Security And Observability →hardMultiple ChoiceObjective-mapped

AI-200 Security And Observability Practice Question

You are investigating an incident where an AI model endpoint experienced a spike in memory consumption, resulting in Out-Of-Memory (OOM) container crashes. You want to query Log Analytics to find the exact container memory working set percentage across all replicas during the past 2 hours. Which table and KQL query should you use?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

InsightsMetrics | where TimeGenerated > ago(2h) | where Namespace == 'container' and Name == 'MemoryWorkingSetBytes' | summarize avg(Val) by Computer

Container metrics in Azure Monitor are stored in the `InsightsMetrics` table where `Namespace == 'container'` and `Name == 'memoryWorkingSetBytes'` or similar performance counters.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
SecurityEvent | where TimeGenerated > ago(2h) | summarize count() by Account
Why it's wrong here
Incorrect. SecurityEvent tracks Windows security log events, not container memory usage.
✓
InsightsMetrics | where TimeGenerated > ago(2h) | where Namespace == 'container' and Name == 'MemoryWorkingSetBytes' | summarize avg(Val) by Computer
Why this is correct
Correct. InsightsMetrics stores container performance counters such as memory working set.
✗
AzureActivity | where TimeGenerated > ago(2h) | summarize count() by OperationName
Why it's wrong here
Incorrect. AzureActivity tracks control plane operations, not container memory metrics.
✗
AppTraces | where TimeGenerated > ago(2h) | summarize count() by Message
Why it's wrong here
Incorrect. AppTraces stores application trace statements, not system container metrics.

About these practice questions

One of 503 original AI-200 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Microsoft exam blueprint

Ready to practise?

Put this into practice with a full scored session.

Start practice session

Scored practice sessions

Short scored sets — answer, get feedback, read the explanation, move on.

AI-200 Practice Test 3 — 25 Questions→AI-200 Practice Test 5 — 25 Questions→

Domain-focused practice

Drill one exam section at a time instead of jumping between unrelated topics.

Security And Observability Containerized AI Workloads Data Management Services And Vector Search

Practice by question type

Filter questions by type — troubleshooting, exhibit, drag-and-drop, multi-select, and more.

Browse scenarios

Practice by topic

One concept per page — questions, worked explanations, and a short concept guide.

Security And Observability practice questions Data Management Services And Vector Search practice questions AI-200 fundamentals practice questions Event Driven Integration practice questions

Keep going

All AI-200 questions Study guide AI-200 practice test

This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.