Microsoft Certified: Azure AI Cloud Developer Associate (AI-200) (AI-200) (AI-200) — Questions 301–375

Your application publishes events to an Azure Event Grid custom topic. You need to restrict publishing access so that only clients with a specific User-Assigned Managed Identity can send events. How should you secure the topic?

You need to ensure that PII (Personally Identifiable Information) detected in your AI application logs is automatically masked before it is persisted in Log Analytics. What is the recommended approach?

Your data science team pushes container images to Azure Container Registry (ACR). You need to ensure that every image pushed is automatically scanned for known vulnerabilities before being deployed to production. Which ACR feature should you enable?

You are implementing vector search in Azure AI Search using the REST API. You want to execute a pure vector query without any keyword matching. What parameter must be omitted or left empty in your query request payload?

You are deploying an AI model to AKS that requires a specific kernel module. What is the recommended strategy to ensure the node has this module?

You are configuring an Azure AI Search vector index. Which TWO parameters are part of the HNSW algorithm configuration settings? Choose two.

Which THREE of the following are benefits of using ACR Tasks for containerized AI workloads?

Your company's security policy requires that all Azure Event Grid namespaces and topics reside within a virtual network and are not accessible over the public internet. Which feature should you implement?

When migrating data into Azure AI Search for vector search, you encounter issues with ingestion. Which TWO of the following are valid reasons why an indexer might fail to ingest vector data?

You need to analyze log queries across multiple AI applications and infrastructure components to identify custom performance bottlenecks. Which query language is used in Azure Monitor Log Analytics to write queries against collected log data?

You are optimizing a large language model container inference deployment on AKS using GPU-enabled nodes (NC-series). The inference server experiences frequent out-of-memory errors on the GPU device itself during high context lengths. Which Kubernetes configuration metric should you monitor and alert on?

Which Azure AI Search field property indicates whether the contents of a field can be returned in search query result documents?

You are implementing a multi-modal AI application that searches across both text descriptions and product images stored in Azure AI Search. Which feature allows you to query both modalities within a unified search index?

You need to monitor the monthly cost of an Azure AI Document Intelligence resource to ensure it does not exceed a specified budget. Where should you configure an automated notification when the cost reaches 80% of the budget?

You are troubleshooting a slow-performing Azure AI Search service that indexes millions of documents. You want to check performance counters and query execution metrics using Azure Monitor. Which THREE of the following metrics or log categories are available for Azure AI Search? (Choose three)

You need to store sensitive database connection strings and AI API keys used by containerized applications running in Azure Container Apps. Which feature should you use to securely store and reference these values?

You are optimizing search performance in Azure AI Search. You notice that vector queries are consuming excessive memory and slowing down. You decide to enable exhaustive k-NN fallback for specific queries. What does exhaustive k-NN do?

Which command-line interface tool is used to deploy and manage container images directly to Azure Container Registry?

You are managing an AKS cluster and need to ensure that GPU driver updates do not disrupt running AI inference workloads. Which AKS feature helps manage GPU operator lifecycle and driver installation?

You are architecting a resilient, high-throughput AI telemetry ingestion pipeline using Azure Event Hubs. The pipeline must support multiple independent downstream AI consumer applications reading the same telemetry stream at different speeds without interfering with one another. Which TWO architectural components or features must you configure? (Choose two)

You are configuring an Azure Container Apps environment with a custom Virtual Network. Your AI containers need to securely connect to an Azure SQL Database that is secured behind a private endpoint. Which configuration is required on the Container Apps environment?

You are configuring semantic ranking in Azure AI Search. You need to specify which fields in your index contain the title and content that the semantic ranker should analyze. Where do you configure these field mappings?

Your machine learning engineering team needs to run training jobs on Azure Machine Learning compute clusters. To minimize costs during off-peak hours, you need to configure the compute cluster to automatically scale down to zero nodes when no jobs are queued, and scale up when jobs are submitted. What setting should you configure on the compute cluster?

You are configuring comprehensive observability for an intelligent application built on Azure AI Document Intelligence and Azure OpenAI. Which THREE telemetry types or tools should you configure in Application Insights to capture complete operational insights? (Choose three)

You are configuring an Azure AI Search index schema via the REST API. You need to define a field that will hold a 1536-dimensional vector. Which field type must you assign to this field?

You are troubleshooting a performance degradation in an Azure Cosmos DB for NoSQL vector search application. Which THREE diagnostic steps or metrics should you inspect? (Choose three)

Your organization is implementing strict compliance standards. All event payloads transmitted through Azure Event Grid must be encrypted in transit using TLS 1.3 and encrypted at rest using a customer-managed key (CMK). Which Azure Event Grid tier supports configuring customer-managed keys?

Your enterprise AI application is deployed across multiple Azure regions for high availability. You need to ensure that logs from Application Insights instances in all regions are aggregated into a single central Log Analytics workspace for unified querying. How should you configure this?

You are troubleshooting a high-throughput stream processing pipeline using Azure Event Hubs. Consumers are experiencing lag because messages are accumulating faster than they can be processed. You want to temporarily replay historical events from 2 hours ago without altering the current consumer group offsets permanently. What should you do?

You are designing a message-based architecture in Azure Service Bus where certain high-priority messages must bypass standard messages in the queue and be processed immediately. What feature should you implement?

You are deploying a high-performance AI model in AKS. You need to ensure the container has access to the underlying host's NVIDIA GPU. What must be configured in the Pod spec?

Your team needs to process high-volume clickstream data from a web application using Apache Kafka protocols while leveraging Azure-managed infrastructure. Which Azure service should you deploy?

You are setting up auto-scaling for a containerized AI web app in Azure Container Apps. You want to scale based on the number of concurrent HTTP requests. Which scaler do you use?

When configuring Azure Monitor alerts for an AI application, which TWO action types can be included in an Action Group to notify operations personnel? (Choose two)

You are configuring a hybrid search in Azure AI Search. You want to combine results from a vector search and a keyword-based search. Which feature is specifically designed to normalize scores from these different retrieval methods into a single ranked list?

You are developing a retrieval-augmented generation (RAG) solution using Azure AI Search. You need to configure a vector index to store 1536-dimensional embeddings generated by text-embedding-ada-002. Which parameter must you configure in the vector profile's algorithm configuration to use HNSW as the underlying approximate nearest neighbor algorithm?

You want to ensure that no AI services can be created in unauthorized Azure regions across your entire subscription. Which Azure governance tool should you use to enforce this restriction?

You have a large collection in Azure Cosmos DB for NoSQL and want to perform a vector search. The application is currently hitting 'Request Rate Too Large' (429) errors during vector search queries. What is the most effective way to mitigate this?

When configuring vector search in Azure Cosmos DB for NoSQL, which TWO components must be defined within the container's indexing policy? (Choose two)

Your team is developing an AI solution that uses Azure Cognitive Services. You need to ensure that the API keys cannot be extracted from the client-side mobile application. What is the recommended architectural pattern to achieve this?

When storing vector embeddings in Azure Cosmos DB for MongoDB (vCore), which distance metric is natively supported when creating a vector search index?

An AI application uses Azure Service Bus queues for task distribution. A background worker receives a message, but needs more time to complete the lengthy AI inference task before the message lock expires. Which method should the worker invoke?

You want to monitor the security posture and compliance score of your Azure AI resources. Which TWO of the following tools should you use? (Choose two)

You notice that your AKS pods are stuck in 'ContainerCreating' state. You check the events and see 'FailedMount'. What is the most likely cause?

You need to export Azure Monitor metric and log data to an external SIEM solution for security auditing. Which Azure feature should you use to stream this telemetry in real-time to an external Event Hub?

Which TWO of the following are valid ways to authenticate an AKS cluster to an Azure Container Registry?

You are designing an asynchronous AI image classification workflow. Client applications upload images to Azure Blob Storage and need to be notified immediately when processing completes. The notification must include custom metadata generated by the AI worker. Which architecture should you implement?

Your enterprise AI solution runs across multiple subscriptions. You want to implement centralized cost allocation tags for all Azure AI resources to ensure every resource is tagged with 'CostCenter' and 'Environment'. Which Azure feature should you use to automatically audit and enforce these tags?

When configuring an Azure AI Search vectorizer for integrated vectorization, which TWO parameters or connections must be specified to link to an Azure OpenAI deployment? (Choose two)

You are analyzing security and compliance logs in an Azure Log Analytics workspace. You want to write KQL queries to investigate potential security incidents or token acquisition failures. Which THREE of the following KQL tables or operators are valid and useful for this investigation? (Choose three)

Which similarity metric measures the cosine of the angle between two vectors, focusing on orientation rather than magnitude, and is commonly used in Azure AI Search?

You are building an event-driven architecture where an Azure Function needs to process messages from an Azure Service Bus queue. To optimize cost and resource utilization during quiet periods, you want the Azure Function host to scale down to zero instances when the queue is empty, and scale out rapidly when messages arrive. Which hosting plan should you choose?

You are designing a data ingestion pipeline that generates embeddings using Azure OpenAI and stores them in Azure AI Search. Which THREE components are required in the Azure AI Search index definition to support integrated vectorization? Choose three.

Your team is building an asynchronous order processing pipeline. If a downstream AI service fails to process a message from a Service Bus queue after 5 delivery attempts, the message must be automatically removed from active processing and preserved for manual inspection. What should you configure?

You are building an AI search solution using Azure AI Search. You want to ensure that users searching for acronyms or synonyms receive relevant results even if the exact keyword does not appear in the document. Which feature should you configure?

Your enterprise AI application ingests millions of telemetry events per second from IoT devices using Azure Event Hubs. Downstream AI models consume these events via Apache Spark on Azure Databricks. You need to ensure that telemetry from the same device is always processed by the same Spark executor in order to maintain state. How should you partition your Event Hub?

You are designing a secure enterprise AI architecture on Azure. Which TWO of the following practices should you implement to secure credentials and service access? (Choose two)

When monitoring an Azure OpenAI Service deployment using Azure Monitor, which TWO metrics are commonly tracked to evaluate throughput and capacity limits? (Choose two)

Your organization mandates that all data transferred between your Azure web application and Azure OpenAI Service must not traverse public internet routers, even within Azure's backbone. Which Azure networking configuration provides this guarantee?

Your enterprise AI solution runs on Azure Kubernetes Service (AKS) and utilizes Azure Key Vault to store secrets and API keys for cognitive services. You need to provide pods with secure, credential-less access to Azure Key Vault without storing connection strings in Kubernetes secrets or environment variables. Which integration should you implement?

You are designing an enterprise cloud solution that integrates Azure Event Grid, Azure Service Bus, and Azure Event Hubs. You need to select the appropriate service for three specific event-driven scenarios. Which THREE pairings of Azure messaging service to scenario are correct? (Choose three)

You are auditing your Azure subscription for security best practices related to Azure AI resources. Which TWO of the following actions help enforce governance and security? (Choose two)

Your enterprise architecture uses Azure Service Bus Topics and Subscriptions with geo-disaster recovery paired namespaces. A disaster occurs, and you trigger a failover to the secondary region. What happens to the messages currently in the subscriptions of the primary namespace?

Which TWO of the following features help manage traffic to containerized applications?

Which TWO of the following techniques help optimize the performance of containerized AI models in AKS?

Which REST API HTTP method is used to create or update an index definition in Azure AI Search?

An enterprise AI system uses Azure Service Bus Topics to distribute work items. One of your subscriptions has a high volume of low-priority messages that block high-priority tasks. You want to enable high-priority messages to be processed first without creating separate topics. Which Service Bus feature should you use?

You are deploying an event-driven AI workflow using Azure Service Bus. Which TWO mechanisms help ensure message delivery reliability and prevent data loss during transient outages? Each correct answer represents a valid reliability mechanism.

You are designing an enterprise event-driven architecture for AI workloads. Which TWO Azure services provide native support for publishing discrete, reactive event notifications when resources are created or modified? Each correct answer represents a complete solution.

You are implementing a RAG solution where user queries are matched against an Azure AI Search vector index. You want to ensure that search results only return documents where a specific metadata field 'securityLevel' matches the user's clearance. How should you apply this filter?

You are integrating Azure Container Registry with Azure Kubernetes Service. You want to enable authentication without storing static credentials (username/password) in Kubernetes secrets. What is the recommended integration method?

You have an AI scoring script that runs periodically. You want to execute this containerized workload on a schedule without managing virtual machines. Which Azure service is best suited for running containerized batch jobs on a schedule?

When configuring an Azure AI Search index, which TWO data types can be used for metadata fields that require exact filtering (e.g., category eq 'electronics')? (Choose two)

You are configuring a vector index in Azure AI Search and want to apply scalar quantization to reduce the memory footprint. What is the primary effect of scalar quantization on float32 vector data?

Which property in an Azure Cosmos DB for NoSQL vector embedding policy defines whether the similarity calculation measures cosine, dotproduct, or euclidean distance?