Microsoft Certified: Azure AI Cloud Developer Associate (AI-200) (AI-200) (AI-200) — Questions 151–225

You are configuring diagnostic logging for an enterprise Azure OpenAI Service deployment. You need to forward logs to multiple destinations for security analysis and archiving. Which THREE of the following destinations are supported by Azure Monitor diagnostic settings? (Choose three)

You are designing a multi-tenant AI document processing system. Tenants upload documents, and events are dispatched via Azure Event Grid. You need to ensure that tenant isolation is maintained and that events are securely delivered to tenant-specific webhook endpoints using Azure AD (Entra ID) authentication. Which authentication mechanism should you configure on the Event Grid subscription?

Which TWO of the following are valid autoscaling options for AKS?

In Azure Cosmos DB for NoSQL, which property in the container definition specifies the path to the property containing the vector array within each document?

Your enterprise AI solution utilizes Azure Service Bus Premium. Which THREE features are exclusively available in the Premium messaging tier (or require Premium) compared to the Standard tier? Each correct answer represents a differentiating feature.

You are implementing distributed tracing across an event-driven AI workflow that passes messages from Azure Service Bus to Azure Functions, and finally to an Azure Cosmos DB database. Which mechanism should you use to propagate correlation context between these services?

You need to deploy a real-time object detection model inside an Azure Container App. The application requires immediate scale-out when the queue length of incoming image processing requests exceeds a threshold. Which scaling rule type should you configure?

An enterprise application uses Azure AI Search and needs to authenticate securely to an Azure OpenAI backend without exposing credentials in connection strings. What is the recommended approach?

You are deploying a Python Flask API that wraps an ONNX runtime model to Azure Container Instances (ACI). The container needs to expose port 5000 externally. Which parameter must you specify when creating the container group?

You are troubleshooting a containerized AI model running in an Azure Container App that crashes immediately upon startup with an exit code indicating an Out Of Memory (OOM) error. You need to inspect the container resource allocations. Where can you adjust the memory allocation for the container?

You are troubleshooting a Python application that fails to connect to Azure Key Vault using a managed identity. You want to inspect the exact exception stack trace and identify whether the managed identity token request failed. Where should you look in your local development or cloud diagnostics?

You are configuring an Azure Service Bus queue. Business requirements state that messages must automatically expire if they are not consumed within 30 minutes. Which property should you set on the queue definition?

You want to view an end-to-end distributed trace of a user request flowing from an Azure Front Door through an API Management gateway, into an Azure Function, and finally to an Azure OpenAI model call. Which Application Insights feature visualizes this entire call chain and highlights latency bottlenecks?

You are building an event-driven workflow where an external partner application needs to send custom events to your Azure backend. You decide to use Azure Event Grid Custom Topics. When the partner publishes an event, which event schema format must the JSON payload adhere to?

You are deploying a custom text-embedding model container to Azure Container Apps. You need to configure scaling rules so that the container scales out based on incoming HTTP traffic and Azure Service Bus queue length. Which TWO scalers can you configure? Each correct answer presents part of the solution.

You are writing a Python application using the Azure Cosmos DB Python SDK to perform a vector search. You execute a parameterized SQL query containing VectorDistance(). What must be passed as a query parameter for the VectorDistance function to evaluate correctly against the container's vector property?

You are running a distributed AI training job on AKS using MPI. Which network configuration is critical for performance?

You need to view real-time log streams from an Azure Container App running a custom LangChain agent. Which Azure CLI command should you execute?

Your enterprise system uses Azure Service Bus. Which TWO mechanisms can you implement to handle 'poison' or repeatedly failing messages? (Choose two)

You are implementing an asynchronous AI processing pipeline using Azure Event Hubs. Multiple worker instances consume events from the same Event Hub. To prevent duplicate processing and ensure load balancing across workers, how should you manage consumer checkpoints?

Which TWO Azure services or features can be used to securely store and reference secrets such as connection strings for an Azure AI Search service without hardcoding them?

You are writing a Python worker application that consumes messages from an Azure Service Bus queue. To prevent message loss during unexpected application crashes, you need to ensure that messages are locked while being processed and only deleted from the queue after successful processing. Which receive mode should you use?

You are designing a high-scale vector search architecture using Azure AI Search. Which THREE operational and architectural best practices should you follow to ensure optimal performance and cost-efficiency? (Choose three)

You are optimizing an Azure AI Search vector index with millions of documents. Users report high latency during vector queries. You decide to implement vector compression to reduce memory footprint and improve search throughput. Which compression method is natively supported in Azure AI Search?

You are writing a Python script to query an Azure AI Search index using the azure-search-documents SDK. You want to retrieve both vector matches and keyword matches using hybrid search. Which class should you instantiate to represent the vector query?

You are troubleshooting a Python application that uses Azure SDK libraries to interact with Azure AI services. The application is flooding Log Analytics with excessive telemetry, causing unexpected cost increases. You want to dynamically adjust the sampling rate of Application Insights without redeploying application code. How can you achieve this?

You are designing an AI application that needs to route real-time telemetry events from thousands of IoT devices to multiple downstream serverless functions simultaneously. Which Azure service should you use as the event broker?

You are configuring network security for an Azure AI Search service that indexes data from an Azure SQL Database. Both services are in the same region. You want to ensure that Azure AI Search can securely connect to Azure SQL Database without allowing inbound traffic from any public IP addresses. Which feature should you use on Azure SQL Database?

You are designing an AI search architecture that requires handling millions of documents with sub-second vector similarity queries. You choose Azure AI Search. How does Azure AI Search ensure high query throughput for vector indexes?

Your Python-based AI service runs on an Azure Virtual Machine and connects to Azure OpenAI. To adhere to security best practices, you decide to eliminate storage of credentials on the VM disk by enabling a system-assigned managed identity on the virtual machine. How does your Python code obtain an access token using this managed identity?

Your company policy requires all outbound traffic from an Azure Machine Learning workspace to pass through a centralized firewall. Which feature must be implemented?

Your Azure AI application encounters transient network errors when calling cognitive services. Which TWO strategies should you implement in your code or architecture to handle these failures gracefully? (Choose two)

Your application uses Azure Event Grid to deliver events to an Azure Function webhook. Due to a downstream database outage, the Azure Function returns HTTP 500 errors. How does Event Grid handle event delivery when the endpoint fails?

You are securing an Azure AI Search service. Which THREE of the following actions are recommended for implementing a robust security posture? (Choose THREE)

Your development team wants to trace downstream calls made by a Semantic Kernel agent to Azure OpenAI and an external plugin. Which SDK package and feature should you integrate into your .NET application?

Your production Azure Machine Learning inference endpoint is failing due to unauthorized access attempts. You decide to use Managed Identities to secure the connection to an Azure Key Vault. What is the correct sequence of operations to ensure the scoring script can retrieve secrets?

You are designing an AI architecture that stores vector embeddings in Azure Cosmos DB for NoSQL. You need to implement role-based access control (RBAC) so that specific application microservices can only execute read-only queries against the database without having permission to write or delete documents. How should you configure this?

You are configuring continuous deployment for an AI model container using Azure DevOps and Azure Container Registry (ACR). You need to ensure that when a new container image is pushed to ACR, an event triggers an automated webhook that notifies an Azure Function to run post-deployment validation tests. Which event type should you subscribe to in the ACR webhook configuration?

You are planning the disaster recovery and high availability strategy for an Azure AI Search service storing critical vector indexes for an AI assistant. Which THREE practices should you implement? (Choose three)

You manage an AKS cluster running high-throughput AI inference pods. During traffic spikes, pods experience latency due to slow container image pulls from Azure Container Registry (ACR). You want to optimize image pull performance across cluster nodes. Which feature should you enable?

Your enterprise AI system processes sensitive Personal Identifiable Information (PII). Compliance regulations require that audit logs capturing who accessed the AI endpoints must be retained immutably for 5 years without possibility of deletion. Where should you configure this immutability policy?

You want to monitor the health of your AI services. Which TWO of the following can be configured to alert you automatically when model latency exceeds a predefined threshold? (Choose TWO)

An enterprise application calls multiple Azure AI Language services. You need to trace requests across multiple distributed microservices to diagnose high latency issues. Which Azure Monitor capability should you implement?

You are managing an Azure AI Search index that uses integrated vectorization with Azure OpenAI. When a user sends a query string, you want Azure AI Search to automatically vectorize the query text before performing the vector search. Which feature must you configure in the index schema?

Your team is using managed identities to connect an Azure App Service web app to an Azure OpenAI resource. The connection fails with a 403 Forbidden error. What is the most likely root cause?

Your AI processing pipeline requires high-throughput streaming ingestion and retention of telemetry data. Which THREE features or capabilities are native to Azure Event Hubs? Each correct answer represents a complete capability.

Which THREE of the following are common reasons for a container image pull failure in AKS?

You are containerizing a large language model (LLM) inference API to run in Azure Container Apps. The model weights exceed 15 GB and cause container startup timeouts because the image takes too long to pull from Azure Container Registry (ACR). You need to optimize the container startup performance without reducing the model size. What is the best approach?

When troubleshooting performance issues in an enterprise Azure OpenAI deployment using Application Insights, which TWO Kusto Query Language (KQL) queries or techniques help identify slow model responses?

Your application publishes messages to an Azure Service Bus queue. Which TWO methods can a C# .NET worker use to settle a message after successful processing? (Choose two)

You are implementing vector search using Azure Cosmos DB for MongoDB (vCore). Which TWO distance metrics are valid options when creating a vector search index? Choose two.

You are troubleshooting a custom LLM application deployed to an Azure Kubernetes Service (AKS) cluster. Requests are failing intermittently with HTTP 429 errors from Azure OpenAI. You need to implement a resilient observability and retry strategy using Azure Monitor. Which metric should you monitor to identify throttling?

You are designing a secure enterprise generative AI platform using Azure AI Search and Azure OpenAI. Which THREE security practices should you implement to protect sensitive data and access? (Choose three)

Your organization requires that all data transmitted to an Azure Service Bus namespace is encrypted in transit using Transport Layer Security (TLS). What is the minimum required TLS version enforced by modern Azure Service Bus secure baselines?

Your development team wants to push custom Docker images containing fine-tuned open-source LLMs to a secure, private registry hosted on Azure. Which Azure service should you use to store and manage these container images?

You need to deploy a microservice application that consists of an API gateway and an AI model inference container. The solution must scale automatically based on HTTP traffic and support zero scaling when idle to reduce costs, without requiring complex Kubernetes cluster management. Which service is best suited for this?

You have deployed an AI model in Azure Machine Learning. You want to set up an alert that triggers an email to the operations team whenever the CPU utilization of the compute instance exceeds 90% for longer than 15 minutes. Which Azure Monitor feature should you configure?

Which THREE of the following items should be configured to ensure your AI workload in AKS is observable?

You are configuring authentication between an Azure Container App running an AI model and an Azure OpenAI resource. To adhere to security best practices, you must avoid storing API keys in environment variables or code. How should you configure this?

You want to set up an alert when the availability of your Azure AI custom model endpoint drops below 99%. Which Azure service should you use?

You need to deploy a quick, stateless AI data processing script packaged in a container image without setting up Kubernetes or Container Apps. Which Azure service offers the fastest deployment for a single container instance?

Which TWO actions can you perform using Azure Container Registry Tasks (ACR Tasks)?

Your organization uses Azure Event Grid to route IoT device lifecycle events. You want to ensure that events published to your custom topic are encrypted at rest using Microsoft-managed keys by default. Which action is required to enable this?

You are architecting an AI-driven video analytics pipeline using Azure Event Hubs. You need to ensure that frames belonging to the exact same video session are processed in strict chronological order by the same backend stream analytics worker. How should you partition your Event Hub?

Your team is building an AI document parser. When a user uploads a PDF to Azure Blob Storage, an event triggers an Azure Function. You want to view the delivery success rate and latency metrics of these events in the Azure Portal. Which Azure service dashboard provides these metrics out-of-the-box?

An AKS cluster is configured with KEDA for autoscaling an AI inferencing service based on Azure Queue Storage length. The pods fail to scale. Which component should you inspect first?

Your organization uses Azure Event Hubs to ingest telemetry from smart meters. You want to grant an external analytics vendor read-only access to the Event Hub data without sharing your master connection string or account keys. What should you create?

You are deploying a custom AI model container to Azure Container Apps. The container listens on port 8080 and requires health probes to verify readiness before routing traffic. How should you configure the probes?

You are troubleshooting a live AI web application where users report intermittent 504 Gateway Timeout errors when submitting large text prompts to a custom model endpoint. You want to check if the backend inference container is timing out or crashing. Where should you examine container-level stdout/stderr logs in Azure Container Apps?

You want to view real-time standard output logs from a container running in Azure Container Instances named 'ai-inferencing-aci'. Which Azure CLI command should you run?

You are designing the data architecture for an AI-powered document search application. You choose Azure AI Search because you need multi-lingual support, faceted navigation, and vector search. What is the maximum number of vector fields allowed per index in Azure AI Search?

You are auditing an Azure AI platform for security vulnerabilities. You want to ensure that secrets, connection strings, and certificates are handled in compliance with security best practices. Which THREE of the following practices should you enforce? (Choose three)

You deploy an AI inferencing service to an Azure Kubernetes Service (AKS) cluster. The service uses an ONNX Runtime container. Users report intermittent 504 Gateway Timeouts during peak batch request loads. You notice that the application pods are being terminated due to Out-Of-Memory (OOM) errors during heavy inference loads. How should you resolve this issue in your Kubernetes deployment manifest?

You need to view the logs of a container that recently crashed in an AKS cluster. Which command is used?

Your enterprise application uses Azure Service Bus Topics. A specific downstream billing system needs to receive only messages where the 'Region' property in the message application properties equals 'NorthAmerica'. What should you create on the Service Bus subscription?