Log Analytics query saved as a report.
AnswerB

Alert rules track metric thresholds and action groups define how to notify stakeholders.

Why this answer

Azure Monitor Alert rules allow you to trigger actions (like email notifications via action groups) based on metric thresholds.

400
MCQmedium

You are integrating Azure AI Search with Azure OpenAI for grounded chat generation. Users report that the generated answers are accurate, but the citations returned to the user point to raw internal file paths rather than user-friendly web URLs. How should you resolve this?

A.Enable Azure AI Content Safety citation filtering
B.Decrease the search result top_k parameter to 1
C.Store public URL equivalents in index metadata fields and configure citation mapping in your orchestration layer
D.Modify the Azure OpenAI system prompt to guess web URLs based on file names
AnswerC

Mapping internal storage paths to user-facing URLs in index metadata allows your application to render clean citation links.

Why this answer

Mapping internal file path fields to public URL fields in the Azure AI Search index mapping configuration ensures correct citation links are returned.

401
MCQmedium

You are building a RAG application where documents are updated frequently. You need to ensure that the Azure AI Search index reflects document deletions and updates in near real-time without performing full re-indexing. How should you design the ingestion pipeline?

A.Increase the Azure OpenAI model deployment concurrency quota
B.Enable semantic caching on the OpenAI endpoint
C.Configure Azure AI Search indexers with change tracking and scheduled incremental synchronization
D.Delete the entire search service and recreate the index daily using a batch script
AnswerC

Indexers support change tracking to automatically add, update, or delete index documents based on source data changes.

Why this answer

Using incremental indexers with change tracking (such as integrated data change detection or custom push APIs with soft-delete metadata) allows efficient updates.

402
Multi-Selectmedium

Your company wants to track and allocate Azure AI service costs by department. Which TWO mechanisms can assist with this requirement? (Choose two.)

Select 2 answers
A.Using Azure Cost Management filters and cost allocation rules to generate chargeback reports.
B.Sharing a single Azure subscription across all departments without using tags or resource groups.
C.Deactivating Azure Cost Management to reduce management overhead.
D.Provisioning all AI resources in the Free (F0) tier.
E.Applying department-specific cost tracking tags (e.g., Department: Marketing) to Azure AI resources.
AnswersA, E

Cost allocation rules and filters enable accurate department chargeback reporting.

Why this answer

Resource tags and Azure Cost Management filters/chargeback reports are the standard tools for department-level cost allocation.

403
MCQmedium

You are using Document Intelligence to classify documents into different types (e.g., invoices, bank statements). Which model is most appropriate?

A.Prebuilt-invoice
B.Custom classification model
C.Read model
D.Custom extraction model
AnswerB

Classification models identify document types.

Why this answer

The 'custom classification' model is designed to group documents into predefined categories.

404
Multi-Selectmedium

Which TWO factors directly influence the embedding quality and retrieval relevance in an Azure AI Search vector retrieval pipeline? (Choose two.)

Select 2 answers
A.The background color of the source documents in blob storage.
B.The choice of embedding model (e.g., text-embedding-3-large vs text-embedding-3-small) and its dimensionality.
C.The font family used in the original PDF documents.
D.The client browser version used by the end user.
E.The chunking strategy and chunk size used to segment source documents.
AnswersB, E

The embedding model determines how accurately semantic meaning is captured in vector space.

Why this answer

Embedding model choice and chunking strategy are primary determinants of vector retrieval quality.

405
Multi-Selecthard

You are troubleshooting a Prompt Flow and suspect the issue lies in the input processing. Which THREE tools or techniques can you use?

Select 3 answers
A.Setting breakpoints in the visual designer.
B.The 'Trace' feature to inspect inputs and outputs of each node.
C.Reviewing the 'logs' generated during the flow execution.
D.Deleting and recreating the entire resource group.
E.Increasing the model temperature to see if the error persists.
AnswersA, B, C

Breakpoints allow for inspecting flow state.

Why this answer

Debugging in Prompt Flow involves visual inspection of node inputs/outputs, tracing, and log analysis.

406
Multi-Selectmedium

You are configuring an agent in Azure AI Agent Service that needs to utilize tools. Which TWO types of tools are natively supported by Azure AI Agent Service? (Choose TWO)

Select 2 answers
A.Azure SQL Database stored procedure compiler
B.Azure Virtual Machine provisioning extension
C.Function calling (Custom tools/APIs)
D.Azure Stream Analytics tumbling window operator
E.Code Interpreter
AnswersC, E

Function calling allows agents to invoke custom APIs and functions.

Why this answer

Code interpreter and Function calling (custom tools) are natively supported built-in tools within Azure AI Agent Service.

407
MCQhard

You are using an Azure AI model that supports versioning. You want to perform an A/B test by routing 10% of traffic to a new version. Where do you configure this?

A.Azure App Service routing rules.
B.Azure Load Balancer backend pools.
C.Azure Traffic Manager DNS settings.
D.The 'Traffic' configuration in the Azure AI endpoint.
AnswerD

The endpoint's traffic settings allow you to allocate percentages to different deployment versions.

Why this answer

In Azure AI managed endpoints, you can define traffic distribution across multiple deployments within the same endpoint.

408
MCQeasy

Your company processes business cards from international clients. Which prebuilt Azure AI Document Intelligence model should you use to extract names, company names, emails, and phone numbers from these cards?

A.prebuilt-businessCard
B.prebuilt-invoice
C.prebuilt-layout
D.prebuilt-receipt
AnswerA

This model is specifically trained for business cards.

Why this answer

The prebuilt business card model (prebuilt-businessCard) extracts contact information from business cards.

409
MCQeasy

You are implementing Retrieval-Augmented Generation (RAG) in Azure AI Foundry using Azure AI Search as the grounding data source. Which indexing feature should you enable to ensure the system can perform semantic ranking alongside traditional keyword search?

A.Fuzzy Search
B.Lucene Standard Analyzer
C.Semantic Search
D.Vector Normalization
AnswerC

Enabling semantic search adds semantic ranking capabilities to your Azure AI Search index, which is recommended for RAG scenarios.

Why this answer

Semantic ranking uses advanced language models to re-rank top search results, significantly improving the relevance of retrieved chunks for RAG pipelines.

410
Multi-Selecteasy

As part of responsible AI practices in Azure AI Foundry, which TWO actions should you perform to evaluate and mitigate model fairness and safety risks before deployment? (Choose two)

Select 2 answers
A.Bypass security reviews if the application is intended for internal enterprise employees only.
B.Run automated evaluations in Azure AI Foundry to measure metrics such as groundedness, relevance, and protected material presence.
C.Remove all system prompts to allow the model complete autonomy during evaluation runs.
D.Perform adversarial testing (red teaming) to identify potential prompt injections, jailbreaks, and unintended behaviors.
E.Hardcode responses for all possible user inputs to eliminate model non-determinism entirely.
AnswersB, D

Automated evaluation tools in Azure AI Foundry help quantify model performance and safety metrics against validation datasets.

Why this answer

Evaluating models using automated evaluation metrics (such as groundedness and relevance) and conducting red teaming are essential responsible AI practices.

411
MCQmedium

You are deploying an Azure AI Speech resource. Your compliance team stipulates that all data sent to the speech service must be processed strictly within the geographical boundaries of the European Union and must not be used for Microsoft's model training. How should you ensure this compliance?

A.Deploy the Speech resource in an EU-based region (such as West Europe) and review the data privacy and residency terms.
B.Enable Azure Policy to encrypt all audio files using customer-managed keys (CMK).
C.Install a local speech-to-text container on an Azure VM and disconnect it from the internet permanently.
D.Configure an Azure Firewall instance to inspect and drop audio payloads destined outside the EU.
AnswerA, C

Deploying in an EU region ensures regional data processing, and Microsoft's enterprise terms guarantee customer data is not used to train base models.

Why this answer

Azure AI Services comply with regional data residency and offer data privacy controls ensuring customer data is stored at rest in the specified region and not used for training without explicit opt-in.

412
MCQhard

You are managing a multi-tenant SaaS application that uses Azure AI Vision. Each tenant has their own isolated data, and you want to track costs per tenant. How should you provision Azure AI services to achieve granular cost attribution?

A.Use a single global Azure AI Services resource and parse tenant IDs from request user-agent headers for billing.
B.Store tenant IDs in Custom Vision project tags.
C.Deploy a dedicated Azure AI Services resource per tenant and use Azure Cost Management for billing attribution.
D.Use Azure Blob Storage cost allocation tags to cover AI API costs.
AnswerC

Dedicated resources per tenant provide exact, isolated cost tracking via Azure Cost Management.

Why this answer

Provisioning separate Azure AI Services resources per tenant (or using resource tags with Azure Cost Management) allows granular cost tracking, though separate resources provide strict billing isolation.

413
MCQmedium

You are using Custom Vision and want to programmatically publish a trained iteration so that prediction endpoints can use it. Which API operation should you call?

A.GET /customvision/v3.3/Training/{projectId}/iterations/{iterationId}/make-default
B.PUT /customvision/v3.3/Prediction/{projectId}/iterations/{iterationId}/activate
C.PATCH /customvision/v3.3/Training/{projectId}/projects/{projectId}
D.POST /customvision/v3.3/Training/{projectId}/iterations/{iterationId}/publish
AnswerD

This is the correct endpoint for publishing a training iteration.

Why this answer

Publishing an iteration in Custom Vision requires calling the publish iteration endpoint with the published name and prediction resource ID.

414
Multi-Selecthard

Your enterprise requires strict security and governance over your Azure AI Vision resources. Which THREE security configurations should you implement? (Choose three.)

Select 3 answers
A.Store API keys in plain text configuration files on public GitHub repositories.
B.Disable TLS encryption to improve API response latency.
C.Configure Azure Private Endpoints to restrict access to your Virtual Network.
D.Enable diagnostic logging and stream audit records to Log Analytics.
E.Implement Microsoft Entra ID role-based access control (RBAC) instead of relying solely on API keys.
AnswersC, D, E

Private endpoints keep traffic off the public internet.

Why this answer

Enterprise security for Azure AI Services includes Private Endpoints, disabling local authentication in favor of Microsoft Entra ID (RBAC), and Key Vault integration for secrets.

415
MCQmedium

You are configuring a Custom Vision project to classify images of plant diseases. You notice that some image files uploaded via the API are rejected because they exceed the maximum allowed file size. What is the maximum image file size supported by Custom Vision for training?

A.2 GB
B.500 KB
C.6 MB
D.50 MB
AnswerC

Custom Vision imposes a 6 MB limit per image for training data uploads.

Why this answer

Custom Vision training images uploaded via API or portal generally have a maximum file size limit of 6 MB per image.

416
MCQeasy

You are provisioning an Azure AI services account and want to ensure that all telemetry and monitoring metrics are collected. Which built-in monitoring feature is automatically enabled on Azure AI resources without requiring additional agent installation?

A.Azure Monitor platform metrics
B.Log Analytics Windows security agent
C.Application Insights SDK code instrumentation
D.Azure Diagnostics extension for Linux
AnswerA

Platform metrics (such as Total Calls, Latency, and Failed Requests) are collected automatically by Azure Monitor for PaaS resources.

Why this answer

Azure Monitor platform metrics are collected automatically for all Azure PaaS resources without installing agents.

417
MCQeasy

You are developing a mobile application that captures business card photos and extracts contact information. Which Azure AI Vision feature is specifically designed to extract printed and handwritten text lines and words?

A.Image Tagging
B.Dense Captions
C.Brand Detection
D.Read
AnswerD

The Read feature extracts text lines, words, bounding boxes, and confidence scores.

Why this answer

The Read feature is Azure AI Vision's optical character recognition (OCR) tool for extracting printed and handwritten text.

418
Multi-Selecthard

You are designing a secure, production-grade architecture for an Azure AI Search service integrated with Azure OpenAI. Which THREE security and operational best practices should you implement? Each correct answer presents part of the solution.

Select 3 answers
A.Publish administrative API keys publicly in GitHub repositories for easy developer access.
B.Configure Azure Monitor diagnostic settings to stream query performance and error logs to a Log Analytics workspace.
C.Use managed identities for secure authentication between Azure AI Search and Azure OpenAI without hardcoded keys.
D.Use the Free pricing tier for high-throughput production workloads.
E.Deploy Private Endpoints for both Azure AI Search and Azure OpenAI to keep data traffic within internal virtual networks.
AnswersB, C, E

Diagnostic logging provides visibility into query latency, errors, and performance bottlenecks.

Why this answer

Managed identities, private endpoints, and monitoring metrics are essential best practices.

419
MCQmedium

You are testing a Custom Vision object detection model using the test image feature in the portal. You notice that objects are detected with low confidence scores. You want to improve the model's performance without adding more training images. What can you adjust in the training settings?

A.Switch from object detection to multiclass classification.
B.Increase the training time budget in advanced training settings.
C.Decrease the image resolution setting in project properties.
D.Disable data augmentation.
AnswerB

Increasing the training time allows the underlying neural network more epochs to converge on complex patterns.

Why this answer

While training data is primary, training iterations allow selecting different training time budgets or domains, but adjusting the probability threshold in prediction evaluation helps filter results. However, re-training with advanced training time settings can improve model accuracy.

420
MCQmedium

Your enterprise team is deploying multiple Azure AI Custom Vision resources across different development stages (Dev, Test, Prod). You need to ensure that billing costs for the Dev environment are billed to a specific cost center. Which Azure feature should you use to categorize these costs?

A.Azure role-based access control (RBAC)
B.Azure resource tags
C.Azure Service Health alerts
D.Azure Firewall rules
AnswerB

Tags apply key-value metadata to resources, which can then be grouped and analyzed in Azure Cost Management.

Why this answer

Azure resource tags allow categorizing resources for cost allocation and management reporting.

421
MCQeasy

You need to retrieve coordinates of people detected in an image using Azure AI Vision 4.0. Which visual feature should you request?

A.features=objects
B.features=faces
C.features=people
D.features=tags
AnswerC

The people feature returns bounding box coordinates for humans in the image.

Why this answer

The 'people' visual feature detects people in the image and returns their bounding box coordinates.

422
MCQhard

You are configuring an Azure AI Document Intelligence orchestration model to automatically classify and extract data from incoming customer correspondence, which includes invoices, work orders, and purchase orders. One of the component models is failing to classify documents correctly. How should you resolve this issue?

A.Modify the orchestration model routing threshold in the Azure portal settings.
B.Switch the orchestration model from a template-based classifier to a neural classifier using the REST API.
C.Retrain the failing component custom model with more distinct sample documents that represent the specific document class.
D.Update the API version to bypass classification and force direct extraction via the general document model.
AnswerC

Improving the classification accuracy of an orchestration model requires improving the distinctiveness and quality of the underlying component custom models.

Why this answer

Orchestration models rely on component custom models. If classification fails, you must retrain or refine the specific component model with distinct training samples.

423
MCQhard

You are building an agentic workflow in Microsoft Foundry using Semantic Kernel. The agent needs to call an external enterprise API to retrieve customer billing data. The API requires OAuth 2.0 user-delegated tokens. How should you configure the plugin registration to securely pass the user context?

A.Configure the Semantic Kernel plugin using an OpenApiFunctionDefinition that accepts a dynamic context parameter mapped to the incoming authorization header.
B.Disable authentication on the external API and rely solely on network-level Azure VNet integration.
C.Store the user's password in Azure Key Vault and have the plugin retrieve it on every tool call.
D.Hardcode the service account client secret inside the plugin configuration settings.
AnswerA

Mapping the authorization header dynamically ensures user-delegated tokens are forwarded correctly.

Why this answer

User-delegated authentication in Semantic Kernel plugins requires leveraging the active turn context to propagate the user's OAuth 2.0 token through the kernel invocation pipeline.

424
Multi-Selecthard

You are designing a generative AI application in Azure AI Foundry that supports multi-turn conversations with memory. Which THREE components are required to properly maintain conversational state and context? (Choose THREE)

Select 3 answers
A.Thread or session state storage to persist message history across turns
B.Permanently deleting all messages after every single API turn
C.Setting temperature to 0.0 to erase all memory between calls
D.Message history appending logic in the prompt construction payload
E.Context window management strategy (such as summarization or truncation) to prevent token overflow
AnswersA, D, E

Threads store the ongoing conversation history so the model remembers prior turns.

Why this answer

Agent threads/session storage, message history management, and context window truncation or summarization strategies are required for multi-turn conversational memory.

425
Multi-Selecthard

You are designing a secure RAG retrieval pipeline in Azure AI Search. Which THREE indexing or search configurations are essential when handling confidential documents? (Choose THREE)

Select 3 answers
A.Encryption at rest using Customer-Managed Keys (CMK)
B.Private Endpoint connections to isolate search traffic within a Virtual Network
C.Disabling all authentication to allow open guest queries
D.Document-level security trimming using OData security filters
E.Storing unencrypted search indexes in public Azure blob containers
AnswersA, B, D

CMK ensures search indexes are encrypted with keys managed in Azure Key Vault.

Why this answer

Security trimming (filters), encrypted indexes, and restricted network access via private endpoints are essential for confidential RAG pipelines.

426
MCQeasy

Your team needs to extract data from a large volume of standardized tax forms using Azure AI Document Intelligence. The forms have a fixed layout where fields are always in the exact same location. Which model type provides the fastest training and highest accuracy for this specific use case?

A.Custom template model
B.Prebuilt receipt model
C.Custom neural model
D.General document model
AnswerA

Custom template models excel at extracting data from forms with consistent, fixed layouts.

Why this answer

Custom template models are optimized for forms with consistent visual structures and fixed layouts, requiring fewer training documents and providing high accuracy.

427
MCQeasy

What is the purpose of 'Batch Inference' in Azure AI Foundry?

A.To create a backup of the agent.
B.To test the agent in real-time.
C.To debug individual chat turns.
D.To run multiple prompts against a large dataset for evaluation.
AnswerD

Batch inference is ideal for large-scale evaluation and processing.

Why this answer

Batch inference allows you to process large volumes of data offline, which is more cost-effective and efficient than real-time requests.

428
MCQhard

You are monitoring the performance of a deployed Azure OpenAI model. You notice occasional HTTP 429 (Too Many Requests) errors occurring during peak traffic hours. Which monitoring and management action should you take to resolve this issue?

A.Configure Azure Monitor metric alerts for 'Token Generation Rate' and scale up your provisioned throughput deployment capacity.
B.Disable content safety filters to reduce processing latency and throughput overhead.
C.Rotate the primary API key immediately to clear the server-side connection cache.
D.Update the Network Security Group rules to increase the maximum allowed packet size for the API endpoint.
AnswerA

HTTP 429 errors are rate-limit violations best addressed by monitoring usage metrics and increasing provisioned throughput.

Why this answer

HTTP 429 errors indicate that you have exceeded the rate limits (Tokens Per Minute or Requests Per Minute) of your provisioned tier. Upgrading to a Provisioned Throughput deployment or implementing exponential backoff retry logic resolves rate-limiting errors.

429
Multi-Selecthard

Which THREE of the following are components of a standard Prompt Flow DAG (Directed Acyclic Graph)?

Select 3 answers
A.Inputs
B.Outputs
C.Model Training Jobs
D.Tools
E.Data Labeling Projects
AnswersA, B, D

Flows require input definitions.

Why this answer

Inputs, Tools (Nodes), and Outputs are fundamental to Prompt Flow structure.

430
Multi-Selectmedium

When planning an Azure AI solution deployment strategy, what are THREE key considerations for model versioning and lifecycle management? (Choose three.)

Select 3 answers
A.Implementing automated regression testing in CI/CD pipelines when upgrading model versions.
B.Reviewing the deprecation and retirement schedule published by Microsoft for specific model versions.
C.Deleting older model versions immediately upon release of a new version to save cloud storage costs.
D.Hardcoding the latest model version string into production code without version specifiers.
E.Establishing a rollback plan in case a newer model version exhibits unexpected behavior.
AnswersA, B, E

Regression testing ensures that new model versions do not negatively impact application outputs.

Why this answer

Model updates require planning around version deprecation notices, validating output consistency, and testing rollback strategies. Relying on auto-updates without testing can break downstream integrations.

431
Multi-Selecthard

You are troubleshooting a low confidence score on specific fields extracted by your Azure AI Document Intelligence custom template model. Which TWO actions can help improve the extraction confidence for those fields? (Choose TWO)

Select 2 answers
A.Increase the confidence threshold parameter in the analyzeDocument request body to 0.99.
B.Convert all training PDFs to grayscale and reduce their resolution to 72 DPI to speed up processing.
C.Ensure all training documents are of high visual quality and free from blur or heavy skew.
D.Add more diverse training documents that represent variations in the document layout where the low-confidence fields appear.
E.Switch the model type from custom template to a prebuilt business card model.
AnswersC, D

High-quality training images improve OCR accuracy and subsequent field extraction confidence.

Why this answer

Improving training quality through diverse, high-quality samples and accurate labeling improves confidence scores.

432
MCQmedium

You are deploying a custom model to an Azure AI managed endpoint. You need to ensure the deployment can access a Key Vault secret without storing credentials in the deployment configuration. What should you do?

A.Enable public access on the Key Vault and use an IP firewall rule.
B.Inject the secret directly into the environment variables during deployment.
C.Configure a System-assigned identity on the endpoint and grant it Key Vault Reader access.
D.Assign a User-assigned managed identity to the endpoint and grant it Key Vault Secrets User access.
AnswerD

Managed identities allow Azure resources to authenticate to Key Vault without storing secrets.

Why this answer

Using a User-assigned managed identity allows the endpoint to authenticate to other Azure services like Key Vault securely.

433
MCQeasy

You are deploying an LLM in Azure AI Foundry and need to monitor for toxicity and jailbreak attempts in real-time. Which feature should you enable?

A.Azure AI Content Safety
B.Azure Policy
C.Microsoft Purview Compliance Manager
D.Azure Monitor Log Analytics
AnswerA

Content Safety provides built-in filters for jailbreak and toxicity detection.

Why this answer

Azure AI Content Safety is the integrated service for monitoring model inputs and outputs for harmful content.

434
MCQhard

You have an Azure AI endpoint exposed to the internet. You want to ensure traffic is inspected for malicious patterns. What is the recommended service?

A.Network Security Group (NSG) rules.
B.Azure Web Application Firewall (WAF).
C.Azure Bastion.
D.Azure AI Content Safety.
AnswerB

WAF inspects incoming web traffic to block malicious attacks.

Why this answer

Azure Web Application Firewall (WAF) provides protection against common web vulnerabilities like SQL injection and cross-site scripting.

435
MCQmedium

When setting up an Azure AI service, you choose the 'Standard' tier. What is the primary benefit of this compared to the 'Free' tier?

A.Lower latency for all requests.
B.Access to experimental AI models.
C.Higher rate limits and production-level SLAs.
D.Automatic data encryption.
AnswerC

Standard tier is designed for production with higher limits and availability guarantees.

Why this answer

Standard tiers provide higher capacity, production-level SLAs, and support for enterprise-grade features.

436
MCQhard

You are orchestrating a multi-agent system in Microsoft Foundry where Agent A generates code and Agent B reviews it. Agent B frequently gets stuck in a loop trying to optimize minor syntax formatting. How should you design the agentic workflow to prevent this infinite refinement loop?

A.Disable function calling for Agent B so it can only output text responses.
B.Configure a maximum turn counter and state transition condition in the orchestrator workflow to terminate the loop after a set threshold.
C.Increase the model's presence penalty so Agent B is forced to generate novel review comments.
D.Use a smaller model for Agent B to reduce the quality of its reviews.
AnswerB

Explicit termination conditions and state management are essential pattern controls in multi-agent orchestration.

Why this answer

Establishing a strict iteration limit or state machine check within the orchestrator prevents agents from looping indefinitely.

437
MCQhard

Your organization requires that all Azure AI Vision API calls are audited and that request payloads (including images) are logged for compliance investigations. Which Azure service feature should you configure alongside Azure AI Services?

A.Enable Diagnostic Settings on the Azure AI Services resource to stream audit logs and telemetry to Azure Monitor Log Analytics.
B.Configure Custom Vision training iterations export.
C.Enable Azure Bastion session recording.
D.Configure Azure Traffic Manager with logging rules.
AnswerA

Diagnostic settings capture service logs, metrics, and audit information for security and compliance monitoring.

Why this answer

Azure Diagnostic Settings allow logging API requests, metrics, and audit trails to Azure Monitor, Log Analytics, or Azure Storage.

438
MCQmedium

You are integrating Azure AI Vision Read API into a high-throughput workflow. You receive an HTTP 202 Accepted response. What action should your application take next?

A.Poll the URL specified in the Operation-Location response header until the status is succeeded.
B.Switch to synchronous Read API endpoint.
C.Parse the response body directly for the extracted text results.
D.Immediately retry the POST request with an increased timeout value.
AnswerA

Asynchronous OCR operations require polling the Operation-Location endpoint.

Why this answer

An HTTP 202 response indicates the asynchronous operation has started. The application must poll the URL provided in the Operation-Location header.

439
Multi-Selecthard

You are configuring custom named entity recognition in Language Studio. Which TWO types of entity components can you configure when defining custom entities? (Choose two.)

Select 2 answers
A.Quantum computation component
B.Regex component
C.Neural speech synthesis component
D.Learned component
E.Optical character recognition component
AnswersB, D

Regex components allow pattern-based entity extraction.

Why this answer

Custom NER projects support Learned entity components (trained from labeled data) and Regex or List components for exact pattern or dictionary matching.

440
MCQmedium

You are evaluating an agentic workflow in Azure AI Foundry that performs multi-step reasoning. The agent occasionally enters an infinite loop, repeatedly calling the same tool with identical arguments. Which architectural pattern or configuration should you apply to prevent this behavior?

A.Increase the vector store chunk overlap size
B.Configure a maximum iteration step limit in the agent orchestration loop
C.Enable Azure API Management caching for the tool endpoint
D.Set the model frequency penalty to 2.0
AnswerB

Setting a max iteration threshold halts execution if the agent exceeds expected reasoning steps, preventing infinite loops.

Why this answer

Implementing agent execution limits, such as maximum iteration counters or step limits within the orchestration loop, prevents agents from falling into infinite tool-calling loops.

441
MCQhard

You are optimizing performance for a real-time video analytics pipeline that sends video frames to Azure AI Vision. Due to network bandwidth constraints, you need to reduce payload sizes while maintaining high OCR accuracy. What is the recommended approach?

A.Encode frames as optimized JPEG images with appropriate resolution scaling, ensuring text remains legible.
B.Convert frames to uncompressed 32-bit BMP format.
C.Extract audio tracks instead of video frames.
D.Send raw YUV byte arrays directly without image containerization.
AnswerA

Optimized JPEG encoding and careful resolution scaling reduce payload bandwidth while preserving text fidelity.

Why this answer

Compressing frames as high-quality JPEGs or WebP images and resizing them to fit optimal dimension thresholds without excessive downsampling preserves OCR accuracy while drastically reducing payload size.

442
MCQmedium

You are implementing a multi-turn conversational agent in Azure AI Foundry. As the conversation grows longer, API latency and costs increase significantly. Which strategy should you implement to manage the conversation history effectively?

A.Increase max_tokens to accommodate infinite history growth.
B.Implement a sliding window history buffer combined with periodic summarization of older dialogue turns.
C.Disable the chat history array entirely and treat every turn as a standalone prompt.
D.Truncate the entire conversation history after every single user turn.
AnswerB

Summarizing historical turns preserves context while drastically reducing token consumption.

Why this answer

Summarizing older conversation turns or maintaining a sliding window of recent messages keeps token counts manageable.

443
MCQeasy

Which Azure AI service should you use if you need to train a model to recognize your company's proprietary product packaging using custom-labeled images with minimal machine learning expertise?

A.Azure AI Vision Prebuilt API
B.Azure AI Custom Vision
C.Azure Machine Learning Automated ML
D.Azure AI Document Intelligence
AnswerB

Custom Vision is designed for training custom image classifiers and object detectors with user-provided images.

Why this answer

Custom Vision allows users to train custom image classifiers and object detectors using a web portal with no ML expertise required.

444
Multi-Selecthard

You are designing an enterprise RAG solution using Azure AI Search and Azure OpenAI. You need to ensure data security and compliance across different user permission tiers. Which TWO actions should you implement? (Choose two.)

Select 2 answers
A.Ensure all data transfers between Azure AI Search and Azure OpenAI utilize TLS 1.2 or higher.
B.Configure security filters (document-level access control) in Azure AI Search matching user group memberships.
C.Store unencrypted user authentication tokens directly inside the embedding vector metadata.
D.Grant every user application admin privileges to bypass retrieval latency checks.
E.Disable managed identities and store plaintext connection strings in the application source code.
AnswersA, B

Encryption in transit is a core security requirement for enterprise compliance.

Why this answer

Security trimming in Azure AI Search ensures users only retrieve documents they have access to, and encrypted connections protect data in transit.

445
MCQmedium

You need to restrict access to an Azure AI Custom Vision training resource so that only members of a specific Azure AD security group can manage projects and train models. How should you configure access control?

A.Configure IP firewall rules on the networking blade.
B.Assign the Cognitive Services Contributor role to the Azure AD security group at the resource scope.
C.Enable managed identity on the resource and assign it to the security group.
D.Generate and distribute secondary API keys to group members.
AnswerB

Assigning RBAC roles to security groups grants the precise permissions needed for resource management.

Why this answer

Role-Based Access Control (RBAC) allows assigning built-in or custom roles like Cognitive Services Contributor to specific Azure AD security groups at the resource scope.

446
MCQmedium

You are building a custom text classification solution using Azure AI Language in Language Studio. You have a dataset where each document can belong to multiple categories simultaneously (e.g., a news article can be tagged as both 'Technology' and 'Finance'). What classification type should you configure?

A.Custom named entity recognition
B.Multi-label classification
C.Single-label classification
D.Extractive summarization
AnswerB

Multi-label classification is designed for scenarios where a single document can be assigned multiple overlapping categories.

Why this answer

Multi-label classification allows a document to be associated with zero, one, or multiple classes simultaneously, whereas single-label classification restricts each document to exactly one class.

447
MCQmedium

You are testing a Custom Vision model via the REST API. You receive an HTTP 400 Bad Request error with the message 'InvalidProjectId'. What is the most likely cause?

A.The image file format is invalid.
B.The project ID GUID in the request URL is incorrect or does not exist in this Custom Vision account.
C.The subscription has reached its monthly quota limit.
D.The prediction key header was omitted.
AnswerB

An invalid project ID returns a 400 Bad Request indicating the project cannot be found.

Why this answer

The project ID GUID provided in the URL path is malformed, does not exist, or belongs to a different region/resource.

448
MCQeasy

Which HTTP status code does the Azure AI Vision Read API return upon successfully initiating an asynchronous OCR analysis job?

A.204 No Content
B.200 OK
C.202 Accepted
D.201 Created
AnswerC

HTTP 202 is returned for accepted asynchronous long-running operations.

Why this answer

Asynchronous operations in Azure AI Services return HTTP 202 Accepted when the request has been accepted for processing.

449
Multi-Selecthard

You are implementing responsible AI practices in Azure AI Foundry for a public-facing chatbot. Which THREE safety evaluations or controls should you implement to protect users and the organization? (Choose THREE)

Select 3 answers
A.Protected material detection for source code and text copyright verification
B.Azure SQL database transparent data encryption (TDE)
C.Azure DDoS network layer volumetric scrubbing
D.Content Safety filters for hate speech, sexual, violence, and self-harm categories
E.Prompt shields to detect direct and indirect prompt injection attacks
AnswersA, D, E

Protected material detection identifies if the model generates copyrighted text or source code verbatim.

Why this answer

Protected material detection, content safety filtering for harmful categories, and jailbreak/prompt shielding defenses are core responsible AI controls in Azure AI.

450
Multi-Selecthard

You are troubleshooting a multi-agent workflow in Azure AI Foundry where an agent fails to invoke an external API tool correctly. Which THREE debugging steps should you perform? (Choose THREE)

Select 3 answers
A.Test network connectivity and authentication credentials between the agent service and the external API endpoint
B.Restart the client web browser session
C.Inspect the model's generated tool call arguments against the expected JSON Schema definition
D.Review the tool definition schema provided to the model for accurate descriptions and parameter types
E.Increase the Azure DNS TTL value for domain resolution
AnswersA, C, D

Verifying connectivity and auth ensures network blocks or expired credentials are not failing the call.

Why this answer

Inspecting tool definition JSON schemas, reviewing model output tool call arguments, and verifying API endpoint connectivity are key troubleshooting steps.

Page 5

Page 6 of 7

Page 7

All pages