Microsoft Certified: Azure AI Cloud Developer Associate (AI-200) (AI-200) (AI-200) — Questions 376–450

You are architecting an asynchronous machine learning inference pipeline. Which TWO Azure services allow you to decouple event publishers from event consumers using a publish-subscribe (pub/sub) pattern? Each correct answer represents a valid pub/sub architecture service.

To optimize costs and monitor consumption for an Azure OpenAI deployment across multiple business units, which THREE practices should you implement? (Choose three)

You have an AI model container hosted in Azure Container Registry. You want to ensure that every container image pushed to the registry is automatically scanned for known vulnerabilities before deployment. Which ACR feature should you enable?

You are building a multi-modal AI application that searches across both product images and product descriptions. You store your data in Azure AI Search. How should you define your index schema to support searching with both image embeddings and text embeddings?

You are designing a big data telemetry ingestion pipeline using Azure Event Hubs. Which THREE configuration options or properties must you consider when planning Event Hubs capacity and scaling? (Choose three)

Your application publishes custom events to an Azure Event Grid topic. You want to ensure that event publishers transmit data over secure HTTPS endpoints only. How should you enforce this?

You are configuring a Vector Index in Azure AI Search. You need to ensure that the vector similarity search is performed using the Cosine distance metric. Where is this configuration specified?

You are troubleshooting a scenario where hybrid queries in Azure AI Search are returning unexpected relevance rankings. Which THREE factors could influence the final score when using hybrid search with semantic ranking? (Choose three)

You are designing an AI streaming pipeline using Azure Event Hubs with Apache Kafka enabled. Existing Java producers using the Kafka producer API need to authenticate against Event Hubs securely using Microsoft Entra ID (OAuth 2.0). How should you configure the Kafka producer client properties?

Your development team is implementing an event-driven microservices architecture using Azure Service Bus. You need to ensure strict FIFO (First-In, First-Out) message processing order for related financial transaction events in an AI fraud-detection workflow. Which THREE configuration steps are required? (Choose three)

Your AI ingestion pipeline ingests millions of clickstream events per second from IoT devices and streams them into an Azure ML training pipeline. Which Azure service is specifically designed for high-throughput, low-latency telemetry ingestion at this scale?

When configuring vector search in Azure AI Search, which TWO compression options or algorithm settings can be defined to optimize resource usage? (Choose two)

You are designing an asynchronous AI inference processing pipeline using Azure Service Bus Premium. Messages contain large payloads exceeding the standard Service Bus message size limit of 256 KB. You need to store the large payload in Azure Blob Storage while passing a reference in the Service Bus message. Which feature should you implement?

You are developing a RAG solution and need to evaluate the quality of your vector retrieval results from Azure AI Search. Which metric is commonly used to measure the proportion of relevant documents retrieved in the top-k results?

You are investigating an incident where an AI model endpoint experienced a spike in memory consumption, resulting in Out-Of-Memory (OOM) container crashes. You want to query Log Analytics to find the exact container memory working set percentage across all replicas during the past 2 hours. Which table and KQL query should you use?

When configuring an Azure Cosmos DB for NoSQL container to store embeddings, what data type must the vector property be stored as within the JSON document?

You are deploying an Azure OpenAI Service resource and must ensure that all traffic from your virtual network reaches the endpoint without traversing the public internet. Which feature should you configure?

You are designing an application that stores vector embeddings in Azure SQL Database. Which data type should you use to store vector data natively in modern Azure SQL?

You are designing a multi-tenant AI application using Azure Cosmos DB for NoSQL. Each tenant has their own set of embeddings, and you need to filter vector search results strictly by tenantId while maintaining high query performance. How should you structure your vector index definition?

You need to ensure that all data sent to Azure OpenAI Service is encrypted at rest using a custom encryption key that your organization controls and rotates. Which feature must you configure?

Your organization is building a multi-tenant AI platform. Tenants publish custom events to an Azure Event Grid topic. You need to ensure that tenant A's subscribers only receive events where the event subject starts with "tenant-a/". Which Event Grid feature should you implement on the event subscription?

You need to restrict access to an Azure OpenAI resource so that only requests originating from a specific Azure Virtual Network are permitted. What should you configure?

You are troubleshooting a latency issue with an AI model deployed in a Virtual Machine. You suspect the issue is related to storage IOPS limits. Which tool should you use to check the storage performance metrics?

You are designing a data layer architecture in Azure Cosmos DB for NoSQL for an AI application that performs high-frequency writes and real-time vector searches. You need to understand how vector indexing impacts write operations. What is the primary trade-off?

When designing an event-driven architecture using Azure Event Grid, which THREE security or delivery mechanisms can be configured on an event subscription? Each correct answer represents a valid configuration option.

You want to check the current monthly spend on your Azure OpenAI Service resource and identify which model deployments are consuming the most budget. Which Azure portal tool should you use?

You are configuring an Azure AI Search vector index for a retrieval-augmented generation (RAG) application. You need to select an algorithm for vector similarity search that balances recall speed with accuracy while allowing approximate nearest neighbor (ANN) search. Which vector search algorithm configuration should you select?

You want to limit the CPU resources that a specific AI inference pod can consume. Which Kubernetes field do you configure?

You are writing a query in Azure Cosmos DB for NoSQL to calculate the vector distance between a stored embedding and a query vector. You want to retrieve only the top 5 most similar documents. What is the correct structure of the LIMIT or TOP clause?

You are provisioning an Azure AI Search service to support hybrid search, combining full-text lexical search and vector search. Which tier is the minimum required to support vector search capabilities at enterprise scale?

Your AI application consumes messages from an Azure Service Bus queue. During peak hours, processing takes longer than expected, and messages are frequently locked out and redelivered prematurely. You want to increase the time a message remains locked by the receiver. Where should you configure this setting?

You are deploying an AI model container in Azure Container Apps. Which TWO authentication mechanisms can you configure for securely pulling the image from a private Azure Container Registry?

When configuring an Azure AI Search vector profile, which TWO elements must be successfully referenced together to make the profile functional? (Choose two)

You are configuring semantic ranking in Azure AI Search to improve search relevance for your enterprise application. Which tier of Azure AI Search is required to enable semantic ranking?

Your team is preparing an Azure AI application for production release. You need to implement robust monitoring and observability. Which TWO of the following steps should be taken? (Choose two)

You are designing an enterprise-grade event-driven system where producers send financial transactions to Azure Event Hubs. You must guarantee that every single message is accounted for and that no data is lost even if an entire availability zone suffers a catastrophic failure. Which deployment configuration should you select for your Event Hubs namespace?

You are implementing an event-driven architecture where an Azure Function acts as an Event Grid subscriber. Occasionally, the downstream cognitive service is throttled, causing failures. You need to ensure that unprocessable events are not lost and can be inspected later. Where should you configure a dead-letter destination?

You are auditing your Azure AI services to ensure that all API keys are rotated regularly. What is the recommended practice for managing credentials in an enterprise AI solution?

Which THREE logs or telemetry types should you collect in Azure Monitor to comprehensively troubleshoot an AI-powered web application?

Your application publishes messages to an Azure Service Bus queue. The messages contain sensitive personal data. Enterprise compliance mandates that message payloads are encrypted end-to-end at the application layer before being sent to Service Bus. How should you implement this?

Your team pushes custom AI model container images to Azure Container Registry (ACR). Company policy states that all container images must be automatically scanned for Common Vulnerabilities and Exposures (CVEs) upon push. Which ACR service tier must you use to meet this requirement using Microsoft Defender for Cloud?

You are managing costs for an Azure AI solution and want to prevent unexpected budget overruns. Which TWO of the following cost monitoring and governance tools can you use? (Choose two)

You are building a hybrid search solution using Azure AI Search that combines BM25 full-text search with vector search. What is the name of the feature that intelligently combines and normalizes scores from different retrieval systems before presenting the final top results?

Your Python AI application is deployed to Azure App Service and connects to Azure Key Vault using a managed identity. Recently, you rotated the Key Vault secret value, but your App Service application is still retrieving the old secret value. What is the most likely reason for this behavior?

An AI system uses Azure Service Bus queues for processing text-generation jobs. A specific job causes the worker function to crash repeatedly, leading to the message being redelivered continuously. Which Service Bus feature should you configure to capture these poison messages after a specific delivery count is reached?

Your team is building an automated image moderation pipeline. When an image is uploaded to Azure Blob Storage, you need to trigger an Azure Function to process it using Azure AI Vision. You want to ensure the lowest latency and native cloud event integration. Which integration approach should you configure?

You have a custom machine learning model deployed as a managed online endpoint in Azure Machine Learning. You need to ensure that scoring requests made to the endpoint are encrypted in transit and that client authentication is enforced using JSON Web Tokens (JWT). What authentication method does the managed online endpoint support by default?

You are migrating a custom RAG solution to Azure. Your data pipeline generates text embeddings using Azure OpenAI text-embedding-ada-002 and stores them alongside relational metadata in Azure SQL Database. To perform vector similarity searches efficiently directly inside Azure SQL, which data type and extension should you leverage?

When designing a hybrid search architecture that integrates Azure AI Search with an Azure OpenAI embedding model, which THREE challenges must you typically address regarding data management and retrieval? (Choose three)

Your Azure Machine Learning workspace is secured inside a virtual network with private endpoints. To ensure that data scientists can securely train models and access data stores without exposing resources to the public internet, which THREE of the following configurations must be established? (Choose three)

Your enterprise security team mandates that all outbound traffic from your Azure Machine Learning workspace must pass through a centralized Azure Firewall, and no public IP addresses can be associated with workspace compute instances. Which workspace network isolation configuration should you select?

You are deploying an AI model container to Azure Container Apps. The container application needs to securely connect to an Azure SQL Database without storing plain-text database credentials in environment variables or application code. What is the recommended feature to use?

You are troubleshooting an Azure Function triggered by an Azure Event Grid subscription. The function is failing to receive events. Which TWO diagnostic steps should you take in the Azure Portal or via Azure CLI? Each correct answer is a valid troubleshooting action.

Your team is developing an Azure Function that acts as an Event Grid webhook subscriber. You want to test the function locally using the Azure Functions Core Tools CLI. Which command starts the local runtime and enables local event ingestion?

You are configuring an Azure Kubernetes Service (AKS) cluster to host GPU-accelerated AI model inference workloads using NVIDIA GPUs. Which component must you install in the cluster to enable containerized workloads to utilize the GPU nodes?

Your application makes frequent calls to Azure AI Document Intelligence. You need to ensure that if a transient network failure or HTTP 503 service unavailable error occurs, the Python SDK automatically retries the failed requests with exponential backoff. How should you initialize the client to support robust retry behavior?

You are developing an AI application in Azure and need to monitor custom telemetry, trace dependencies, and track dependency failures for calls made to an external machine learning model endpoint. Which Azure service should you use?

You are configuring secure ingress and network isolation for an Azure Container Apps environment. Which THREE capabilities are supported when configuring networking for Container Apps? (Choose three.)

You are designing a high-performance RAG data layer architecture using Azure AI Search. Which THREE indexing and retrieval strategies should you implement to maximize recall and precision? (Choose three)

An event subscriber endpoint hosted on an Azure App Service web app is failing to receive events from an Azure Event Grid system topic. Upon investigation, you discover Event Grid received a handshake validation failure. What is the most likely cause?

You are optimizing storage costs and search latency for a massive Azure AI Search vector index containing 50 million records, each with 3,072-dimensional embeddings from text-embedding-3-large. Which Azure AI Search feature should you implement to reduce memory footprint while maintaining acceptable recall?

Your team has noticed a significant cost spike in your Azure OpenAI usage. You need to identify which specific deployment is responsible for the highest token consumption. Which tool provides the most granular visibility into this data?

You are using Azure Container Apps to host a web API for an AI model. You want to ensure that only authorized traffic reaches the container. How should you secure the endpoint?

You want to track the latency of your model inference API in production. Which Azure tool should you integrate into your containerized application?

You are designing a multi-tenant AI ingestion pipeline using Azure Event Hubs. You need to ensure that low-priority tenants cannot starve high-priority tenants of partition resources. Which feature should you implement?

When configuring an Azure AI Search vector index, which TWO parameters can be adjusted within the HNSW algorithm configuration to trade off between search speed, memory usage, and recall accuracy? (Choose two)

You are troubleshooting high latency in an AI inference workload on AKS. You suspect the issue is caused by container startup time (cold starts). Which feature helps mitigate this?

Which property in an Azure Cosmos DB for NoSQL SQL query specifies the maximum number of vector search results to return?

You are building a RAG application using Azure AI Search. You want to ensure that the search results provided to the LLM are as relevant as possible by leveraging a re-ranking model. Which service must be enabled to utilize the 'Semantic Ranker'?

You are designing a RAG solution where documents are dynamically updated in Azure AI Search. You notice that search results return outdated information immediately after document updates. What is the cause of this behavior?

An application publishes custom events to an Azure Event Grid custom topic. You need to route events dynamically based on the event's 'department' property in the event payload. Which filtering mechanism should you configure on the Event Grid subscription?

You want to find out which Azure subscriptions and resource groups are incurring the highest costs for Azure Machine Learning compute instances this month. Where should you view this cost breakdown?

An AI application hosted in Azure App Service throws intermittent socket exhaustion errors under heavy load when calling Azure OpenAI. You suspect improper HTTP client management. How should you fix this in .NET?

Your Azure OpenAI model deployment is experiencing a sudden latency spike. You want to determine if the bottleneck is due to server-side processing time or network transport overhead in your client application. Which Application Insights telemetry property should you inspect?

You are troubleshooting a containerized AI model deployment in Azure Container Apps that fails to pass its HTTP readiness probe. You need to inspect the container logs and runtime diagnostics. Which THREE tools or commands can you use to troubleshoot this issue? Each correct answer presents a complete solution.