Courseiva

Microsoft Certified: Azure AI Cloud Developer Associate (AI-200) (AI-200) (AI-200) — Questions 451507

507 questions total · 7pages · All types, answers revealed

Page 6

Page 7 of 7

451
Multi-Selectmedium

Your enterprise application uses Azure Event Grid. Which TWO event schemas are natively supported when publishing events to an Event Grid custom topic? (Choose two)

Select 2 answers
A.Apache Kafka record batch binary schema
B.AMQP 1.0 binary stream envelope
C.SOAP 1.2 XML messaging schema
D.CloudEvents 1.0 schema
E.Azure Event Grid schema
AnswersD, E

Event Grid natively supports CloudEvents 1.0 JSON schema format.

Why this answer

Azure Event Grid natively supports the Event Grid Schema and the CloudEvents 1.0 Schema.

452
MCQmedium

You are writing a query in Azure Cosmos DB for NoSQL to retrieve documents based on vector similarity against a target embedding. Which built-in SQL function should you use in the ORDER BY clause?

A.CosSimilarity()
B.EmbeddingDistance()
C.GetVectorDistance()
D.VectorDistance()
AnswerD

VectorDistance() computes the distance between two vectors using metrics like cosine, dot product, or Euclidean distance.

Why this answer

Azure Cosmos DB provides the VectorDistance() system function to compute similarity or distance between stored vectors and query vectors.

453
MCQmedium

You need to deploy a set of batch AI processing containers in Azure Container Instances that run to completion and then terminate. Which container group restart policy should you select?

A.Always
B.Never
C.UnlessStopped
D.OnFailure
AnswerB

Setting restart policy to Never ensures the container does not restart after completing its task.

Why this answer

For batch jobs that run to completion and stop, the restart policy should be set to Never or OnFailure.

454
MCQhard

You have configured distributed training for a large language model across multiple nodes in an Azure Machine Learning cluster. Training jobs are failing with socket timeout errors between nodes. You need to verify internal node-to-node communication and ensure that the underlying Network Security Group (NSG) rules permit communication on the required ports. Which ports must be open between nodes in the cluster?

A.TCP ports 443, 22, and custom high-range ports (e.g., 40000-49999) for MPI distributed training communication
B.Port 1433 for SQL Server database communication
C.Port 3389 exclusively for Remote Desktop protocol across Linux nodes
D.Only port 80 and port 443 for standard web traffic
AnswerA

Correct. Distributed training frameworks like MPI require high-range TCP ports for inter-node communication.

Why this answer

Azure Machine Learning compute clusters require specific ports (such as ports 443, 22, and a range for MPI communication like ports 40000-49999) for inter-node communication.

455
Multi-Selecthard

You are optimizing an Azure Cosmos DB for NoSQL vector search container. Which THREE properties must be correctly configured inside the vectorEmbeddingPolicy JSON object? (Choose three)

Select 3 answers
A.path
B.httpPort
C.dataType
D.distanceFunction
E.sslEnabled
AnswersA, C, D

The JSON path to the vector property is mandatory.

Why this answer

The vectorEmbeddingPolicy in Cosmos DB requires defining paths, dataTypes, distanceFunctions, and dimensions for each vector property.

456
MCQhard

You are designing an IoT data ingestion architecture using Azure Event Hubs. Devices occasionally send malformed JSON payloads that cause stream processing jobs to crash. You need to route these invalid messages to a separate error container without stopping the main ingestion stream. What should you implement?

A.Enable Event Hubs Capture with the JSON validation flag set to strict.
B.Set up an Event Grid system topic filter for 'MalformedEvent'.
C.Configure the Service Bus dead-letter queue on the Event Hub producer client.
D.Use Azure Stream Analytics with an error output data stream configured for malformed events.
AnswerD

Azure Stream Analytics supports error handling configurations on data outputs, allowing streaming errors to be redirected to a separate blob storage sink.

Why this answer

Event Hubs does not have a native bad-record-routing queue per se, but stream processing engines like Azure Stream Analytics or custom consumers can implement try-catch error handling patterns and output invalid records to an error sink.

457
MCQeasy

Your organization uses Azure Event Grid to route cloud events across different departments. Security auditors require that all event traffic destined for a webhook endpoint is authenticated using Azure Active Directory (Microsoft Entra ID) bearer tokens. How should you configure the event subscription?

A.Enable IP firewall rules on the Event Grid topic to restrict traffic.
B.Use Basic Authentication with a static API key stored in App Settings.
C.Configure a Managed Identity on the event subscription and select the target audience.
D.Embed a Shared Access Signature (SAS) token directly in the webhook URL query parameters.
AnswerC

Using a managed identity allows Event Grid to securely authenticate against protected webhook endpoints using Microsoft Entra tokens.

Why this answer

Event Grid allows you to configure Managed Identity (System-assigned or User-assigned) for webhook subscriptions so that Event Grid attaches a Microsoft Entra ID bearer token in the authorization header when invoking the webhook.

458
MCQeasy

You are managing costs for multiple Azure AI services used by different business units. You need to track expenditure against specific departmental budgets and receive automated alerts when spending exceeds 80% of the allocated budget. Which Azure feature should you use?

A.Azure Advisor cost recommendations
B.Azure Monitor autoscale settings
C.Azure Cost Management Budgets with alert conditions
D.Azure Service Health alerts
AnswerC

Correct. Budgets and alerts in Azure Cost Management enable tracking spend against thresholds.

Why this answer

Azure Cost Management budgets allow you to set monetary or usage thresholds and configure automated alert notifications when thresholds are approached or exceeded.

459
Multi-Selectmedium

Your company policy requires securing AI model endpoints by disabling public internet access and ensuring all API requests use secure managed identities. Which TWO actions must you take? (Choose two)

Select 2 answers
A.Disable public network access on the Azure AI service resource and configure a private endpoint.
B.Expose the AI endpoint via an unencrypted HTTP binding for maximum performance.
C.Store all AI model weights and endpoint keys in public GitHub repositories for CI/CD access.
D.Configure a shared access signature (SAS) token with a 10-year expiration period.
E.Assign the appropriate Azure RBAC role to the application's managed identity on the AI service.
AnswersA, E

Disabling public access and using private endpoints ensures network isolation.

Why this answer

Disabling public network access requires Private Endpoints, and managed identity authentication requires configuring the target service's access control via Azure RBAC.

460
MCQeasy

Your company stores product catalog items in Azure Cosmos DB for NoSQL and needs to implement vector search for recommendation capabilities. Which indexing policy property must you add to enable vector indexing on a container?

A.compositeIndexes
B.vectorIndexes
C.spatialIndexes
D.fullTextIndexes
AnswerB

The vectorIndexes property is mandatory in the indexingPolicy to define the paths and types of vector indexes.

Why this answer

Azure Cosmos DB for NoSQL requires a vectorIndexes array within the indexingPolicy to index vector properties for similarity search.

461
MCQeasy

You need to ensure that traffic between your Azure App Service hosting an AI wrapper and your Azure AI Search instance does not traverse the public internet. Which feature should you implement?

A.Enable Cross-Origin Resource Sharing (CORS) with a restricted origin list.
B.Enable TLS mutual authentication (mTLS) on the Azure AI Search service.
C.Configure a Private Endpoint for the Azure AI Search service and integrate your App Service with the virtual network.
D.Configure IP access control lists on the Azure AI Search firewall to allow only the App Service outbound IPs.
AnswerC

Private Endpoints map Azure services to private IPs in your VNet for secure internal communication.

Why this answer

Azure Private Endpoint provides private IP addresses from your VNet to securely connect to Azure AI Search, keeping traffic off the public internet.

462
MCQeasy

You are configuring Azure Event Grid to send events to an Azure Logic App. Which built-in trigger should you use in your Logic App workflow to receive these events seamlessly?

A.When messages arrive in a Service Bus queue
B.When a resource event occurs (Azure Event Grid trigger)
C.When a blob is added or modified (V2)
D.When an HTTP request is received
AnswerB

This trigger integrates natively with Event Grid, managing the subscription handshake and payload parsing automatically.

Why this answer

Azure Logic Apps provides a native 'When a resource event occurs' trigger (powered by Event Grid) that automatically provisions the webhook subscription behind the scenes.

463
MCQeasy

You are setting up Azure Monitor alerts for an Azure AI Search service. You want an SMS message to be sent to the on-call engineer whenever the search query latency exceeds 500ms. What component of Azure Monitor links the metric alert to the SMS notification channel?

A.Azure Service Health
B.Log Analytics workspace
C.Action group
D.Diagnostic setting
AnswerC

Correct. Action groups encapsulate notification preferences like SMS, email, and webhooks for alerts.

Why this answer

Action groups in Azure Monitor define notification channels such as SMS, email, webhook, and Azure App push notifications when alerts fire.

464
MCQhard

You are configuring TLS termination for an AI model API hosted in Azure Container Apps using a custom domain name. Where must you upload or configure the custom SSL certificate?

A.In the Container App custom domains settings using a Key Vault reference or uploaded certificate
B.In the Azure Container Registry webhook configuration
C.Inside the container image filesystem under /etc/ssl/certs
D.On the underlying Azure Container Instances node pool
AnswerA

Container Apps supports binding custom SSL certificates managed directly within the app's custom domain settings.

Why this answer

Custom domain certificates in Azure Container Apps are managed via the custom domains and certificates blade of the Container App resource.

465
Multi-Selectmedium

You are architecting an event-driven AI ingestion pipeline using Azure Event Hubs. Which TWO features or capabilities are native to Azure Event Hubs? (Choose two)

Select 2 answers
A.Automatic dead-letter queue routing after max delivery count
B.Apache Kafka protocol endpoint compatibility
C.Event Hubs Capture for automated data archiving into Azure Blob Storage
D.Webhook event schema subscription validation handshakes
E.AMQP 1.0 message session management for FIFO per session ID
AnswersB, C

Event Hubs provides a native Kafka endpoint so standard Kafka clients can produce and consume without code changes.

Why this answer

Azure Event Hubs natively supports Apache Kafka protocol endpoints and Event Hubs Capture for long-term storage archiving. Event Grid topics and Service Bus queues are separate services.

466
Multi-Selectmedium

When designing an AI architecture that uses Azure AI Search, which TWO methods can be used to ingest documents and their vector embeddings into the search index? (Choose two)

Select 2 answers
A.Direct mounting of an NFS network share as the search index
B.FTP file transfer into the search engine storage directory
C.Push API using HTTP POST requests to upload documents directly
D.Direct SQL Server backup restore (.bak file import)
E.Indexers connected to supported data sources with integrated vectorization
AnswersC, E

Applications can push documents and pre-computed embeddings directly via the REST API or SDK.

Why this answer

Azure AI Search supports pushing data via the Push API (REST/SDK) or pulling data using indexers connected to data sources like Blob Storage or Cosmos DB.

467
MCQhard

You are auditing an Azure AI solution for security compliance. You discover that developers have been hardcoding storage account connection strings in source code repositories. You need to remediate this immediately by migrating secrets to Azure Key Vault and ensuring your Python application retrieves them securely at runtime using a managed identity. Which Python library and credential class should your code use?

A.pyodbc with direct ODBC connection strings containing embedded passwords
B.azure-storage-blob with StorageSharedKeyCredential initialized with plain-text keys
C.azure-identity package with DefaultAzureCredential and azure-keyvault-secrets
D.requests library making direct REST calls with master subscription keys
AnswerC

Correct. DefaultAzureCredential simplifies authentication by chaining managed identity, environment variables, and developer credentials securely.

Why this answer

The azure-identity library provides DefaultAzureCredential, which automatically tries multiple authentication methods (managed identity, environment variables, Azure CLI) in order without hardcoding secrets.

468
MCQhard

You are implementing a hybrid search solution in Azure AI Search that combines BM25 keyword search scores and HNSW vector search scores. By default, how does Azure AI Search normalize and combine these disparate score spaces before applying the RRF algorithm?

A.Min-max feature scaling on raw scores
B.Softmax probability conversion
C.Z-score standardization on vector distances
D.Reciprocal Rank Fusion (RRF) ranking combination
AnswerD

RRF combines ranks from multiple retrievers using a reciprocal rank formula to produce a unified score without needing raw score normalization.

Why this answer

Azure AI Search uses Reciprocal Rank Fusion (RRF) to combine scores from different query types (such as text and vector) by normalizing ranks rather than raw scores, mitigating the scale discrepancy between BM25 and cosine distance.

469
Multi-Selectmedium

When troubleshooting a Python AI application integrated with Application Insights, you want to ensure comprehensive error tracking and telemetry collection. Which TWO of the following SDK practices should you implement? (Choose two)

Select 2 answers
A.Disable the Application Insights telemetry client entirely in production to save bandwidth.
B.Wrap unhandled exception handling with telemetry_client.track_exception() to capture stack traces.
C.Route all application logs exclusively to local text files on ephemeral container storage.
D.Explicitly call telemetry_client.flush() before application exit to ensure buffered items are transmitted.
E.Store plain-text passwords in telemetry custom dimensions.
AnswersB, D

Correct. Tracking exceptions explicitly or via automatic SDK hooks captures failure details.

Why this answer

Using standard exception tracking methods and flushing telemetry buffers before application shutdown prevents data loss.

470
MCQmedium

Your AI application is hosted on Azure App Service and connects to Azure Cosmos DB and Azure OpenAI. You want to ensure that if credentials or connection strings ever leak, they cannot be used from unauthorized networks. Which feature should you implement?

A.Disabling managed identities across all application components
B.IP firewall rules and virtual network service rules on the backend services restricting access to App Service
C.Configuring Azure Front Door with SSL offloading only
D.Enabling public anonymous access with client-side rate limiting
AnswerB

Correct. Combining authentication credentials with network perimeter controls ensures that even leaked keys cannot be used from unauthorized IP addresses.

Why this answer

Network service tags and IP firewalls on Azure Cosmos DB and Azure OpenAI restrict access to only allow incoming traffic from the specific outbound IP addresses or virtual network subnet of the App Service.

471
MCQhard

An enterprise deployment of Azure OpenAI requires data encryption using a key that your security team fully manages and controls in Azure Key Vault. What must you configure?

A.Store the API keys in Azure Key Vault and enable automatic rotation every 7 days.
B.Configure Customer-Managed Keys (CMK) using an Azure Key Vault key with soft-delete and purge protection enabled, linked via a managed identity.
C.Configure infrastructure encryption at rest using a Microsoft-managed default key.
D.Enable Always Encrypted on the Azure OpenAI resource configuration plane.
AnswerB

CMK allows organizations to use their own encryption keys with Azure AI services, requiring specific Key Vault configurations.

Why this answer

Customer-managed keys (CMK) can be used with Azure OpenAI by configuring an encryption setting on the cognitive services account pointing to an Azure Key Vault key with soft-delete and purge protection enabled.

472
MCQhard

You are designing a high-throughput RAG pipeline where documents are continuously ingested and queried. You choose Azure Cosmos DB for NoSQL as your vector store. How does Cosmos DB handle vector indexing updates when new documents are inserted?

A.Vector indexes are updated asynchronously in the background by the database engine
B.You must manually trigger an index rebuild stored procedure every hour
C.Vector search is completely unavailable until the entire collection is re-indexed from scratch
D.New documents cannot be queried using VectorDistance until the container is restarted
AnswerA

Cosmos DB manages vector index maintenance asynchronously in the background.

Why this answer

Azure Cosmos DB indexes vector embeddings asynchronously in the background as documents are written, balancing write performance with index availability.

473
Multi-Selecteasy

Which THREE data types or formats are commonly used to represent embeddings when preparing data for storage in a vector-enabled Azure service?

Select 3 answers
A.JSON arrays.
B.Arrays of floats (single precision).
C.List of floating-point numbers (floats).
D.Base64 encoded binary image data.
E.Vectorized text sequences (token IDs).
AnswersA, B, C

JSON arrays are the standard way to transport vector data to Azure services.

Why this answer

Embeddings are typically represented as arrays of floats, stored as JSON lists, or exported from models like Azure OpenAI as numerical vectors.

474
MCQeasy

Your development team needs to store API keys and connection strings for an Azure Cognitive Search service securely without embedding them in the source code. Where should you store these secrets?

A.An Azure Storage Table with public read permissions
B.An environment variable in the application's appsettings.json file
C.Azure Key Vault
D.The Azure AI Studio model deployment configuration metadata
AnswerC

Azure Key Vault securely stores application secrets and sensitive configuration values.

Why this answer

Azure Key Vault is designed specifically for securely storing and controlling access to secrets, keys, and certificates.

475
MCQmedium

You are developing an enterprise retrieval-augmented generation (RAG) application using Azure AI Search. You need to configure a vector index to store dense vector embeddings alongside traditional text fields. Which property within the Azure AI Search index definition must be explicitly configured with a vector search profile to enable HNSW (Hierarchical Navigable Small World) algorithm indexing?

A.vectorIndexKind
B.compressionMethod
C.vectorSearchProfile
D.similarityFunction
AnswerC

The vectorSearchProfile property links a vector field to a defined vector search algorithm configuration and optional vectorizer.

Why this answer

The vectorSearch configuration block inside an Azure AI Search index definition requires a profiles array where algorithms and vectorizer settings are tied together. Each searchable vector field then references the vector search profile via the vectorSearchProfile property.

476
MCQeasy

A team member needs read-only access to view AI model deployment metrics in Azure Monitor but should not be able to change any resource settings. Which built-in role should you assign?

A.Reader
B.Log Analytics Reader
C.Monitoring Reader
D.Contributor
AnswerC

This role is specifically designed for read-only access to monitoring data.

Why this answer

The 'Monitoring Reader' role provides sufficient permissions to view all monitoring data, including metrics and logs, without allowing modifications.

477
MCQhard

You are optimizing costs for an AI workload running on Azure Kubernetes Service (AKS). You notice that GPU node pools are underutilized during weekends. You want to scale down the GPU node pool to 0 nodes on weekends and scale back up on Monday mornings. What Kubernetes native feature or Azure integration should you use?

A.Delete the entire AKS cluster every Friday night and recreate it every Monday using ARM templates
B.Use Azure Policy to deny GPU pod scheduling on weekends
C.Configure Azure Cost Management to automatically pause billing for GPU SKUs on weekends
D.AKS cluster autoscaler configured with node pool scaling profiles down to zero, or Azure Automation runbooks invoking az aks nodepool scale
AnswerD

Correct. Using Azure Automation or AKS cluster scaling schedules allows automating node pool sizing to eliminate weekend costs.

Why this answer

Azure Kubernetes Service supports cluster autoscaler and user node pools that can be scaled, or Azure DevOps / GitHub Actions pipelines with Azure CLI commands, but AKS cluster autoscaler natively supports scaling pools down to 0 when configured with node pool stop/start or autoscaler profiles.

478
MCQmedium

You are evaluating Cosmos DB for NoSQL vs. Azure AI Search for a vector search application. Your application requires strict ACID compliance for metadata updates along with vector search. Which should you choose and why?

A.Cosmos DB because it is the only service that supports vectors.
B.Cosmos DB because it supports document-level ACID transactions.
C.Azure AI Search because it supports better hybrid search.
D.Azure AI Search because it uses HNSW for faster searches.
AnswerB

Cosmos DB's transactional support is the differentiator when metadata integrity is a requirement.

Why this answer

Cosmos DB for NoSQL provides strong consistency and ACID transactions, which is critical for metadata consistency, while offering built-in vector search capabilities.

479
Multi-Selecthard

You are configuring authentication and authorization across Azure messaging and eventing services. Which THREE statements regarding security features are correct? (Choose three)

Select 3 answers
A.Event Grid custom topics require SQL database credentials for publisher authentication.
B.Shared Access Signature (SAS) tokens can be generated with specific permissions and expiration times.
C.Azure Service Bus and Event Hubs support Microsoft Entra ID RBAC for data plane access.
D.Azure Event Grid webhook subscriptions support Managed Identity authentication for secure target invocation.
E.Azure Service Bus queues require public anonymous access to be enabled for client SDK connections.
AnswersB, C, D

SAS keys and tokens provide time-bound, scoped access to messaging namespaces.

Why this answer

Azure messaging services support Microsoft Entra ID RBAC, Managed Identities for webhooks, and SAS keys. They do not support anonymous access by default, and certificates are used for specific MQTT/X.509 scenarios, not basic connection strings.

480
Multi-Selecthard

You are optimizing resource allocation for a GPU-backed AI model deployment on AKS. Which THREE Kubernetes concepts or objects are essential for managing GPU resources effectively?

Select 2 answers
A.Node taints and tolerations for GPU node pools
B.Horizontal Pod Autoscaler based on Azure Load Balancer SNAT ports
C.Resource requests and limits specifying nvidia.com/gpu
D.Node selectors or node affinity to target GPU node pools
E.Kubernetes persistent volume claims for GPU driver binaries
AnswersC, D

Containers must request GPU resources using the specific device plugin resource name.

Why this answer

Managing GPUs in AKS requires node selectors, resource limits for nvidia.com/gpu, and tolerations for GPU taints.

481
MCQeasy

You are storing embeddings generated by text-embedding-3-small in Azure Cosmos DB for NoSQL. Which indexing policy property must be explicitly configured to enable vector search queries on your container?

A.Vector embedding policy and vector indexes
B.Full-text search indexing policy
C.Composite indexes containing string fields
D.Included paths with geospatial indexes
AnswerA

Azure Cosmos DB requires configuring a vector embedding policy and defining vector indexes within the indexing policy to enable vector distance functions.

Why this answer

To run vector search queries in Azure Cosmos DB for NoSQL, the container's indexing policy must include a dedicated vector embedding path with a datatype of 'vector'.

482
Multi-Selectmedium

When configuring vector search in Azure Cosmos DB for NoSQL, which TWO steps are required to prepare a container for vector search before inserting documents? (Choose two)

Select 2 answers
A.Define the vectorEmbeddingPolicy at container creation or update
B.Define vectorIndexes within the indexingPolicy
C.Mount an NFS network share for vector file storage
D.Install the pgvector extension on the container
E.Create a relational foreign key constraint to Azure SQL
AnswersA, B

The vector embedding policy defines paths, dimensions, data types, and distance functions.

Why this answer

Preparing a Cosmos DB container for vector search requires adding a vector embedding policy and defining vector indexes in the indexing policy.

483
MCQeasy

Which Azure feature allows you to scan images in your registry for vulnerabilities before deploying them to your production cluster?

A.Microsoft Defender for Containers.
B.Azure Monitor.
C.Azure Key Vault.
D.Azure Policy.
AnswerA

Defender provides vulnerability scanning for images in ACR.

Why this answer

Microsoft Defender for Containers (formerly Defender for ACR) provides scanning for images in ACR.

484
MCQmedium

You are configuring vector indexing in Azure Cosmos DB for MongoDB (vCore). You need to choose an indexing type for your vector property to balance query performance and recall accuracy for high-dimensional data. Which vector index type should you select for approximate nearest neighbor (ANN) search?

A.FULLTEXT index
B.HNSW (Hierarchical Navigable Small World)
C.B-Tree index
D.HASH index
AnswerB

HNSW is a graph-based approximate nearest neighbor vector index supported in Azure Cosmos DB for MongoDB vCore.

Why this answer

Azure Cosmos DB for MongoDB (vCore) supports both DiskANN and HNSW (Hierarchical Navigable Small World) index types for vector search. HNSW and DiskANN provide ANN search capabilities, with DiskANN being optimized for large-scale datasets stored on SSDs.

485
MCQhard

You are troubleshooting a performance issue where an Azure AI Search indexer fails to complete within the scheduled execution window when processing large PDF documents. What is the most effective configuration change to resolve the timeout issue?

A.Configure the indexer maxRunTime property and scale out search units or adjust batch size
B.Convert all vector fields to Edm.String
C.Switch the search service to the Free tier
D.Delete all semantic configurations from the index
AnswerA

Adjusting maxRunTime and batch sizes allows large indexer jobs to complete successfully.

Why this answer

Increasing the indexer maxRunTime or increasing search unit capacity helps handle large workloads during indexing.

486
MCQhard

You are configuring geo-disaster recovery for an Azure Service Bus Premium namespace containing critical financial transactions. A regional outage occurs. After initiating a failover to the secondary region, what happens to the alias pointing to the namespace?

A.The secondary namespace remains in Read-Only mode until manually unlocked.
B.The alias becomes invalid, and you must deploy a new Service Bus namespace from scratch.
C.Unreplicated messages in the primary queue are automatically migrated in real-time.
D.The alias automatically points to the secondary namespace, and pairing is broken.
AnswerD

Once failed over, the secondary namespace becomes primary, and the alias resolves to it. The old primary must be reconfigured and re-paired later.

Why this answer

Service Bus Geo-DR uses an alias. When failover is triggered, the alias is remapped to point to the secondary namespace, allowing clients to reconnect automatically without changing connection strings if they use the alias.

487
Multi-Selectmedium

You are designing a vector search solution using Azure AI Search. Which THREE of the following are necessary steps to configure an index to support vector search?

Select 3 answers
A.Define a 'vectorSearch' configuration within the index schema.
B.Set the index to 'ReadOnly' mode.
C.Assign a 'vectorSearchProfile' to the vector-capable fields.
D.Ensure all vector fields are set to 'Edm.String'.
E.Define vector fields as type 'Collection(Edm.Single)'.
AnswersA, C, E

This defines the algorithms and metrics to be used.

Why this answer

To enable vector search, one must define the vector search configuration (algorithm/metric), create fields of type 'Collection(Edm.Single)', and assign the vector search profile to those fields.

488
MCQmedium

You are querying an Azure Cosmos DB for NoSQL container using vector search. You execute a query using the VectorDistance() system function. Which query structure is required to properly execute this vector search?

A.SELECT TOP 10 c.id FROM c WHERE VectorDistance(c.vectorProp, [0.1, 0.2]) > 0.9
B.JOIN vectorIndex ON c.id = vectorIndex.id
C.SELECT TOP 10 c.id, VectorDistance(c.vectorProp, [0.1, 0.2]) AS score FROM c ORDER BY VectorDistance(c.vectorProp, [0.1, 0.2])
D.GROUP BY VectorDistance(c.vectorProp, [0.1, 0.2])
AnswerC

Vector distance queries require selecting the function and ordering by it using TOP to retrieve the nearest neighbors.

Why this answer

Vector search queries in Azure Cosmos DB for NoSQL require using the VectorDistance system function in the ORDER BY clause to sort by similarity and selecting the top results using TOP.

489
MCQhard

You are managing an Azure AI Search index with millions of high-dimensional vectors. Users experience intermittent timeout errors during peak query hours. Upon investigation, you find that the search service CPU utilization is at 100%. What is the most effective architectural mitigation?

A.Scale out the search service by adding search units (replicas)
B.Increase the embedding dimension size from 1536 to 3072
C.Switch the index from HNSW to exhaustive k-NN search
D.Decrease the number of replicas to reduce network chatter
AnswerA

Adding replicas distributes query load and increases query throughput capacity.

Why this answer

Scaling out search units (adding replicas) increases query throughput and distributes CPU load across multiple nodes.

490
MCQeasy

Which Azure portal blade allows you to view and manage access keys and connection strings for an Azure AI Search service?

A.Data source
B.Certificates
C.Scale
D.Keys
AnswerD

The Keys blade manages API keys for authentication.

Why this answer

The 'Keys' blade in the Azure Portal provides admin and query API keys for Azure AI Search.

491
MCQmedium

You are deploying an AI model container to Azure Container Apps. The container requires persistent storage to cache downloaded Hugging Face model weights across container restarts. Which storage type should you attach to the Container App?

A.Azure Managed Disks (Premium SSD) direct attach
B.Azure Blob Storage FUSE driver
C.Azure Files mount via Container Apps storage configuration
D.Ephemeral emptyDir volume
AnswerC

Mounting an Azure Files share provides shared, persistent filesystem storage accessible by container replicas.

Why this answer

Azure Container Apps supports mounting Azure Files shares as volumes for persistent storage across container lifecycles.

492
MCQeasy

Your application emits custom events to an Azure Event Grid topic. You want to test your webhook endpoint locally during development without deploying your code to Azure. Which tool should you use to receive events directly from Event Grid?

A.Use Azure Bastion to connect your localhost to the Event Grid topic.
B.Deploy the Event Grid Viewer sample web app to an accessible public URL or use ngrok to tunnel your local port.
C.Configure a local SQL Server Express trigger.
D.Attach an Azure Service Bus queue directly as a local debugging breakpoint.
AnswerB

Tunneling tools like ngrok expose your localhost to the internet, allowing Event Grid to deliver test webhooks directly to your development machine.

Why this answer

Azure Event Grid provides native integration with Azure Relay or tools like Webhook.site, but for local development, Microsoft provides the Event Grid Viewer sample or Azure CLI commands to tunnel events.

493
MCQmedium

You are writing a C# .NET console application that sends batch messages to an Azure Service Bus queue. To maximize performance and avoid exceeding payload size limits, how should you construct and send the batch?

A.Use individual SendMessageAsync calls inside a parallel Task.WhenAll loop.
B.Compress the entire list of messages into a single string and send it as an Event Grid webhook payload.
C.Use ServiceBusSender.CreateMessageBatchAsync() to dynamically package messages up to the maximum batch size limit.
D.Add all 10,000 messages into a single List<ServiceBusMessage> and call SendMessagesAsync directly.
AnswerC

CreateMessageBatchAsync creates a batch container that validates the size constraint as you add messages.

Why this answer

Using `ServiceBusSender.CreateMessageBatchAsync()` allows you to safely add messages to a batch until the maximum size limit (e.g., 1 MB for Standard/Premium) is reached, preventing `ArgumentException` or payload size errors.

494
MCQeasy

You are deploying a custom PyTorch model container image to Azure Container Apps. The container needs to scale out based on HTTP concurrent requests. Which built-in scale rule type should you configure in Azure Container Apps?

A.azure-service-bus
B.cpu
C.tcp
D.http
AnswerD

The http scale rule scales container replicas based on concurrent HTTP requests.

Why this answer

Azure Container Apps supports a built-in HTTP scale rule that scales applications based on the number of concurrent HTTP requests per replica.

495
MCQeasy

When designing a data layer architecture for an AI application using Azure AI Search, what is the primary role of an integrated vectorizer?

A.To execute full-text BM25 keyword matching alongside vector calculations.
B.To automatically convert raw source text fields into vector embeddings during indexing and queries without requiring external orchestration code.
C.To compress vector indexes using lossy compression algorithms to save disk storage.
D.To generate cryptographic hashes for document deduplication.
AnswerB

Integrated vectorization handles the translation from text to embeddings natively within Azure AI Search.

Why this answer

An integrated vectorizer in Azure AI Search automates the process of transforming raw text chunks into vector embeddings directly within the search service pipeline, calling an endpoint like Azure OpenAI automatically during document ingestion and queries.

496
MCQeasy

You want to set up an alert that notifies you whenever an Azure AI service resource is deleted or modified in your subscription. Which Azure feature should you use to capture these management-plane operations?

A.Azure Cost Management budget alert
B.Azure Monitor Activity Log alert
C.Azure Advisor recommendation alert
D.Application Insights availability test
AnswerB

Correct. Activity Log alerts capture resource management operations like administrative deletions and updates.

Why this answer

Azure Activity Log alerts monitor management-plane operations (such as resource creation, deletion, or modification) and trigger action groups when matched.

497
MCQhard

You are designing an event-driven AI document processing pipeline. Incoming PDF documents are uploaded to Azure Blob Storage, triggering an Event Grid event. The event triggers an Azure Function that downloads the PDF, processes it with Azure AI Document Intelligence, and saves results to Azure Cosmos DB. Under high load, duplicate events are occasionally received by the function, causing duplicate Cosmos DB records. How should you design the Azure Function to handle idempotency?

A.Implement idempotency in the Azure Function by checking if the document record already exists in Cosmos DB or using an upsert operation with a deterministic ID.
B.Set the Event Grid retry count to zero.
C.Deploy an Azure Service Bus queue in front of Blob Storage to serialize all requests into a single partition.
D.Configure Event Grid delivery mode to 'Exactly-Once' in the subscription settings.
AnswerA

Upsert operations or existence checks ensure that processing the same event multiple times yields the exact same state without duplication.

Why this answer

Because event-driven architectures guarantee 'at-least-once' delivery, consumers must be idempotent. The Azure Function should check if the document ID or event ID already exists in Cosmos DB before processing or use an upsert operation.

498
MCQeasy

You want to create a centralized dashboard in the Azure portal that displays custom AI model performance metrics alongside infrastructure CPU and memory metrics. Which Azure Monitor feature should you create?

A.Azure Workbook
B.Azure Service Bus queue
C.Azure Key Vault access policy
D.Azure Container Registry webhook
AnswerA

Correct. Workbooks combine text, metrics, and KQL log queries into interactive visualization dashboards.

Why this answer

Azure Workbooks provide a flexible canvas for data analysis and building rich visual reports within the Azure portal, combining metrics and Log Analytics queries.

499
Multi-Selectmedium

When analyzing cost reports in Azure Cost Management for your machine learning and AI services, which TWO grouping or filtering options help identify spending anomalies? (Choose two)

Select 2 answers
A.Filter by Service Name (e.g., 'Cognitive Services' or 'Machine Learning') to track specific AI spend.
B.Group costs by Application Insights trace message text.
C.Group costs by virtual machine mouse device driver versions.
D.Filter by Azure DNS record TTL settings.
E.Group costs by Resource Group or Resource Name to pinpoint expensive workloads.
AnswersA, E

Correct. Filtering by service name isolates expenditure for specific AI workloads.

Why this answer

Filtering by resource type/service name and grouping by resource group or meters helps identify exact spending drivers.

500
MCQmedium

You are deploying an AI workload to Azure Container Apps. You need to ensure the container scales down to zero when there is no traffic. What should you configure?

A.Set maximum replicas to 0.
B.Enable the 'Always On' flag.
C.Set minimum replicas to 0.
D.Configure an external HTTP trigger.
AnswerC

Setting min-replicas to 0 allows for scale-to-zero.

Why this answer

Setting the min-replicas to 0 enables scale-to-zero in ACA.

501
Multi-Selecthard

You are designing a data layer architecture for an enterprise AI assistant that requires high-performance vector search, structured filtering, and multi-tenant isolation. Which THREE design patterns should you consider? (Choose three)

Select 3 answers
A.Combining vector similarity with metadata filters to narrow search scope
B.Storing all tenant data in a single unindexed JSON blob without partition keys
C.Using tenant-specific partition keys or metadata filter tags for multi-tenant isolation
D.Hardcoding all user prompts directly into the search index schema
E.Implementing hybrid search to capture both exact keyword matches and conceptual similarities
AnswersA, C, E

Pre-filtering or combined filtering ensures only authorized and relevant context is retrieved.

Why this answer

Effective AI data layer design patterns include logical partitioning for multi-tenancy, pre-filtering metadata, and hybrid retrieval combining keyword and vector search.

502
Multi-Selecteasy

Your organization requires that container images stored in Azure Container Registry (ACR) comply with security standards. Which TWO actions can you take to secure container images in ACR? (Choose two.)

Select 2 answers
A.Grant Contributor permissions to every external guest user
B.Store registry administrator credentials in public GitHub repositories for easy team access
C.Disable all network firewalls on the registry to allow unrestricted public pulling
D.Enable Microsoft Defender for Cloud vulnerability scanning for ACR registries
E.Enable content trust to ensure only signed container images are deployed
AnswersD, E

Defender for Cloud scans container images for vulnerabilities upon push.

Why this answer

Securing ACR involves enabling vulnerability scanning via Microsoft Defender for Cloud and enforcing content trust / image signing.

503
Multi-Selecthard

When configuring vector search algorithms in Azure AI Search, you can tune several parameters associated with the Hierarchical Navigable Small World (HNSW) graph. Which THREE parameters are configurable within an HNSW algorithm profile?

Select 3 answers
A.efConstruction
B.bm25K1
C.chunkOverlapSize
D.efSearch
E.m
AnswersA, D, E

efConstruction determines the size of the dynamic candidate list during index building, trading off index build time against recall accuracy.

Why this answer

The HNSW algorithm profile configuration in Azure AI Search accepts parameters such as m (max bi-directional links per node), efConstruction (size of dynamic candidate list during construction), and efSearch (size of dynamic candidate list during search).

504
Multi-Selecthard

You are designing a secure MLOps pipeline using Azure Container Registry. Which THREE practices should you implement to secure your AI container images?

Select 3 answers
A.Disable role-based access control (RBAC) on the registry to simplify management
B.Use managed identities instead of admin credentials for registry authentication
C.Sign container images using Notation before pushing to ACR
D.Enable Microsoft Defender for Cloud vulnerability scanning on the ACR registry
E.Enable anonymous pull access for all public developers
AnswersB, C, D

Managed identities eliminate hardcoded static credentials.

Why this answer

Securing container images in ACR involves vulnerability scanning, access control with managed identities, and content signing.

505
Multi-Selectmedium

When configuring an Azure AI Search index, which TWO field attributes are required if a field is going to be used for full-text keyword search and filtering? (Choose two)

Select 2 answers
A.searchable
B.vectorSearchProfile
C.facetable
D.filterable
E.sortable
AnswersA, D

The searchable attribute enables full-text search indexing using BM25.

Why this answer

To search and filter text fields, the field must be marked as searchable (for BM25 search) and filterable (for OData filters).

506
MCQeasy

Which Azure AI Search feature allows you to re-order search results using advanced machine learning models trained by Microsoft to dramatically improve semantic relevance?

A.BM25 Scoring
B.Fuzzy Search
C.Reciprocal Rank Fusion
D.Semantic Ranker
AnswerD

Semantic Ranker applies advanced AI models to re-rank search results for better relevance.

Why this answer

The Semantic Ranker feature in Azure AI Search uses deep learning models to re-rank top search results.

507
MCQhard

You are optimizing query performance for an Azure AI Search index experiencing high query volumes with vector search. You need to scale out query processing capabilities without increasing index build time. Which action should you perform?

A.Rebuild the index using exhaustiveKnn
B.Increase the number of partition instances
C.Increase the number of search units by adding replica instances
D.Upgrade the search service from Standard to Basic tier
AnswerC

Adding replicas scales out query throughput and provides high availability for vector search workloads.

Why this answer

To scale out query throughput (QPS) and handle higher query load for vector search in Azure AI Search, you should increase the number of replica units.

Page 6

Page 7 of 7

All pages