507 questions total · 7pages · All types, answers revealed
Page 1 of 7
Page 2You need to store custom AI container images in a private registry hosted within Azure. Which Azure service provides a managed Docker registry service?
ACR allows you to build, store, and manage container images and artifacts.
Why this answer
Azure Container Registry (ACR) is the managed Docker registry service in Azure used for storing and managing container images.
You are configuring a vector profile in Azure AI Search. Which three elements must be correctly linked together to define a complete vector search configuration?
A vector profile links an algorithm configuration, a vectorizer, and a field to establish how vector search operates.
Why this answer
In Azure AI Search, a vector profile requires linking an algorithm configuration (such as HNSW parameters), a vectorizer (specifying how embeddings are created or stored), and a field mapping.
You have an AI model container that is frequently crashing due to OOM (Out of Memory) errors. How do you identify the actual memory usage compared to the limits?
Azure Monitor for Containers allows tracking of memory usage trends.
Why this answer
Azure Monitor or Prometheus/Grafana integration provides the metrics needed to compare usage against defined limits.
dotproduct calculates the inner product of two vectors.
You are deploying an AI workload to AKS and want to ensure that pods belonging to your application are distributed across different fault domains (availability zones) for high availability. Which Kubernetes feature should you configure?
Topology spread constraints ensure high availability by distributing pods across availability zones.
Why this answer
Topology spread constraints allow you to configure how pods are spread across failure domains such as regions, zones, or nodes.
You are troubleshooting a containerized Python application in an Azure Container App that fails to respond to incoming HTTP requests. Which TWO diagnostic tools or features can you use within Azure Container Apps to investigate the issue? (Choose two.)
The Azure portal provides a console connection tool to execute commands inside a running container replica.
Why this answer
Azure Container Apps provides log streaming (via Azure Monitor/Log Analytics) and a built-in console for interactive troubleshooting of container instances.
You are evaluating data layer architectures for an enterprise AI application that requires both vector search and structured transactional data management. Which THREE criteria favor choosing Azure Cosmos DB over Azure AI Search as the primary database? (Choose three)
Cosmos DB is designed for low-latency operational CRUD workloads.
Why this answer
Azure Cosmos DB is preferred when you need ACID transactions, low-latency point reads/writes on transactional records, and native NoSQL document storage alongside vector search.
You are troubleshooting a scenario where an Azure App Service hosting an AI frontend cannot communicate with an Azure OpenAI endpoint secured by a private endpoint in a different virtual network. Which THREE of the following networking configurations should you verify? (Choose three)
Correct. VNets must be peered so traffic can flow between the client app and the private endpoint.
Why this answer
Virtual network peering, private DNS zone integration, and App Service VNet integration must be correctly configured for private endpoint communication across VNets.
You need to review the security recommendations provided by Microsoft for your Azure AI resources, such as enabling HTTPS-only traffic and configuring managed identities. Which Azure tool provides these prioritized security recommendations and a security score?
Correct. Defender for Cloud assesses security posture and provides actionable recommendations and secure scores.
Why this answer
Microsoft Defender for Cloud provides continuous security assessments, recommendations, and a secure score across Azure resources.
You are managing an Azure Service Bus Premium namespace. Your application requires strict transactional messaging where a worker receives a message from Queue A, processes it, and sends a resulting message to Queue B. If any step fails, both actions must be rolled back. How should you implement this?
TransactionScope coordinates ambient transactions across Service Bus entities within the same Premium namespace.
Why this answer
Using .NET TransactionScope with Service Bus allows receiving from Queue A and sending to Queue B within a single atomic transaction.
Your team is implementing hybrid search in Azure AI Search combining full-text keyword search and vector search. Users report that certain exact product serial numbers are missing from the semantic ranking results. Which query parameter should you adjust to balance the influence of BM25 text search scores against vector cosine similarity scores?
Adding a semantic configuration with designated title, content, and keyword fields ensures that exact alphanumeric serial numbers are correctly captured via secondary lexical boosting and reranked properly.
Why this answer
When performing hybrid queries in Azure AI Search, the search engine uses Reciprocal Rank Fusion (RRF) to combine results from text and vector searches. You can influence the weighting or use standard RRF parameters, but adjusting semantic ranking configurations or ensuring proper semantic configuration boosts can address relevance blending. Specifically, adjusting query parameters like semantic configuration or custom scoring profiles allows fine-tuning.
You are building an order processing system with Azure Service Bus. Multiple clients might accidentally submit the exact same order twice within a 60-second window due to network retries. You need to prevent duplicate orders from entering the queue. What should you configure?
Duplicate detection uses the MessageID to automatically discard messages with identical IDs sent within the specified time window.
Why this answer
Azure Service Bus provides Duplicate Detection. When enabled, the broker inspects the MessageId property of incoming messages within a configurable time window (DuplicateDetectionHistoryTimeWindow) and drops duplicates.
Your application uses Azure Service Bus Queues. A spike in traffic causes multiple worker instances to contend for messages. You want to ensure that when a worker locks a message, no other worker can process it, and the lock is automatically renewed in the background if processing takes longer than expected. Which client library feature should you use?
Auto-lock renewal background tasks keep extending the lock duration automatically until message processing completes.
Why this answer
Modern Azure Service Bus SDKs include an auto-lock renewal feature (e.g., `MaxAutoLockRenewalDuration` in .NET) that automatically extends the message lock while the handler is executing.
You are migrating a large vector dataset into an Azure AI Search index. To maximize ingestion speed and throughput, you temporarily adjust index settings. Which index configuration property should you modify during bulk ingestion?
Scaling out search units increases indexing throughput for massive bulk uploads.
Why this answer
During heavy bulk ingestion, increasing the replica and partition count or adjusting merge/indexing batch sizes improves speed, but specifically, scaling out search units or temporarily disabling semantic ranker overhead optimizes throughput.
You are troubleshooting slow inference latency in an AI application deployed on AKS. You suspect that network packets between inference pods are traversing unnecessary hops due to overlay routing. Which CNI mode should you have chosen for optimal direct routing?
Azure CNI allocates VNet IPs directly to pods, providing optimal networking performance.
Why this answer
Azure CNI without overlay assigns VNet IP addresses directly to pods, eliminating encapsulation overhead and improving networking performance for high-throughput AI workloads.
You have an AI workload that requires persistent storage for large model checkpoints. Which storage type should you mount to an AKS pod for optimal performance?
Premium SSDs provide the low latency and high IOPS needed for checkpoints.
Why this answer
Azure Disk storage is generally preferred for high-throughput I/O needed by AI checkpoints.
You are troubleshooting an AI application where users experience intermittent authentication failures when the application attempts to acquire tokens from Azure Active Directory for calling Cognitive Services. You want to inspect the exact HTTP status codes and error descriptions returned during token acquisition. Which namespace or log table should you analyze in Log Analytics?
Correct. Identity and token acquisition failures are logged in Azure AD sign-in logs and diagnostic logs for managed identities.
Why this answer
Azure Active Directory sign-in logs and MSI (Managed Service Identity) token acquisition telemetry captured via Azure Monitor diagnostic settings (SignInLogs or AzureDiagnostics) record token acquisition attempts and failures.
Your team is building an analytics pipeline where IoT telemetry data is ingested via Azure Event Hubs and needs to be continuously archived in Parquet format to an Azure Data Lake Storage Gen2 account for AI model training. Which built-in feature of Event Hubs should you enable?
Event Hubs Capture automatically packages streaming telemetry into storage blobs without requiring custom worker code.
Why this answer
Event Hubs Capture allows you to automatically capture streaming data in Event Hubs and save it to an Azure Blob Storage or Azure Data Lake Storage Gen2 account in Avro or Parquet format.
Your application publishes custom events to Azure Event Grid using the CloudEvents 1.0 schema format. Which required attribute must be present in every CloudEvents JSON payload to ensure valid delivery?
The CloudEvents 1.0 specification requires specversion, id, source, and type attributes for schema compliance.
Why this answer
CloudEvents specification mandates attributes such as `specversion`, `type`, `source`, and `id` for every valid event.
You are configuring continuous deployment for an AI model container. Whenever a data scientist pushes code to a GitHub repository, you want Azure Container Registry to automatically build and tag the new container image without managing an external CI/CD build agent. What should you use?
ACR Tasks can build container images natively in Azure upon commits to GitHub repositories.
Why this answer
ACR Tasks is a cloud-native build service that builds container images on Azure without requiring a separate CI/CD infrastructure.
You are configuring network security for an Azure Machine Learning workspace. Compute instances must be accessible via Jupyter Lab, but no public IP addresses can be associated with the compute instances. Which configuration is required?
No public IP compute instances rely on private endpoints and outbound rules to prevent data exfiltration while allowing secure access.
Why this answer
Azure Machine Learning compute instances can be created with 'No Public IP' enabled, and administrators use Azure Bastion or workspace private endpoints to access them securely.
Your Azure AI application sends requests to multiple cognitive services. You need to route diagnostic logs and metrics from your Azure OpenAI and Azure AI Language services to a centralized Log Analytics workspace across different resource groups. What is the recommended way to configure this?
Correct. Diagnostic settings are applied per resource to forward logs and metrics to a designated workspace.
Why this answer
Diagnostic settings in Azure Monitor allow you to route platform logs and metrics to a Log Analytics workspace, Event Hubs, or Azure Storage account.
You are troubleshooting slow query performance in an enterprise Azure AI Search vector deployment. Which THREE architectural or configuration adjustments can improve query throughput and latency? Choose three.
Adding replicas increases query throughput (QPS) capacity.
Why this answer
To improve vector search performance in Azure AI Search, practitioners can scale out replicas, tune HNSW efSearch parameters, and leverage batching or appropriate tier sizing.
You are scaling an AI workload in Azure Container Apps. Which TWO scale rule triggers are natively supported without custom KEDA extensions?
HTTP scaling scales based on simultaneous web requests.
Why this answer
Azure Container Apps natively supports scaling based on HTTP requests, CPU, memory, and Azure Service Bus without manual KEDA manifest configuration.
Your enterprise application uses Azure Service Bus Topics to broadcast AI model inference updates to multiple microservices. One particular subscriber requires filtering messages so it only receives updates where the 'ModelVersion' property is equal to 'v2' and the 'ConfidenceScore' is greater than 0.85. How should you implement this?
SQL filters provide powerful boolean expressions based on message properties and system properties for Service Bus subscriptions.
Why this answer
You should create a SQL filter on the Service Bus subscription with an expression like ModelVersion = 'v2' AND ConfidenceScore > 0.85.
You are troubleshooting a slow vector query performance issue in Azure Cosmos DB for NoSQL. Which THREE actions can you take to improve vector search execution times? (Choose three)
diskANN provides fast approximate nearest neighbor search compared to scanning flat indexes.
Why this answer
Improving vector search performance in Cosmos DB involves selecting efficient index types like diskANN, tuning query parameters, and ensuring proper logical partitioning.
You are configuring an Azure Service Bus Topic and Subscriptions for an AI text classification system. Which THREE filter types are supported on Service Bus subscriptions for routing messages? Each correct answer represents a valid filter type.
Boolean filters either select all messages or none.
Why this answer
Azure Service Bus supports Correlation Filters, SQL Filters, and Boolean Filters (TrueFilter/FalseFilter) on subscriptions.
You are implementing a robust data layer architecture for an enterprise generative AI application. Which THREE factors should you evaluate when deciding between Azure AI Search and Azure Cosmos DB for vector search? (Choose three)
Cosmos DB provides turnkey multi-region replication with tunable consistency levels.
Why this answer
When choosing between Azure AI Search and Cosmos DB for vector search, factors such as full-text search capabilities, transactional operational database needs, and scaling requirements are critical.
Which Azure feature allows you to set up a private, internal-only container registry?
Private Link secures access to the registry within your private network.
Why this answer
Private Link allows you to access ACR over a private IP address from your VNET.
You are troubleshooting intermittent network timeout errors between microservices in an AKS cluster running an AI pipeline. You suspect that network policies are blocking required inter-pod communication. Which CNI plugin must be configured in AKS to enforce these network policies?
Azure CNI supports network policies (either Azure's native implementation or Calico) to restrict pod traffic.
Why this answer
Azure CNI with Azure Network Policies or Calico network policies must be enabled in AKS to enforce namespace and pod-level traffic rules.
You are configuring vector search in Azure Cosmos DB for NoSQL. You want to ensure that vectors are indexed using the DiskANN algorithm for high recall and fast search performance. Which index type should you specify in the vector embedding policy?
diskANN is supported in Azure Cosmos DB for efficient vector indexing and search.
Why this answer
Azure Cosmos DB for NoSQL supports DiskANN as a high-performance vector indexing type alongside quantized flat indexes.
You are designing an event-driven architecture that needs to integrate multiple Azure services. Which THREE statements accurately describe the ideal use cases for Azure Event Grid, Azure Service Bus, and Azure Event Hubs respectively? (Choose three)
Event Hubs ingests millions of events per second for analytics and AI pipelines.
Why this answer
Event Grid is for reactive event notification (pub/sub), Service Bus is for transactional enterprise messaging (queues/topics), and Event Hubs is for big data stream ingestion.
You are troubleshooting an AI inference container deployed in Azure Container Apps that is failing health probes. Which TWO diagnostic tools or logs can you examine in the Azure portal to investigate the failure?
Log stream provides real-time stdout and stderr output from the container.
Why this answer
Azure Container Apps provides built-in log streaming, console access, and diagnostic metrics to troubleshoot container startup and health probe failures.
Your team is building a real-time speech transcription pipeline using Azure Event Hubs. Due to intermittent network drops, client applications need to be able to send messages with a scheduled delivery time so they are processed later. Which Azure messaging service supports scheduled message delivery natively?
Service Bus supports scheduling messages for delayed delivery out-of-the-box.
Why this answer
Azure Service Bus natively supports scheduling messages to be delivered at a specific future time using `ScheduleMessageAsync`.
Your enterprise requires that all container images deployed to Azure Kubernetes Service (AKS) must originate from approved corporate Azure Container Registries (ACRs). How can you enforce this restriction cluster-wide?
Azure Policy for Kubernetes enforces admission control rules that block deployment of images from unapproved registries.
Why this answer
Azure Policy for Kubernetes uses Gatekeeper v3 to audit or enforce cluster behaviors, such as restricting image registries.
You are using Application Insights to monitor a Retrieval-Augmented Generation (RAG) application. You need to log custom dimensions such as prompt token counts and user IDs alongside standard telemetry. Which class should you use in your C# application?
TelemetryClient.TrackEvent allows passing custom key-value pairs for rich analysis in Kusto queries.
Why this answer
The TelemetryClient class allows developers to track custom events, metrics, and traces with custom properties (dimensions).
Normalized Token Utilization tracks rate limit usage and shows when deployment token caps are reached, resulting in 429 errors.
Why this answer
Normalized Token Utilization measures the percentage of token limits consumed against your provisioned or pay-as-you-go capacity.
You are managing an Azure Cosmos DB for NoSQL database containing vector embeddings. You need to perform a migration of embeddings from one container to another without taking the application offline. Which Azure feature should you use?
The change feed allows reading inserts and updates to migrate data live without downtime.
Why this answer
The Azure Cosmos DB change feed streams changes to containers in real time, enabling zero-downtime data migration and synchronization.
You are using Azure Container Apps. You need to deploy a new version of your AI model without downtime. Which deployment strategy should you configure?
Traffic splitting allows you to shift traffic gradually to the new version.
Why this answer
Blue-Green or Canary deployments in ACA allow traffic shifting between revisions without downtime.
You need to ensure that your vector data in Azure AI Search is protected at rest. Which setting should you verify?
CMKs are the standard method for ensuring encryption at rest for Azure AI Search.
Why this answer
Azure AI Search uses Azure Storage for data, and encryption at rest is managed via Customer-Managed Keys (CMK) configured at the search service level.
You are designing a disaster recovery strategy for an Azure Event Hubs namespace. You configure Geo-Disaster Recovery pairing between a primary region (East US) and a secondary region (West US). During a disaster drill, you trigger a failover. What happens to the DNS alias pointing to the Event Hubs namespace?
The Geo-DR alias abstracts the underlying namespace endpoints, ensuring seamless failover redirection.
Why this answer
When Geo-DR failover is invoked, the DNS alias is repointed from the primary namespace to the secondary namespace automatically, ensuring client connection strings referencing the alias continue working.
You have an Azure Container Registry and an Azure Kubernetes Service cluster in different Azure regions. You want to ensure that AKS nodes pull container images from a local regional endpoint to minimize latency and cross-region data transfer fees. What feature should you configure on ACR?
Geo-replication replicates container registries across multiple regions for low-latency, local pulls.
Why this answer
ACR Geo-replication allows a single registry to be replicated across multiple Azure regions, providing local container image pulls.
You are writing a Python application that sends telemetry data to an Azure Event Hub. To ensure high performance and non-blocking batch sends, which method from the `azure-eventhub` SDK should you use?
create_batch ensures events fit within the size limit, and send_batch transmits the batch efficiently.
Why this answer
The `EventHubProducerClient` provides `create_batch()` to construct a batch object, and `send_batch()` to send it asynchronously or synchronously.
You need to secure access to an Azure AI Search service so that a Python web app running on Azure App Service can query indices without embedding API keys in configuration files. What is the most secure authentication mechanism to configure?
Correct. Managed identities combined with Azure RBAC eliminate stored credentials and adhere to the principle of least privilege.
Why this answer
Azure RBAC using managed identities allows the App Service to authenticate to Azure AI Search securely via Azure Active Directory tokens without using admin API keys.
When configuring vector search in Azure AI Search, which TWO components are required to successfully define and execute a vector search query? (Choose two)
The search request must supply the vector query embedding and target field name.
Why this answer
Executing a vector search query requires a vector-typed field in the index and a query request specifying the vector query vector values and target field.
When designing an Azure AI Search index schema, which TWO properties must be defined for every field in the index? (Choose two)
The field name is mandatory.
Why this answer
Every field in an Azure AI Search index definition must have a name and a type (Edm data type).
You are designing a secure enterprise event-driven architecture. Events published to an Azure Event Grid Domain must be partitioned based on a tenant ID. How should publishers send events to the Event Grid Domain to ensure proper routing to domain topics?
Event Grid Domains allow single-endpoint publishing where the event specifies the target domain topic.
Why this answer
When publishing to an Event Grid Domain, publishers include the domain topic name in the event metadata (or path for custom schemas), which Event Grid uses to route the event to the correct topic.
Your organization uses Azure Service Bus Queues. A downstream processing service is undergoing maintenance and will be offline for 4 hours. You want to temporarily pause message processing without losing messages or triggering dead-letter timeouts. What is the recommended approach?
Wait, Service Bus queues have entity status settings (Active, Disabled, SendDisabled, ReceiveDisabled). Setting EntityStatus to ReceiveDisabled pauses consumption while allowing producers to keep sending.
Why this answer
If workers are simply stopped, messages remain safely in the queue locked or unlocked depending on whether receivers are polling. Stopping the consumer application effectively pauses processing while the broker securely stores the messages.
When designing an Azure AI Search solution, you need to store high-dimensional embeddings. Which field type must be used to store these vector representations correctly?
This is the required data type for storing vector embeddings in Azure AI Search indexes.
Why this answer
In Azure AI Search, vector embeddings must be defined using the 'Collection(Edm.Single)' field type.
An AI pipeline uses Azure Service Bus Queues. You want to inspect the number of messages currently residing in a queue waiting to be processed without actually receiving or locking them. Which Azure Portal section or metric should you check?
The queue overview displays active, dead-letter, and scheduled message counts in real-time.
Why this answer
You can inspect active message counts, dead-letter message counts, and scheduled message counts directly on the Service Bus Queue overview blade in the Azure Portal.
You need to configure network security for an Azure Container Apps environment that hosts an internal AI scoring API. The API must only be reachable from a specific Azure Virtual Network (VNet) and blocked from public internet access. How should you configure the environment?
An internal-only Container Apps environment assigns a private virtual network IP for ingress, blocking public access.
Why this answer
Deploying Azure Container Apps with an internal Load Balancer (ILB) restricts ingress to a private IP within an integrated Virtual Network.
You are planning a data layer architecture for an AI application on Azure that requires both relational transactional storage and vector search capabilities. Which TWO Azure database services natively support vector data types and similarity search functions? Choose two.
Azure SQL Database supports native VECTOR data types and vector distance functions.
Why this answer
Azure SQL Database and Azure Cosmos DB (both NoSQL and MongoDB vCore APIs) natively support vector data storage and vector search functions.
You need to deploy a containerized AI model to Azure Container Apps and configure it to scale based on Azure Service Bus queue messages. Which scaler should you specify?
The azure-service-bus scale rule monitors queue length to scale container replicas.
Why this answer
Azure Container Apps supports KEDA scalers natively, including the azure-service-bus scaler.
You are designing a secure data layer architecture for financial documents using Azure Cosmos DB for NoSQL and Azure AI Search. Which THREE compliance and security controls should you implement? (Choose three)
Audit logging tracks access and administrative activities for compliance.
Why this answer
Enterprise compliance and security controls include configuring customer-managed keys, enabling diagnostic logging for auditing, and enforcing private endpoint networking.
You are troubleshooting an Azure Event Grid subscription where events published to a custom topic are failing to reach an Azure Storage Queue destination. Dead-lettering is enabled on the subscription, and failed events are appearing in the storage account container. Upon inspecting the dead-lettered events, you notice the error indicates an unauthorized access response. What is the most likely root cause and remediation?
Event Grid must be granted proper RBAC permissions (such as Storage Queue Data Contributor) via its managed identity to push messages to a storage queue.
Why this answer
Event Grid requires explicit Managed Identity or SAS token permissions configured on the Event Grid subscription to deliver events to secured endpoints like Storage Queues.
Which Azure AI Search metric or tool helps administrators monitor query volume, latency, and throttling rates across search units?
Azure Monitor tracks search service latency, query rates, and throttling metrics.
Why this answer
Azure Monitor and Log Analytics provide comprehensive telemetry, metrics, and logs for monitoring Azure AI Search performance.
When configuring vector search in Azure Cosmos DB for NoSQL, which TWO data types are valid for storing vector embeddings within the vector embedding policy? (Choose two)
float32 is the standard 32-bit floating-point data type supported for vectors.
Why this answer
Cosmos DB vector embedding policy supports float32 and float16 (or int8 depending on quantization) for vector properties.
An application publishes custom events to an Azure Event Grid topic. You want to inspect the dead-lettered events that failed delivery after the maximum retry period. Where must you configure the dead-letter destination?
Event Grid dead-lettering writes undeliverable events directly to an Azure Storage blob container.
Why this answer
Event Grid dead-lettering requires an Azure Storage account container as the destination where failed event blobs are written.
You need to check the health status of Azure AI services globally and see if any regional outages are currently impacting your deployed models. Which Azure tool should you consult?
Correct. Service Health tracks cloud service incidents and maintenance advisories.
Why this answer
Azure Service Health provides a personalized view of Azure service health, planned maintenance, and regional outages affecting your resources.
You are optimizing an enterprise AI architecture for cost and performance. Which THREE of the following strategies effectively reduce Azure AI and infrastructure spending without sacrificing reliability? (Choose three)
Correct. Reservations offer significant discounts for predictable, ongoing workloads.
Why this answer
Autoscaling compute clusters down to zero when idle, leveraging reserved instances/provisioned throughput commitments for predictable workloads, and sizing compute appropriately reduce costs.
Your Azure Machine Learning workspace is secured behind a virtual network with private endpoints. Data scientists need to access the workspace notebooks and compute instances securely from their on-premises corporate network without exposing management ports to the public internet. What hybrid networking feature should you establish?
Correct. Hybrid connectivity via ExpressRoute/VPN paired with Private Link enables secure on-premises access to private Azure resources.
Why this answer
Azure ExpressRoute or a site-to-site VPN combined with Azure Private Link allows secure, private connectivity from an on-premises network to Azure private endpoints.
You are configuring an Azure AI Search index where text fields are automatically analyzed using language-specific rules. Which property on an Edm.String field specifies the language analyzer (e.g., 'en.microsoft')?
The analyzer property specifies the text analyzer for tokenization.
Why this answer
The analyzer property on an Edm.String field specifies the language-specific analyzer used for full-text tokenization.
You are configuring disaster recovery for an Azure Event Hubs namespace. You have established a geo-recovery pairing between a primary and secondary namespace. A failover has been executed. How should you re-establish replication back to the original primary namespace once it recovers?
Reversing the partnership or setting up a new pairing re-establishes asynchronous replication in the reverse direction.
Why this answer
After a failover, you must break the pairing or re-establish a new alias pairing pointing the old primary as the new secondary (reverse role) to sync data back.
You are managing an Azure Kubernetes Service (AKS) cluster that runs high-throughput AI model training jobs using NVIDIA Tensor Core GPUs. Pods frequently fail to schedule because of insufficient GPU memory across existing nodes. You need to ensure the cluster automatically provisions new GPU-enabled worker nodes when resource demands increase. What should you configure?
The Cluster Autoscaler monitors for unschedulable pods and adds instances to the specified GPU node pool.
Why this answer
To automatically add GPU-backed nodes when workloads are pending due to resource constraints, you must configure the Kubernetes Cluster Autoscaler with a dedicated node pool that uses GPU virtual machine sizes (e.g., Standard_NC6s_v3).
Which TWO roles are commonly assigned when granting a managed identity access to consume Azure OpenAI services via Azure RBAC?
This role permits invoking Azure OpenAI models.
Why this answer
Cognitive Services User and Cognitive Services OpenAI User are standard built-in roles for authenticating data plane operations on Azure OpenAI.
You are configuring vector search on an Azure AI Search index using a custom vectorizer that points to an external embedding endpoint. Which authentication method is recommended and natively supported for securely connecting Azure AI Search to the Azure OpenAI endpoint?
Managed Identity is the secure, recommended authentication mechanism for connecting Azure AI Search to Azure OpenAI.
Why this answer
Azure AI Search supports managed identities (both system-assigned and user-assigned) to securely authenticate against Azure OpenAI endpoints without storing API keys.
You are troubleshooting an AI application container in an AKS cluster that cannot resolve external domain names (e.g., huggingface.co). Which TWO Kubernetes components should you investigate?
The kube-dns service routes DNS queries to CoreDNS pods.
Why this answer
DNS resolution issues in AKS typically point to CoreDNS pod status, kube-dns service configuration, or node network routing.
You are troubleshooting event delivery failures in Azure Event Grid. Which TWO mechanisms can help you analyze or recover undeliverable events? (Choose two)
Dead-lettering saves unconsumed or failed events to storage for analysis.
Why this answer
Event Grid supports configuring a dead-letter destination (Blob Storage) and viewing delivery metrics/logs via Azure Monitor diagnostic settings.
You are designing a high-scale event ingestion pipeline using Azure Event Hubs in a secure enterprise environment. Public internet access must be disabled entirely. Producers and consumers reside in a peered Virtual Network (VNet). How should you configure network connectivity to the Event Hubs namespace?
Private Endpoints provide private IP addresses from your VNet directly to the Event Hubs resource, securing traffic.
Why this answer
To secure Event Hubs without public internet access, you must configure private endpoints using Azure Private Link, placing network interfaces inside the VNet and disabling public network access on the namespace.
You are designing an enterprise messaging architecture using Azure Service Bus. Which THREE features are available exclusively in the Premium tier and not in the Standard tier? (Choose three)
VNet integration and private endpoints are Premium-tier capabilities.
Why this answer
Azure Service Bus Premium tier provides dedicated resources (CPU/Memory), VNet integration / Private Endpoints, and larger message sizes (up to 100 MB). Standard tier shares multitenant infrastructure.
Which TWO Azure services can store and serve private Docker container images for AI workloads?
ACI pulls and runs container images stored in ACR.
Why this answer
Azure Container Registry and Azure Container Instances (via image pull secrets) interact with container images, while ACR is the dedicated private registry.
Your organization uses Azure Event Grid namespaces for MQTT client messaging in an industrial IoT scenario. Which authentication method should you configure for IoT devices connecting directly to the Event Grid namespace MQTT broker?
Event Grid MQTT brokers natively support secure device authentication using X.509 certificates.
Why this answer
Event Grid MQTT broker supports client authentication using X.509 client certificates with certificate thumbprint matching or CA certificate chains.
Your organization requires that all messages sent to an Azure Service Bus Premium namespace are encrypted using customer-managed keys (CMK) stored in Azure Key Vault. Where must you configure this encryption setting?
Encryption with CMK applies to the entire Service Bus Premium namespace.
Why this answer
Customer-managed keys for Azure Service Bus are configured at the Namespace level using Azure Key Vault integration.
You are designing an event-driven AI application that requires routing custom events from an Azure resource to multiple downstream serverless webhooks. Which Azure messaging service should you use to publish and route these events reliably?
Azure Event Grid natively supports pub/sub event routing for discrete events to webhook endpoints.
Why this answer
Azure Event Grid is designed for event-driven architectures, allowing pub/sub routing of discrete events from Azure resources or custom applications to multiple endpoints like webhooks.
You are managing an AKS cluster running resource-intensive AI training jobs. You want to ensure that nodes automatically scale up and down based on pending pod resource requests. Which component should you enable and configure?
Cluster Autoscaler automatically adjusts the number of nodes in your AKS cluster based on resource demands.
Why this answer
The Kubernetes Cluster Autoscaler monitors for unschedulable pods and requests additional nodes from Azure Virtual Machine Scale Sets.
Page 1 of 7
Page 2Practice AI-200 by domain
Target a specific domain to shore up weak areas.