Microsoft Certified: Azure AI Cloud Developer Associate (AI-200) (AI-200) (AI-200) — Questions 226–300

You are configuring an Azure OpenAI service instance. You need to ensure that the service is only accessible from your corporate virtual network and that public internet access is completely disabled. Which configuration should you implement?

You are configuring role-based access control for an Azure AI Search service. A data scientist needs to index content and query documents, but must not be permitted to manage service-level keys or change admin configurations. Which built-in role should you assign?

You are designing a high-performance AI inference architecture on Azure Kubernetes Service (AKS). Which THREE AKS features or configurations should you incorporate to optimize performance and resource utilization? (Choose three.)

You are configuring an Azure Event Grid system to route custom application events to an Azure Function webhook. To ensure secure communication, you decide to use Event Grid custom topics with Azure AD authentication. Which configuration step is required on the Azure Function endpoint to authenticate incoming events from Event Grid?

Your Azure Event Hubs namespace is experiencing high throughput spikes from AI inference nodes. You notice that some client producers are receiving 'QuotaExceededException' errors. What is the root cause and how should you remediate it?

You are deploying a model that requires a specific version of a non-standard OS library. You want to ensure the build environment is consistent across your team. What should you use?

You are designing a multi-tenant enterprise RAG system using Azure AI Search. Each tenant requires isolated document retrieval. Which feature should you implement to enforce data security while leveraging vector search?

An AI inference pipeline uses Azure Event Hubs to ingest telemetry. Your consumer application needs to read events starting from a specific timestamp to replay historical data for model retraining. Which feature of Event Hubs enables this capability?

You are deploying a web application container to Azure Container Apps and want to enable external HTTPS traffic. Which ingress setting must you configure?

You are designing an application that requires low-latency vector search for a high-traffic AI chatbot. You need to ensure the vector index remains performant as the dataset grows into millions of documents. Which index configuration in Azure AI Search should you implement to optimize for speed over absolute recall accuracy?

You need to automate the deployment of containerized AI models whenever a new image is pushed to ACR. What is the most efficient Azure-native tool for this trigger?

Your team is choosing between using Azure AI Search or Cosmos DB for NoSQL for a new project. Which TWO factors are key considerations that favor Azure AI Search?

You have an Azure OpenAI model deployment and need to monitor token consumption metrics over time to forecast future usage. Which tool provides pre-built charts for prompt and completion token counts?

You are setting up monitoring for a custom machine learning scoring script running inside an Azure Container Instance. You want to track custom metrics such as inference prediction confidence scores over time in Application Insights. How should you record these custom metrics in your Python scoring script?

Your application uses Cosmos DB for NoSQL to store product metadata and vectors. You need to perform a vector search that combines similarity scores with specific filter criteria on the 'category' field. How should you define your index policy to support this?

You want to ensure your AI inference service is highly available across multiple regions. What is the recommended approach for container distribution?

You are designing a data architecture on Azure where embeddings are generated offline by an Azure Databricks pipeline and stored in Azure AI Search. You want to minimize ingestion latency and optimize throughput when uploading millions of pre-computed vectors. Which client library API pattern should you use?

Your application publishes custom events to an Azure Event Grid topic. You want to ensure that the webhook endpoint receiving these events can verify that the request genuinely originated from Event Grid. Which validation mechanism should your webhook implement?

Which TWO of the following are true about Azure Container Apps?

When configuring an Azure Container Instances container group, which TWO properties can you define?

You are monitoring a custom AI application using Application Insights. You need to track the duration of specific LLM prompt processing calls. Which telemetry type should you use to record this performance data?

You are configuring GPU time-slicing on an AKS cluster to maximize GPU utilization for multiple lightweight AI inference containers sharing a single NVIDIA A100 GPU. Where must you define the time-slicing configuration profile?

Your data science team uses Azure Machine Learning notebooks. To prevent data exfiltration, you need to ensure that users cannot download datasets or trained model artifacts directly from the workspace to their local corporate laptops. Which feature should you configure?

You are designing an AI application architecture where embeddings are generated on-the-fly by an Azure Function and stored in Azure Cosmos DB for NoSQL. During peak load, the Azure Function times out due to rate limits (HTTP 429) from Azure OpenAI Service. What design pattern should you implement to make the ingestion pipeline resilient?

Your enterprise AI system uses Azure Service Bus. A background job processes messages from a subscription. If an exception occurs, the message must be abandoned, but you want to ensure that after 5 failed delivery attempts, the message is automatically moved to a dead-letter queue without custom retry logic in code. How should you configure this?

When configuring vector search in Azure AI Search, which TWO parameters must be defined when creating a vector profile? (Choose two)

You are designing an enterprise RAG application that stores vector embeddings in Azure AI Search. You want to ensure that if the primary Azure region goes down, your search service automatically fails over with minimal data loss. How should you design your geo-replication strategy?

You are configuring network policies in an AKS cluster to isolate your AI inference pods from other namespaces. You notice that traffic is still flowing between namespaces despite applying a NetworkPolicy. What is the most likely cause?

You are deploying an Azure OpenAI Service resource in a secured virtual network. You need to ensure that client applications inside a peered virtual network can access the Azure OpenAI endpoint without traversing the public internet, while completely blocking public network access. Which feature should you configure?

When designing an Azure Event Hubs streaming pipeline for AI telemetry, which THREE components or configurations are required to consume events reliably using the EventProcessorClient? Each correct answer represents a necessary element.

Which TWO of the following can be used to manage secrets in a containerized AI workload?

Your application sends messages to an Azure Service Bus queue. A downstream worker needs to postpone processing of a specific message until a later time without losing its place in the queue or dead-lettering it. What method should the worker invoke?

You are integrating an Azure Event Hubs namespace with Azure Machine Learning for real-time model training. You need to archive raw telemetry data into Azure Data Lake Storage Gen2 in Apache Parquet format without writing custom code. Which feature should you enable?

Which type of registry is most suitable for storing images that are shared across an entire organization?

Your organization wants to ensure that all Azure AI development follows strict security and observability standards. Which TWO of the following practices should be enforced across teams? (Choose two)

You are configuring data ingestion into an Azure AI Search index using an Azure AI Search indexer. The source data resides in Azure Blob Storage and consists of PDF documents. You want to chunk the documents and generate embeddings during ingestion without writing custom orchestration code. Which feature should you configure?

An Azure Machine Learning model is deployed to a Kubernetes cluster. Users report intermittent 503 errors. You suspect the underlying compute nodes are overloaded. Where should you look first to correlate these errors with infrastructure health?

Your team is evaluating Azure Container Apps versus Azure Kubernetes Service (AKS) for hosting containerized AI workloads. Which TWO characteristics are advantages of Azure Container Apps over standard AKS? (Choose two.)

An enterprise AI application experiences intermittent HTTP 429 (Too Many Requests) errors when calling Azure OpenAI Service during peak hours. You need to analyze the exact token consumption trends and throttling patterns over the past week. Where should you look first in Azure Monitor?

You are designing an MLOps pipeline on Azure Kubernetes Service (AKS) for a computer vision model. You need to configure GPU sharing among multiple inference pods on the same node to optimize cost. Which TWO actions should you take? Each correct answer presents part of the solution.

You are investigating performance degradation in an Azure Machine Learning inference pipeline. Which TWO of the following steps are appropriate for diagnosing the bottleneck? (Choose TWO)

You are debugging a Python application integrated with Application Insights. You notice that custom telemetry events generated in a background worker thread are not appearing in Application Insights. What is the most likely cause of this issue?

When managing Azure Container Registry (ACR), administrators can use ACR Tasks to automate tasks. Which TWO scenarios are valid use cases for ACR Tasks? (Choose two.)

You are designing a disaster recovery and backup strategy for Azure Cosmos DB for NoSQL storing vector embeddings. Which THREE backup options or capabilities are available? (Choose three)

You are troubleshooting a connection issue where an on-premises worker application cannot connect to an Azure Event Hubs namespace over AMQP port 5671 due to strict corporate firewall rules. Only port 443 outbound traffic is allowed. How can you configure the client connection to bypass this restriction?

Which Azure AI Search API parameter allows you to specify a vector query alongside traditional keyword search terms when executing a hybrid search?

Which THREE features are common to both Azure AI Search and Azure Cosmos DB for NoSQL when performing vector search?

You have a large AI model file (5GB) that needs to be loaded into your container at startup. What is the recommended way to handle this?

You are architecting a real-time anomaly detection system. Sensor data is ingested into an Azure Event Hub. Due to intermittent network issues between the IoT gateway and Azure, duplicate events are occasionally sent. You need downstream Stream Analytics to process each unique event exactly once within a sliding window. Which Event Hub property should you leverage?

You are designing an enterprise messaging solution using Azure Service Bus. You need to ensure that messages published within a transaction (involving multiple messages sent to different queues) either all succeed or all fail together. What feature should you use?

You are reviewing security logs in Azure Key Vault and notice unexpected access attempts from an unrecognized IP address. You need to immediately revoke all active Azure Active Directory tokens issued to a specific compromised user or service principal across your Azure AI applications. What action should you take?

You need to inspect the environment variables and configuration settings of a running container group in Azure Container Instances. Which Azure CLI command should you use?

When configuring vector search in Azure Cosmos DB for NoSQL, which TWO properties must be defined within the container's vector embedding policy? Choose two.

You are designing an enterprise search architecture that combines Azure AI Search and Azure OpenAI. Which THREE strategies help optimize hybrid search relevance and retrieval quality? Choose three.

You are troubleshooting a high memory consumption issue on an Azure AI Search service hosting large vector indexes. Which index configuration choice contributes most directly to high memory pressure when using the HNSW algorithm?

You are integrating Azure Event Hubs with Apache Spark on Azure Databricks for real-time AI model scoring. You need to configure the Spark connector to read from all partitions of the Event Hub efficiently without missing records or creating duplicate processing bottlenecks. Which consumer property is critical to configure correctly?

You are configuring secure image signing and verification for your AI containers using Azure Container Registry and Notation. Which feature enables cryptographically signed container images?

Your enterprise application architecture incorporates Azure Cosmos DB for NoSQL as the primary operational data store and Azure AI Search as the vector index for semantic search. Which THREE mechanisms can you use to keep the Azure AI Search vector index synchronized with changes in Azure Cosmos DB?

You are configuring network security for an enterprise Azure Service Bus Premium namespace. Which THREE networking features can you configure to secure the namespace? (Choose three)

Your application consumes messages from an Azure Service Bus queue using PeekLock mode. Which THREE actions can your worker code perform on a received message object? Each correct answer represents a valid Service Bus SDK operation.

You are managing multiple containerized AI models in AKS. You want to implement a service mesh to handle traffic splitting and mTLS. Which tool should you integrate?

Your containerized AI application needs to access sensitive API keys. What is the most secure way to provide these to your application in Azure Container Apps?

You are running an AI inference workload in an Azure Kubernetes Service (AKS) cluster. The pods require access to an Azure Machine Learning workspace data store via managed identity without storing credentials in code. Which Kubernetes feature should you configure?

Your team is building an AI solution that processes thousands of images uploaded to Azure Blob Storage daily. Each image upload must trigger an immediate Azure Function to invoke Azure Cognitive Services for metadata extraction. Which event-driven messaging service should you choose for this near real-time pub/sub architecture?

You need to prevent accidental deletion of a production Azure OpenAI resource that contains critical customer deployment configurations. Which Azure resource lock configuration should you apply?

You are optimizing an enterprise search architecture using Azure AI Search. Which THREE mechanisms help control latency and resource consumption during heavy vector query loads? (Choose three)

You are designing the data storage and indexing strategy for a multi-tenant AI search solution on Azure. Which TWO architectural practices should you implement to optimize vector search performance and tenant isolation in Azure AI Search?

Which Azure service provides cloud-scale vector search backed by either HNSW or DiskANN algorithms alongside managed NoSQL capabilities?

You are configuring vector search options in Azure Cosmos DB for NoSQL. Which TWO distance metrics are supported when defining a vector embedding policy? (Choose two)

You are optimizing an AI model container image size. Which technique is most effective for reducing the footprint of an image based on a large Python deep learning framework?

You are designing an operational dashboard in Azure Monitor. Which TWO visualization components can you include in an Azure Workbook? (Choose two)

You are troubleshooting an AI inference container in Azure Container Apps that fails to start because it cannot pull the base image from Azure Container Registry. Authentication fails with an unauthorized error. What is the recommended way to grant the Container App access to ACR?

You are deploying a distributed PyTorch training job across multiple nodes in an Azure Kubernetes Service (AKS) cluster. Which mechanism should you use to facilitate high-speed, low-latency inter-node communication required for gradient synchronization?

You want to ensure that your Azure AI infrastructure costs are properly attributed to different business departments. Which TWO features should you configure? (Choose two)

You have an AI model container that takes 10 seconds to load weights into memory upon startup. Users report HTTP 503 errors immediately after deployment because traffic is routed to the container before it is ready. Which probe should you configure?