Courseiva

Microsoft Certified: Azure AI Cloud Developer Associate (AI-200) (AI-200) (AI-200) — Questions 76150

507 questions total · 7pages · All types, answers revealed

Page 1

Page 2 of 7

Page 3
76
MCQeasy

You are developing a serverless AI notification workflow. When an AI model finishes training, it publishes an event to an Azure Event Grid topic. You want to trigger an Azure Logic App when this event occurs. Which Event Grid subscription event delivery schema and endpoint type should you select?

A.Select 'Webhook' as the endpoint type and provide the Logic Apps HTTP Request URL.
B.Select 'Storage Queue' as the endpoint type.
C.Select 'Azure Service Bus Queue' as the endpoint type and provide the queue connection string.
D.Select 'Azure Event Hubs' as the endpoint type and provide the connection string.
AnswerA

Logic Apps can receive Event Grid events using a Request trigger configured as a Webhook endpoint.

Why this answer

Azure Logic Apps provides a native Event Grid trigger endpoint, allowing seamless event ingestion directly into the workflow.

77
MCQeasy

Your team needs to monitor when virtual machines are created or deleted across an entire Azure subscription so that an automated audit logger is triggered. Which Azure service should you use to capture these management plane operations?

A.Azure Logic Apps
B.Azure Event Grid
C.Azure Service Bus
D.Azure Event Hubs
AnswerB

Event Grid supports Azure subscriptions and resource groups as event sources for Azure Activity Log events.

Why this answer

Azure Event Grid provides built-in integration with Azure Resource Manager (ARM), allowing you to subscribe to subscription-level and resource-group-level management events.

78
MCQhard

You are designing a high-availability RAG architecture where search queries must succeed even if an entire Azure region experiences an outage. You deploy Azure AI Search in a primary region and a secondary region. How should client applications handle failover?

A.Hardcode the secondary search IP address in client application configuration files
B.Rely on Cosmos DB automatic failover to replicate search indices
C.Use Azure Traffic Manager or Azure Front Door in front of regional search service endpoints with health probes
D.Configure SQL replication between search indexes
AnswerC

Global load balancers like Traffic Manager or Front Door route traffic to healthy regional endpoints automatically.

Why this answer

Applications implement traffic routing via Azure Traffic Manager or Azure Front Door pointing to both search service regional endpoints, combined with geo-replication of search indexes.

79
MCQmedium

Your organization uses Azure Service Bus Topics. You need to ensure that messages published to a topic are delivered to subscriptions in a specific priority order (e.g., high priority messages processed before normal priority). What is the recommended Service Bus design pattern to achieve this?

A.Create separate queues or subscriptions for high-priority and normal-priority messages, and have workers poll the high-priority entity first.
B.Set the Priority property on the Service Bus message header to 99.
C.Configure Event Hubs partition key hashing to group priority messages.
D.Enable Event Grid priority filters on the topic.
AnswerA

Separate entities or subscriptions allow consumers to prioritize polling high-priority work streams.

Why this answer

Because Service Bus Topics do not support intra-topic message priority sorting, the recommended design pattern is to create separate subscriptions or separate topics/queues for high-priority versus normal messages, or use multiple queues.

80
Multi-Selecthard

You are optimizing an enterprise Azure Cosmos DB for NoSQL vector database. Which THREE administrative or architectural practices help ensure high availability and predictable performance? (Choose three)

Select 3 answers
A.Choose a partition key that evenly distributes data and query load across physical partitions
B.Enable multi-region write replication for global low-latency availability
C.Store all documents in a single partition without a partition key
D.Disable automatic indexing entirely across all properties
E.Provision adequate Request Units (RUs) or configure autoscale throughput
AnswersA, B, E

Effective partitioning prevents hot spots and ensures scalable query execution.

Why this answer

Ensuring high performance and availability in Cosmos DB involves configuring consistent request unit provisioning, setting up multi-region writes, and defining effective partition keys.

81
MCQeasy

Which Azure AI Search capability allows you to extract text from images and PDF documents during indexer execution using AI cognitive skills?

A.Semantic configurations
B.Scoring profiles
C.Skillsets
D.Vector profiles
AnswerC

Skillsets enable cognitive AI enrichment during indexer execution.

Why this answer

Skillsets in Azure AI Search enable cognitive enrichment, allowing tasks like OCR and entity extraction during ingestion.

82
Multi-Selectmedium

Your development team is planning to deploy a containerized natural language processing model to Azure Container Apps. Which TWO features are natively supported by Azure Container Apps for managing application lifecycle and traffic? (Choose two.)

Select 2 answers
A.Automatic deployment of bare-metal hypervisors
B.Built-in KEDA-based autoscaling including scaling to zero
C.Native revision management and traffic splitting between revisions
D.Direct root SSH access to individual container instances for interactive debugging
E.Direct manual configuration of control plane Kubernetes master nodes
AnswersB, C

Container Apps includes native KEDA integration for event-driven scaling, including scale-to-zero.

Why this answer

Azure Container Apps natively supports multi-revision management and traffic splitting between revisions, as well as KEDA autoscaling.

83
MCQhard

You are setting up image builds for a multi-architecture (AMD64 and ARM64) AI model container using Azure Container Registry Tasks. Which command or feature should you use to build images for both architectures simultaneously?

A.Azure DevOps pipeline running docker push directly
B.az aks create with --node-os-sku
C.az acr build with a multi-step task or docker buildx configuration
D.az acr import
AnswerC

ACR Tasks support platform specifications and buildx for compiling multi-architecture container images.

Why this answer

ACR Tasks support multi-architecture builds using Docker buildx commands within a task definition file or quick task execution.

84
MCQhard

You are designing an enterprise AI event-driven pipeline. Events from multiple SaaS applications are published to an Azure Event Grid domain. You need to ensure that a rogue tenant cannot exhaust the delivery throughput of other tenants. Which feature should you leverage?

A.Deploy separate Event Grid topics or distinct Event Domains per tenant with dedicated custom access keys or managed identities.
B.Set the maximum delivery retry count to zero for all tenants.
C.Enable Azure DDoS Protection Standard on the storage account dead-letter container.
D.Configure Service Bus partitioned queues in front of the Event Grid domain.
AnswerA

Isolating tenants into separate topics or domains ensures resource and security isolation across tenant boundaries.

Why this answer

Azure Event Grid domains allow multi-tenant isolation by grouping topics under a single domain resource, and quotas/throttling are managed at the tier level, but for tenant isolation, separate Event Grid topics/domains or enterprise tier configurations are utilized.

85
MCQhard

You are optimizing the cost and performance of an Azure Event Hubs namespace processing millions of financial telemetry records daily. Traffic fluctuates heavily between business hours and night time. You want to ensure the namespace scales automatically without manual intervention while bounding maximum costs. What should you configure?

A.Set the retention period to 1 hour to reduce storage overhead.
B.Enable Auto-Inflate and set the maximum Throughput Units limit.
C.Configure an Azure Autoscale rule on the Event Hubs Resource Group via Azure Monitor.
D.Upgrade the namespace to Azure Service Bus Premium with partitioned entities.
AnswerB

Auto-Inflate automatically increases TUs as load increases up to the specified maximum limit, controlling costs.

Why this answer

Event Hubs Standard and Premium tiers support Auto-Inflate. You enable Auto-Inflate and specify the maximum number of Throughput Units (TUs) or Processing Units (PUs) to cap expenses.

86
MCQmedium

You are designing an application that stores vector embeddings in Azure Cosmos DB for NoSQL. You want to ensure that vectors are stored securely and that all data at rest is encrypted using customer-managed keys (CMK). How is this achieved in Cosmos DB?

A.Enable encryption inside the vector embedding policy JSON definition
B.Encrypt each individual vector array in client application code before inserting
C.Store vectors in Azure Blob Storage with a CMK policy
D.Configure customer-managed keys (CMK) at the Azure Cosmos DB account level referencing Azure Key Vault
AnswerD

CMK encryption is configured at the Cosmos DB account level with Azure Key Vault.

Why this answer

Customer-managed keys in Azure Cosmos DB are configured at the Azure Cosmos DB account level using Azure Key Vault integration.

87
MCQeasy

Your application publishes events to an Azure Event Grid topic. You want to ensure that event publishers must present a valid shared access signature or key in the HTTP request header. Which header name does Event Grid expect for key-based authentication?

A.aeg-sas-key
B.Authorization
C.x-functions-key
D.sb-connection-string
AnswerA

Event Grid uses 'aeg-sas-key' to authenticate publishers presenting an access key.

Why this answer

Event Grid accepts keys via the 'aeg-sas-key' header for SAS keys or 'aeg-sas-token' for SAS tokens.

88
Multi-Selecthard

Your enterprise AI solution requires secure connectivity between Azure Event Grid and private webhook endpoints. Which THREE features support secure, private event delivery? Each correct answer represents a valid security feature.

Select 3 answers
A.Private Endpoints for inbound event publishing connectivity
B.Service Bus shared access signature (SAS) keys on event subscriptions
C.Anonymous public webhook access bypass headers
D.Managed Identities for authenticating event deliveries to webhook destinations
E.IP firewall rules to restrict publishing sources
AnswersA, D, E

Private endpoints secure the ingress path to Event Grid namespaces.

Why this answer

Event Grid supports managed identities for webhooks, private endpoints for ingress, and IP firewalls.

89
MCQmedium

You are integrating an external SaaS platform with your Azure AI architecture using Azure Event Grid. The external partner wants to ensure that the events they receive from your custom topic are authentic and originated from your Event Grid namespace. Which security feature should you advise the partner to verify?

A.Check the Azure Active Directory tenant ID in the Event Hubs connection string.
B.Verify the SAS token attached to the event payload body.
C.Validate the event delivery request using the AEG-Signature HTTP header and webhook HMAC verification.
D.Inspect the Storage account access key provided in the event subject.
AnswerC

Event Grid signs delivery requests using HMAC, allowing subscribers to verify authenticity using the shared secret.

Why this answer

Event Grid delivers events with a signature in the `AEG-Signature` HTTP header, which partners can validate using the public key or HMAC validation against the webhook secret key.

90
Multi-Selectmedium

Which TWO of the following steps are required to enable GPU support for a pod in AKS?

Select 2 answers
A.Use a node pool with GPU-enabled VMs.
B.Enable the 'Privileged' flag in the Dockerfile.
C.Include the 'nvidia.com/gpu' resource request in the pod.
D.Set the pod to run as root.
E.Install the NVIDIA driver on the local machine.
AnswersA, C

Essential for providing physical GPU hardware.

Why this answer

You must use a GPU-enabled node pool and request GPU resources in the pod specification.

91
MCQmedium

You have a large image that takes a long time to pull. You want to speed up deployment in AKS. Which feature should you enable?

A.Use a public mirror for the image.
B.Increase the AKS node count.
C.Use smaller base images.
D.Enable Artifact Streaming in ACR.
AnswerD

Artifact Streaming allows the container to start before the full image is pulled.

Why this answer

Image Pull Secrets are standard, but ACR 'Artifact Streaming' is the specific feature for reducing pull times.

92
MCQmedium

Your organization requires that all cognitive service keys stored in Azure Key Vault are automatically rotated every 90 days. What native Azure Key Vault feature should you configure to accomplish this?

A.Azure Automation state configuration (DSC)
B.Azure Policy append effects
C.Azure Active Directory password writeback
D.Key Vault secret rotation policies integrated with Azure Functions
AnswerD

Correct. Key Vault supports automatic rotation policies that trigger Azure Functions via Event Grid to generate and update keys.

Why this answer

Azure Key Vault secret rotation allows you to configure automated rotation of secrets using Azure Event Grid and Azure Functions based on a defined schedule.

93
MCQeasy

Which Azure service provides a fully managed NoSQL database with native vector search capabilities and turnkey multi-region replication?

A.Azure Table Storage
B.Azure Blob Storage
C.Azure Cosmos DB
D.Azure SQL Database
AnswerC

Azure Cosmos DB supports native vector indexing and search with multi-region distribution.

Why this answer

Azure Cosmos DB provides managed NoSQL capabilities with built-in vector search and global distribution.

94
Multi-Selectmedium

Which TWO mechanisms can be used to monitor and optimize costs associated with Azure AI services?

Select 2 answers
A.Network Watcher IP flow logs.
B.Application Insights live metrics stream.
C.Azure Bastion session monitoring logs.
D.Azure Budgets with configured email alert notifications.
E.Azure Advisor cost recommendations for right-sizing and idle resource cleanup.
AnswersD, E

Budgets allow tracking spending against limits with automated alerts.

Why this answer

Azure Budgets and Azure Advisor cost recommendations are primary native tools for AI cost governance.

95
Multi-Selectmedium

Which THREE configuration steps are required when setting up a Private Endpoint for an Azure OpenAI resource?

Select 3 answers
A.Enable public network access on the Azure OpenAI resource with unrestricted IP ranges.
B.Deploy the private endpoint into a subnet within your Virtual Network.
C.Integrate with a private DNS zone to resolve the Azure OpenAI FQDN to the private IP address.
D.Assign a public IP address directly to the private endpoint network interface.
E.Select the target sub-resource, such as 'account', for the Azure OpenAI service.
AnswersB, C, E

The private endpoint requires an IP address allocated from a VNet subnet.

Why this answer

Setting up a private endpoint requires creating the endpoint itself, configuring a target sub-resource (e.g., 'account'), and updating DNS records so the FQDN resolves to the private IP.

96
Multi-Selectmedium

Which THREE of the following are security best practices for container registries?

Select 3 answers
A.Use Private Link for network access.
B.Disable HTTPS for faster access.
C.Apply Role-Based Access Control (RBAC).
D.Use the 'latest' tag for production images.
E.Enable vulnerability scanning.
AnswersA, C, E

Prevents public exposure.

Why this answer

Registry security includes scanning, limiting access, and protecting the content.

97
MCQmedium

You are deploying a containerized machine learning inference service to Azure Container Apps. The model artifact is large (15 GB) and must be securely loaded during container startup. What is the most efficient way to mount this model data into the container app?

A.Mount an Azure Files volume to the container app
B.Download the model over the public internet at container boot
C.Bake the model directly into the Docker image layer
D.Store the model in environment variables
AnswerA

Azure Files storage mounts allow sharing large models across container replicas without bloating the container image.

Why this answer

Azure Container Apps supports mounting Azure Files or Azure Blob Storage (via blobfuse) as volumes, allowing containers to read large assets efficiently.

98
Multi-Selectmedium

Your organization requires strict network isolation for all Azure AI services. Which TWO of the following networking features should you configure to prevent public internet exposure? (Choose two)

Select 2 answers
A.Azure Private Link with private endpoints mapped to your virtual network
B.Enabling anonymous access on Application Insights data ingestion endpoints
C.Disabling public network access on the Azure AI resource firewall settings
D.Using Azure Front Door with global public anycast IPs
E.Assigning public IP addresses to all backend scoring containers
AnswersA, C

Correct. Private endpoints assign private IPs within your VNet to Azure services.

Why this answer

Private endpoints via Azure Private Link and disabling public network access on PaaS resources ensure complete network isolation from the public internet.

99
MCQmedium

You are building an AI financial transactions ledger using Azure Service Bus. Each transaction must be processed strictly in order per account ID, and if a transaction fails, subsequent transactions for that specific account must wait until the issue is resolved. Which feature should you use?

A.Event Hubs partitions with round-robin load balancing
B.Service Bus Sessions (SessionId set to the account ID)
C.Azure Storage Queues with invisible timeout properties
D.Event Grid advanced filters keyed by account ID
AnswerB

Sessions ensure that only one receiver can acquire a session lock at a time, enforcing strict ordering per account ID.

Why this answer

Azure Service Bus Sessions provide guaranteed FIFO ordering and session-level locking. All messages sharing the same SessionId are locked by a single worker, ensuring serial processing per session.

100
Multi-Selecthard

You are configuring an Azure Kubernetes Service (AKS) cluster for enterprise AI workloads. Which THREE practices should you implement to enhance cluster security and isolation? (Choose three.)

Select 3 answers
A.Configure Microsoft Entra Workload Identity for pod-to-Azure service authentication
B.Disable TLS on the API server to improve inter-node communication speed
C.Share a single service principal across all namespaces for simplified administration
D.Enable Azure Policy for Kubernetes for governance and compliance enforcement
E.Integrate Microsoft Entra ID with Azure RBAC for Kubernetes authorization
AnswersA, D, E

Workload Identity securely binds Kubernetes service accounts to Microsoft Entra identities without storing credentials.

Why this answer

Enterprise AKS security best practices include enabling Azure Policy for Kubernetes, using Azure RBAC for Kubernetes authorization, and utilizing Workload Identity for secure credential-less access to Azure services.

101
MCQmedium

Your enterprise application uses Azure Service Bus Topics to distribute orders to inventory and billing services. A transient database outage occurs in the billing service. You must ensure that billing messages are not lost and can be retried without interfering with the inventory service. What feature should you configure?

A.Enable partitioned queues on the sender application.
B.Use Event Grid filters to duplicate the messages into two separate storage accounts.
C.Configure separate subscriptions for each service under the Service Bus Topic.
D.Implement Azure Relay to tunnel the database connection.
AnswerC

Separate subscriptions allow each application to maintain its own cursor and processing state, isolating failures.

Why this answer

Service Bus Subscriptions support sessions, dead-lettering, and independent subscriber configuration. Each subscription acts as a virtual queue, ensuring the billing service can process messages independently of inventory.

102
MCQhard

Your distributed AI system uses Azure Event Hubs with multiple partitions. A downstream machine learning model worker needs to guarantee that all inference requests originating from the same client session are processed by the exact same worker instance and partition in order to maintain conversation context. How should you ensure this?

A.Set the Event Hub consumer group owner to exclusive mode.
B.Enable Event Hubs Capture with automatic partition balancing.
C.Configure a Service Bus session on the Event Hub consumer group.
D.Include a consistent PartitionKey when publishing events to the Event Hub.
AnswerD

Providing a PartitionKey ensures all events with that key are routed to the same partition and processed by the same worker.

Why this answer

When publishing events to Event Hubs, you must supply a PartitionKey (such as the client session ID). Event Hubs hashes this key to route the event to the same partition consistently.

103
MCQeasy

When querying an Azure AI Search vector index using the REST API or SDK, what parameter specifies the number of nearest neighbors to retrieve?

A.radius
B.top
C.depth
D.k
AnswerD

The parameter k defines the number of nearest neighbors to return in a vector query.

Why this answer

The nearest neighbors query parameter in Azure AI Search vector queries is k (or kNearestNeighbors).

104
MCQhard

You are designing an AI streaming architecture using Azure Event Hubs in a Dedicated cluster. You need to monitor capacity utilization to ensure the cluster does not exceed its allocated Processing Units (PUs). Which metric should you track in Azure Monitor?

A.Service Bus Active Message Count.
B.Event Grid Delivery Success Rate percentage.
C.Dedicated Cluster Memory and CPU Usage / Processing Units (PUs) Utilization metrics.
D.Storage Account Blob Capacity utilization.
AnswerC

Cluster-level metrics in Azure Monitor track PU capacity and resource consumption for Dedicated Event Hubs tiers.

Why this answer

Azure Event Hubs Dedicated clusters are measured in Processing Units (PUs). You monitor CPU usage and PU utilization metrics in Azure Monitor to determine if scaling out the dedicated cluster is necessary.

105
MCQhard

Your team is running an AI copilot application that uses Azure OpenAI. To comply with data residency regulations, you need to verify that prompts and completions are processed entirely within a specific Azure region and that no data is persisted outside that region. Where can you verify regional data processing and residency commitments?

A.Azure OpenAI service compliance terms and data residency documentation in the Azure Trust Center
B.Azure Resource Graph queries filtering by region
C.Azure Monitor geographic latency metrics dashboard
D.Application Insights dependency maps
AnswerA

Correct. Azure OpenAI guarantees data residency within the deployed region and does not use customer data to train foundation models.

Why this answer

Microsoft's Trust Center and Azure Compliance Documentation, along with service-level data residency specifications in the Azure OpenAI documentation, outline data processing and storage locations.

106
Multi-Selecthard

You are designing an enterprise search architecture on Azure that requires hybrid search capabilities. Which THREE components or features must be configured to successfully execute a hybrid query with semantic ranking in Azure AI Search? (Choose three)

Select 3 answers
A.Azure Blob Storage configured as an external data source
B.A searchable Edm.String text field for keyword matching
C.A vector field defined with Edm.SingleCollection and a vector profile
D.An Azure Functions application for manual score merging
E.A semantic configuration defined on the index
AnswersB, C, E

BM25 full-text search relies on searchable Edm.String fields.

Why this answer

To run hybrid search with semantic ranking, you need a vector field, a text field for BM25 keyword search, and semantic configuration enabled on the index.

107
MCQmedium

You are integrating Azure OpenAI Service's text-embedding-ada-002 model with Azure AI Search. You want to automate the generation of embeddings directly inside the search service during data ingestion. Which component of Azure AI Search should you configure?

A.Semantic ranker configuration profile
B.Azure AI Search Indexer with integrated vectorization
C.Azure Function scheduled trigger for batch updates
D.Custom Web API skill in Azure AI Services enrichment pipeline
AnswerB

Integrated vectorization in Azure AI Search automatically handles embedding generation from raw text fields using Azure OpenAI connections during indexing.

Why this answer

Indexers in Azure AI Search support integrated vectorization, allowing you to connect to Azure OpenAI to automatically chunk text and generate embeddings during the indexing pipeline.

108
MCQeasy

You need to store private AI model weights in an Azure Container Registry (ACR). Which authentication method follows the principle of least privilege for an AKS cluster to pull these images?

A.Service Principal with Contributor role.
B.ACR Admin account credentials.
C.Azure Managed Identity.
D.A shared SAS token generated for the registry.
AnswerC

Managed Identity is the secure, recommended way for AKS to authenticate with ACR.

Why this answer

Managed Identity allows the AKS Kubelet to authenticate to ACR without storing static credentials.

109
MCQeasy

You are storing vector embeddings generated by Azure OpenAI in Azure Cosmos DB for NoSQL. Which built-in SQL function must you use within your query to compute vector distance when executing a similarity search?

A.EmbeddingDistance()
B.GetVectorDistance()
C.VectorDistance()
D.CosineSimilarity()
AnswerC

VectorDistance is the official built-in SQL function in Azure Cosmos DB for NoSQL designed to compute distance metrics between vector arrays.

Why this answer

Azure Cosmos DB for NoSQL provides native vector search functions including VectorDistance, which computes the distance between two vectors using Cosine, DotProduct, or Euclidean distance metrics.

110
Multi-Selecthard

Your enterprise AI solution runs on Azure Kubernetes Service (AKS) and connects to Azure OpenAI. You need to ensure comprehensive security across network, identity, and secrets. Which THREE of the following configurations should you deploy? (Choose three)

Select 3 answers
A.Azure AD Workload Identity for Kubernetes pods to securely access Azure OpenAI without static keys.
B.Kubernetes Network Policies to restrict pod-to-pod communication within the cluster.
C.Azure Key Vault Provider for Secrets Store CSI Driver for secure secret mounting.
D.Grant cluster-admin permissions to every unauthenticated container image.
E.Disable all TLS encryption on Kubernetes ingress controllers.
AnswersA, B, C

Correct. Workload Identity provides secure, credential-less access for pods to Azure services.

Why this answer

Azure AD Workload Identity for pods, Network Policies for pod-to-pod isolation, and Azure Key Vault CSI secret driver secure the AKS AI workload.

111
Multi-Selectmedium

You are configuring a vector search profile in Azure AI Search. Which TWO parameters are required when defining an algorithm configuration using the HNSW algorithm? (Choose two)

Select 2 answers
A.vectorDimensions
B.efConstruction
C.m
D.compressionType
E.shardCount
AnswersB, C

efConstruction specifies the size of the dynamic candidate list during HNSW graph construction.

Why this answer

When configuring an HNSW algorithm profile in Azure AI Search, you must define parameters such as m (number of bi-directional links per node) and efConstruction (size of the dynamic candidate list during construction).

112
MCQhard

You are building an AI search solution in Azure AI Search. You need to ensure that when documents are deleted from the primary database, they are also automatically removed from the search index without requiring manual API calls. How should you configure the indexer?

A.Write a custom Azure Function triggered by every delete event to issue an HTTP DELETE to the search index
B.Configure a soft-delete policy on the indexer referencing a deletion tracking column or flag in the data source
C.Re-create the entire search index from scratch daily
D.Set the index retention policy to auto-purge every 24 hours
AnswerB

Soft-delete policies enable indexers to detect and propagate document deletions automatically.

Why this answer

Azure AI Search indexers support change detection and soft-delete policies (such as Soft Delete Column) to automatically reflect deletions in the search index.

113
MCQeasy

You are building an AI container image and need to minimize its final size to speed up deployment times. Which multi-stage build practice should you follow?

A.Use a builder stage for compilation and copy only runtime artifacts into a slim base image
B.Store model weights directly inside the container image layers
C.Install all development tools and pip packages in a single RUN instruction
D.Disable container image compression when pushing to ACR
AnswerA

Multi-stage builds discard build tools and dependencies from the final production image, reducing size.

Why this answer

Multi-stage builds allow you to use a heavy builder image with SDKs and compilers, then copy only the compiled artifacts and runtime binaries into a slim final base image.

114
Multi-Selecthard

You are configuring rolling updates for an AI model inference service on AKS with zero downtime requirements. Which THREE deployment or pod configuration settings should you configure?

Select 3 answers
A.Deployment strategy set to RollingUpdate with configured maxSurge and maxUnavailable
B.Readiness and liveness probes to verify container health before traffic routing
C.Setting restart policy to Never on the Deployment template
D.Pod Disruption Budget (PDB) to ensure minimum available replicas during node drains
E.Disabling all container health checks to speed up pod termination
AnswersA, B, D

RollingUpdate controls how many pods are replaced simultaneously.

Why this answer

Zero downtime deployments require liveness/readiness probes, RollingUpdate strategy with maxSurge/maxUnavailable, and PDBs.

115
MCQhard

Your Azure Service Bus Premium namespace hosts critical AI request queues. Due to sudden spikes in inference requests, one of the queues experiences peak concurrency exceeding the maximum throughput units. You need to scale the namespace capacity automatically without manual intervention. What feature should you configure?

A.Configure geo-disaster recovery pairing with an active-active replication policy.
B.Enable Partitioning on the Service Bus queue entities.
C.Configure Azure Functions Premium plan scaling triggers based on Service Bus queue length.
D.Enable Auto-inflate on the Service Bus namespace and specify the maximum messaging units.
AnswerD

Auto-inflate automatically scales up messaging units for Service Bus Premium namespaces based on load.

Why this answer

Azure Service Bus Premium supports Auto-inflate, which automatically scales up the number of messaging units (MUs) when the namespace load exceeds thresholds.

116
MCQhard

You are designing an enterprise event-driven architecture where microservices across different Azure subscriptions need to subscribe to domain events published by a central Order Service. Which Azure Event Grid architecture should you implement?

A.Deploy an Azure Service Bus relay across all subscriptions.
B.Deploy an Azure Event Grid Event Domain and create event subscriptions under the domain for each consuming team.
C.Create individual Event Hubs namespaces in every consumer subscription and peer them via ExpressRoute.
D.Use Azure Storage Queues shared via SAS URLs across subscriptions.
AnswerB

Event Domains manage multiple topics under a single resource, making them ideal for multi-tenant and cross-subscription enterprise architectures.

Why this answer

Azure Event Grid Topics and Event Domains allow publishers to push events to a single domain, where multiple event subscriptions across different resource groups or subscriptions can be managed efficiently.

117
Multi-Selecthard

Your team is comparing Azure Event Grid, Event Hubs, and Service Bus for an AI platform integration project. Which THREE statements correctly contrast these services? Each correct answer is factually accurate.

Select 3 answers
A.Event Hubs provides native webhook push delivery for serverless triggers without consumer code.
B.Event Grid is optimized for pub/sub discrete event notifications with push delivery.
C.Event Hubs is optimized for high-throughput big data streaming and telemetry ingestion.
D.Event Grid supports AMQP 1.0 session-based strict FIFO message ordering.
E.Service Bus is designed for enterprise messaging supporting transactions, sessions, and dead-lettering.
AnswersB, C, E

Event Grid delivers discrete events via push.

Why this answer

Event Grid is for reactive discrete events, Event Hubs is for big data telemetry streams, and Service Bus is for enterprise transactional messaging.

118
MCQeasy

Your application publishes events to an Azure Event Grid system topic. You want to filter events so that your webhook subscriber receives only events where the 'eventType' is 'Microsoft.Storage.BlobCreated'. Where should you configure this filter?

A.Within the Azure Function host.json configuration file.
B.In the Service Bus Topic subscription SQL filter.
C.Inside the Azure Storage account connection string settings.
D.In the Event Grid subscription filter configuration blade under 'Included Event Types'.
AnswerD

Subscription-level filters allow you to specify exact event types you want delivered to your endpoint.

Why this answer

Event Grid subscriptions support basic filters, including filtering by event type (`includedEventTypes`).

119
MCQhard

You are investigating performance degradation in an Azure AI Search vector search index. You need to run a Kusto Query Language (KQL) query in Application Insights to analyze dependency durations for search queries. Which table should you query?

A.Query the 'traces' table where message contains 'SearchLatency'.
B.Query the 'requests' table where name contains 'VectorSearch'.
C.Query the 'customMetrics' table where name equals 'SearchDuration'.
D.Query the 'dependencies' table where target contains 'search.windows.net'.
AnswerA, B, C, D

'traces' is for custom log messages unless explicitly mapped to dependencies.

Why this answer

Dependencies in Application Insights are stored in the 'dependencies' table, which records outgoing HTTP calls to Azure AI Search.

120
MCQhard

You are troubleshooting high latency in an Azure AI Search vector indexing pipeline. The source data is stored in Azure Blob Storage. You notice that the 'skillset' execution is the bottleneck. Which configuration change is most likely to reduce ingestion time?

A.Increase the 'maxParallelism' setting in the indexer configuration.
B.Change the Blob storage tier to Cool.
C.Switch from HNSW to Flat indexing.
D.Reduce the embedding vector dimensions.
AnswerA

Parallelism allows the indexer to process more documents simultaneously, reducing total indexing time.

Why this answer

Increasing the number of indexer concurrency (if the tier supports it) or optimizing the skillset to perform batch processing reduces the total overhead of document enrichment.

121
Multi-Selecthard

Your Azure AI application relies on Azure OpenAI and Azure AI Search. You need to troubleshoot a sudden surge in HTTP errors and latency. Which THREE of the following Azure Monitor / Application Insights features or tools should you use to diagnose the issue? (Choose three)

Select 3 answers
A.Azure Cost Management recommendation advisor for server resizing.
B.Application Map in Application Insights to identify downstream dependency latency bottlenecks.
C.Log Analytics workspace with KQL queries against the exceptions and dependencies tables.
D.Metrics explorer in Azure Monitor to check Azure OpenAI token limits and throttling metrics.
E.Azure Bastion diagnostic logs for RDP login failures.
AnswersB, C, D

Correct. Application Map displays component topology and dependency call durations.

Why this answer

Application Map visualizes dependencies and latency bottlenecks, Metrics explorer tracks token consumption and throttling counters, and Log Analytics enables KQL queries for specific exception traces.

122
MCQhard

You are designing an asynchronous AI transaction pipeline using Azure Service Bus. You need to implement the Competing Consumers pattern where multiple worker instances process messages from a single queue without duplicating work. How does Azure Service Bus natively support this pattern?

A.Configure Event Hubs consumer groups with exclusive read locks.
B.You must write custom distributed locking logic using Azure Blob Leases in front of the queue.
C.Service Bus automatically locks and distributes messages across competing workers using PeekLock mode.
D.You must deploy an Event Grid topic with a round-robin webhook load balancer.
AnswerC

PeekLock ensures that when worker A grabs a message, it is locked and hidden from worker B until settled.

Why this answer

Azure Service Bus queues inherently implement the Competing Consumers pattern. When multiple workers pull from the same queue, Service Bus locks each message to a single worker so no other worker receives it.

123
MCQeasy

You are deploying a custom PyTorch inference model container to Azure Container Apps. The application requires GPU acceleration for real-time video processing. Which Azure Container Apps environment configuration tier must you select to support this requirement?

A.Serverless container instances tier
B.Azure Container Apps Basic tier
C.Dedicated workload profiles (Consumption and Dedicated)
D.Consumption standard workload profile
AnswerC

GPU-enabled container apps require dedicated workload profiles that support NC-series or similar GPU nodes.

Why this answer

GPU-enabled nodes in Azure Container Apps are supported exclusively through the Consumption dedicated workload profiles tier, allowing you to scale container apps with NVIDIA GPU hardware.

124
MCQhard

You are deploying an enterprise AI text-analysis system using Azure Service Bus topics and subscriptions. Downstream processing requires strict message ordering and session-aware processing so that related conversational turns are processed sequentially by the same worker instance. Which property must you enable on the Service Bus subscription?

A.Enable Sessions on the subscription and group messages using a Session ID.
B.Enable Partitioning on the topic.
C.Set Duplicate Detection with a time window.
D.Configure Dead-lettering on message expiration.
AnswerA

Service Bus sessions enable strict first-in, first-out (FIFO) ordering and grouping for related messages sharing a common session ID.

Why this answer

To ensure ordered processing for related messages, you must enable Sessions on the Service Bus entity and ensure your application processes messages using message sessions.

125
MCQmedium

You are managing an Azure Service Bus Standard namespace. Your development team requests the ability to use Topics and Subscriptions. What action must you take to support this requirement?

A.Enable AMQP 1.0 multiplexing on the Basic tier namespace.
B.Create an Event Hubs capture rule to simulate topic subscriptions.
C.Ensure the Service Bus namespace is at the Standard or Premium tier.
D.Upgrade the namespace to Azure Event Grid Premium.
AnswerC

The Basic tier of Service Bus only supports Queues, whereas Standard and Premium support both Queues and Topics.

Why this answer

Azure Service Bus Standard and Premium tiers both support Topics and Subscriptions. Basic tier does not support Topics; therefore, the namespace must be at least Standard tier.

126
Multi-Selecthard

Which THREE of the following options are important when configuring an AKS cluster for AI workloads?

Select 3 answers
A.Network policies for pod communication isolation.
B.Always run every pod as privileged.
C.Managed identity for cluster components.
D.Disable all internal firewalls.
E.GPU-enabled node pools.
AnswersA, C, E

Crucial for security.

Why this answer

Security, performance, and monitoring are key components for any production AI cluster.

127
MCQeasy

You are deploying an Azure OpenAI Service resource and need to ensure that API keys are not used for authentication. Which configuration should you apply?

A.Disable local authentication on the Azure OpenAI resource and grant users the Cognitive Services OpenAI User role.
B.Configure a managed identity on the app service and store the API key in Azure Key Vault.
C.Implement Cross-Origin Resource Sharing (CORS) rules on the Azure OpenAI resource.
D.Enable soft-delete on the Azure OpenAI resource.
AnswerA

Disabling local auth forces Microsoft Entra ID authentication and secures the endpoint via Azure RBAC.

Why this answer

Azure role-based access control (Azure RBAC) can be used to authenticate requests to Azure OpenAI by disabling local authentication (API keys) via the 'disableLocalAuth' property.

128
MCQhard

You are troubleshooting a performance issue in an AI application where dependency calls to Azure OpenAI take significantly longer during periods of high traffic. You want to query Log Analytics to find the 95th percentile (p95) duration of all dependency calls to Azure OpenAI over the past 24 hours. Which KQL query should you execute?

A.dependencies | where timestamp > ago(24h) | where target has 'openai' | summarize p95_duration = percentile(duration, 95) by target
B.exceptions | where timestamp > ago(24h) | summarize count() by outerType
C.requests | where timestamp > ago(24h) | summarize count() by resultCode
D.traces | where timestamp > ago(24h) | summarize avg(severityLevel) by message
AnswerA

Correct. This query correctly filters dependency telemetry for OpenAI targets and calculates the 95th percentile duration.

Why this answer

The KQL query uses the dependencies table, filters by target or type, and calculates the percentile using the percentile() aggregation function.

129
MCQhard

You are optimizing an Azure Event Hubs stream processing application in Python. Messages are being processed too slowly, and you notice high CPU utilization on the consumer instance due to synchronous network I/O. Which programming model should you adopt to maximize ingestion throughput?

A.Increase the partition count of the Event Hub to 1,000 partitions.
B.Switch from Event Hubs to Azure Storage Queues for parallel processing.
C.Migrate all consumer code to use synchronous REST API polling over HTTPS GET requests.
D.Use the asynchronous Event Hub client library (`azure-eventhub.aio`) with `asyncio` for non-blocking I/O operations.
AnswerD

Async/await patterns in Python prevent thread blocking during network calls to Event Hubs, dramatically increasing throughput.

Why this answer

For high-performance asynchronous I/O in Python with Azure Event Hubs, developers should use the `azure-eventhub` asynchronous client library (`aiohttp` / `asyncio`) to process events concurrently.

130
MCQmedium

You are building a chat application with memory using Azure AI Search. You want to retrieve previous conversation turns that are semantically similar to the current user prompt. What search mode should you use if you want to execute both a vector search and a keyword search simultaneously and combine their results?

A.Exhaustive k-NN search
B.Wildcard search
C.Hybrid search
D.Fuzzy search only
AnswerC

Hybrid search combines vector search and full-text keyword search into a single query.

Why this answer

Executing vector and keyword search simultaneously in Azure AI Search is known as hybrid search.

131
MCQhard

You are designing an AI streaming pipeline using Azure Event Hubs. You need to inspect diagnostic logs and operational metrics to track incoming request rates, server errors, and throttling events across the namespace. Where should you configure this telemetry collection in the Azure Portal?

A.Diagnostic Settings on the Event Hubs namespace pointing to a Log Analytics workspace.
B.Event Hubs Capture export storage container settings.
C.Azure Bastion diagnostic configuration.
D.Auto-Inflate throughput unit configuration blade.
AnswerA

Diagnostic settings allow you to stream operational logs and metrics to Log Analytics for querying via Kusto (KQL).

Why this answer

To capture diagnostic logs and metrics in Azure, you must configure a Diagnostic Setting on the Event Hubs namespace pointing to an Log Analytics workspace, Storage Account, or Event Hub.

132
MCQmedium

You are deploying a custom PyTorch model to Azure Container Apps. You need to ensure that the container utilizes GPU acceleration. Which configuration step is required in the Container App environment?

A.Enable the 'GPU-enabled' flag in the Container App resource settings.
B.Assign a workload profile that supports GPU instances.
C.Set the --gpu-count parameter in the Azure CLI deploy command.
D.Install the NVIDIA CUDA driver manually inside the container image.
AnswerB

GPU support in ACA is managed through dedicated workload profiles.

Why this answer

Azure Container Apps supports GPU-enabled nodes. You must select a workload profile that supports GPUs during the environment creation.

133
MCQeasy

Which distance metric in Azure Cosmos DB vector search calculates the shortest straight-line segment between two points in a multi-dimensional space?

A.dotproduct
B.hamming
C.cosine
D.euclidean
AnswerD

Euclidean distance measures straight-line distance.

Why this answer

Euclidean distance measures the straight-line distance between two points in Euclidean space.

134
Multi-Selectmedium

When configuring vector search in Azure AI Search, which TWO components are defined within the vectorSearch object of an index definition? (Choose two)

Select 2 answers
A.sqlPartitionKey
B.storageAccountConnectionString
C.algorithms
D.profiles
E.cosmosContainerName
AnswersC, D

The algorithms collection defines parameters for HNSW or exhaustive k-NN.

Why this answer

The vectorSearch object in Azure AI Search contains algorithm configurations and vector profiles.

135
MCQeasy

You are building an event-driven AI workflow where an Azure Event Grid event triggers an Azure Function. To ensure that the function handles the Event Grid handshake validation handshake correctly when the subscription is created, what must your function code include?

A.An Event Hubs consumer group checkpoint store configuration.
B.A Service Bus session lock renewal loop.
C.Code to handle the SubscriptionValidationEvent and return the validation code.
D.An AMQP listener connection string.
AnswerC

Event Grid sends a validation handshake request containing a validation code, which the webhook must echo back to prove ownership.

Why this answer

When validating an Event Grid subscription, your webhook must respond to the `Microsoft.EventGrid.SubscriptionValidationEvent` by echoing back the validation code.

136
MCQeasy

Your application publishes events to an Azure Event Grid custom topic. You need to inspect the operational health and delivery success metrics of your event subscriptions. Where should you view these metrics natively in the Azure Portal?

A.The Metrics blade of the Event Grid Topic or Domain in the Azure Portal
B.The Azure Storage Account Access Logs
C.The Service Bus Explorer tool
D.The App Service Kudu diagnostic console
AnswerA

Azure Monitor integrates directly into Azure Event Grid resources, providing native charts for delivery metrics.

Why this answer

Azure Monitor and Event Grid's built-in Metrics blade provide visual charts for published events, delivery success, delivery failure, and latency.

137
Multi-Selecteasy

Which THREE of the following are components of a standard Dockerfile for an AI application?

Select 3 answers
A.CLUSTER_CREATE.
B.RUN (Installation of libraries/tools).
C.CMD/ENTRYPOINT (Process command).
D.FROM (Base image).
E.AZURE_LOGIN (Manual login).
AnswersB, C, D

Setup steps.

Why this answer

Base image, dependency installation, and the application entrypoint are core components.

138
MCQhard

You are running a GPU-intensive AI workload in AKS. You want to ensure the pods are scheduled only on nodes that have GPUs. How do you enforce this?

A.Use a DaemonSet.
B.Use a nodeSelector for 'sku=gpu'.
C.Define a Resource Request for RAM.
D.Add a Kubernetes Taint to the GPU nodes.
AnswerB

nodeSelectors ensure the pod only lands on labeled GPU nodes.

Why this answer

Using nodeSelectors or nodeAffinity is the standard Kubernetes way to restrict pod placement to specific node types.

139
MCQmedium

You are building an event-driven application where messages sent to an Azure Service Bus queue must not be processed until a specific date and time in the future (e.g., 2 hours from now). What property should you set on the outgoing message?

A.TimeToLive
B.LockDuration
C.ScheduledEnqueueTimeUtc
D.SequenceNumber
AnswerC

ScheduledEnqueueTimeUtc delays message availability in the queue until the designated timestamp.

Why this answer

Azure Service Bus supports scheduled messaging. You can set the ScheduledEnqueueTimeUtc property on a message so that it becomes available for consumption only at the specified time.

140
MCQmedium

You are configuring an Azure AI Search index with vector fields. You need to ensure that filtering operations (such as matching a category ID) are executed with 100% precision before or alongside the vector search. Which vector filter mode should you choose?

A.preFilter mode
B.approximateFilter mode
C.hybridFilter mode
D.postFilter mode
AnswerA

Pre-filter mode applies the filter first, guaranteeing precision for metadata constraints during vector search.

Why this answer

Pre-filtering (preFilter) applies the OData filter before the vector search execution, ensuring that only documents matching the filter are considered in the vector similarity calculation.

141
MCQmedium

You are using Azure OpenAI Service to generate embeddings for your documents before storing them in Azure Cosmos DB for NoSQL. The embedding model outputs vectors with a length of 1536. When defining the vector embedding policy in Cosmos DB, what value should you specify for the dimensions property?

A.3072
B.1536
C.512
D.768
AnswerB

The dimensions property must be set to 1536 to match the model output.

Why this answer

The dimensions property in the Azure Cosmos DB vector embedding policy must exactly match the output dimensions of the embedding model used (1536 for text-embedding-ada-002).

142
Multi-Selecthard

You are configuring enterprise networking for an AKS cluster running sensitive AI models. Which THREE networking features should you implement for cluster security?

Select 3 answers
A.Public IP assignment to every worker node
B.Azure Firewall or user-defined routes for outbound egress filtering
C.Disabling all internal kube-dns resolution
D.Azure CNI Network Policies for pod-level traffic restriction
E.Private AKS API server endpoint
AnswersB, D, E

Egress filtering controls where cluster nodes can send outbound traffic.

Why this answer

Securing AKS network traffic involves Azure CNI network policies, private cluster API server endpoints, and outbound traffic filtering via Azure Firewall.

143
MCQeasy

Which tool in Azure Portal allows you to test search queries, inspect index schemas, and view JSON responses for Azure AI Search?

A.Metrics Advisor
B.Data Explorer
C.Log Analytics
D.Search explorer
AnswerD

Search explorer is the built-in Azure Portal tool for testing search queries and inspecting indexes.

Why this answer

The Search Explorer in the Azure Portal provides a built-in UI interface for testing queries and inspecting indices in Azure AI Search.

144
MCQeasy

You want to receive an email notification whenever monthly spending on your Azure OpenAI Service exceeds $5,000. Which Azure feature should you configure?

A.Azure Service Health incident alert
B.Cost Management budget with an alert threshold set at the desired dollar amount
C.Azure Advisor security recommendation
D.Azure Monitor Metric alert on CPU utilization
AnswerB

Correct. Budgets enable setting monetary thresholds and automatic email notifications when reached.

Why this answer

Azure Cost Management budgets allow you to define spending thresholds and attach action groups or email recipients for notifications.

145
Multi-Selectmedium

Which TWO of the following are valid ways to reduce the size of a container image?

Select 2 answers
A.Use the 'latest' tag for all dependencies.
B.Use multi-stage Docker builds.
C.Use a smaller base OS image (e.g., Alpine or Distroless).
D.Enable ACR Geo-replication.
E.Install all dependencies in one RUN command.
AnswersB, C

Discards unnecessary build artifacts.

Why this answer

Multi-stage builds and using lighter base images are the two most effective strategies for image size reduction.

146
MCQhard

Your containerized AI application requires a specific version of a kernel driver that is not installed on the AKS nodes. What is the most efficient way to manage this?

A.Mount the /proc filesystem as read-write.
B.Run the application as root.
C.Use a privileged InitContainer to load the driver.
D.Rebuild the AKS cluster.
AnswerC

This allows you to prepare the node environment before the main application starts.

Why this answer

Using an InitContainer with appropriate privileges to install the driver on the host is a common pattern for specific hardware needs.

147
MCQeasy

You are developing a serverless application using Azure Functions that reacts to Azure Blob Storage creation events. Which event schema format should your function code expect by default when triggered by an Event Grid subscription?

A.Azure Event Grid schema
B.Apache Kafka record batch schema
C.AMQP 1.0 message envelope
D.SOAP XML envelope
AnswerA

Azure services natively publish events using the Event Grid event schema unless configured otherwise.

Why this answer

Event Grid sends events using either the CloudEvents 1.0 schema or the Event Grid schema. The default Azure Event Grid schema includes fields like id, topic, subject, data, eventType, and eventTime.

148
Multi-Selecthard

You need to secure an Azure Machine Learning workspace against data exfiltration. Which THREE configurations should you implement?

Select 3 answers
A.Disable public network access on the Azure Machine Learning workspace.
B.Assign the Contributor role to all users on the subscription level.
C.Attach public IP addresses to all compute instances for rapid troubleshooting.
D.Configure a managed virtual network for the workspace with approved outbound rules.
E.Enable private endpoints for all dependent services such as Azure Storage, Key Vault, and Azure Container Registry.
AnswersA, D, E

Disabling public access ensures the workspace is only reachable privately.

Why this answer

Data exfiltration prevention requires disabling public outbound access, configuring workspace outbound rules/managed virtual networks, and using private endpoints for dependent storage accounts.

149
MCQmedium

You are writing a query in Azure Cosmos DB for NoSQL that sorts results by vector similarity and also filters results by a category property. How must you order the clauses in your SQL statement?

A.The WHERE clause must come before the ORDER BY VectorDistance() clause
B.VectorDistance must be placed in the SELECT clause instead of ORDER BY
C.WHERE and ORDER BY clauses cannot be used in the same query when using vectors
D.The ORDER BY clause must come before the WHERE clause
AnswerA

Cosmos DB SQL syntax requires filtering via WHERE before sorting via ORDER BY.

Why this answer

In Azure Cosmos DB, when using VectorDistance in an ORDER BY clause along with a WHERE filter, the WHERE clause must precede the ORDER BY clause.

150
MCQeasy

You need to monitor the monthly spending on Azure OpenAI token consumption and receive an alert when expenditures exceed a predefined threshold. Which tool should you use?

A.Azure Cost Management Budgets and Alerts
B.Log Analytics Workspace usage and estimated costs view
C.Application Insights availability tests
D.Azure Security Center compliance dashboard
AnswerA

Budgets allow you to track costs against a defined financial threshold and trigger action groups.

Why this answer

Azure Budgets in Cost Management allow you to set spending thresholds and automated email alerts when thresholds are reached.

Page 1

Page 2 of 7

Page 3

All pages