Courseiva

CCNA Plan Manage Azure Ai Questions

75 of 218 questions · Page 1/3 · Plan Manage Azure Ai topic · Answers revealed

Practice these questionsExam hubAll questions
1
MCQhard

Refer to the exhibit. You are creating an Azure AI Search index. You want to enable semantic search using the 'content' field as both the title and the content. However, you receive an error that semantic search cannot be configured. What is the most likely reason?

A.The 'content' field is of type 'Edm.String', which is not supported for semantic search.
B.The 'content' field is not searchable.
C.The index does not have a sortable field for the title.
D.The 'contentFields' list is empty; semantic search requires at least one content field or keywords field.
AnswerD

Semantic search requires at least one field in title, content, or keywords; contentFields is empty.

Why this answer

Option D is correct because semantic search in Azure AI Search requires at least one field specified in the 'contentFields' list to provide the textual content for semantic ranking. If the 'contentFields' list is empty, the service cannot extract semantic meaning from the index, resulting in the configuration error. The 'content' field can serve as both title and content if properly assigned, but the error indicates the list itself is missing entries.

Exam trap

The trap here is that candidates may assume the 'content' field is inherently valid for semantic search without realizing the semantic configuration requires explicit assignment of fields to the 'contentFields' list, and an empty list triggers the error regardless of the field's properties.

How to eliminate wrong answers

Option A is wrong because 'Edm.String' is the standard field type for semantic search content; semantic search specifically requires fields of type 'Edm.String' that are also searchable. Option B is wrong because the error message about semantic search configuration does not relate to the field's searchable attribute; a non-searchable field would cause a different error when attempting to use it in queries. Option C is wrong because semantic search does not require a sortable field for the title; the title field only needs to be searchable and of type 'Edm.String', and sorting is irrelevant to semantic ranking.

Practice this question →
2
MCQeasy

You need to restrict access to an Azure AI Language resource so that only a specific virtual network can call the endpoint. Which configuration should you use?

A.Rotate the shared access keys
B.Enable a service endpoint or private endpoint for the resource
C.Assign a managed identity to the resource
D.Configure an IP firewall rule with the VNet's public IP range
AnswerB

Service endpoints and private endpoints restrict access to specific VNets.

Why this answer

Option B is correct because Azure AI Language resources can be isolated to a specific virtual network by enabling either a service endpoint (via the Microsoft.CognitiveServices service tag) or a private endpoint (using Azure Private Link). This configuration ensures that only traffic originating from the designated VNet can reach the resource's endpoint, effectively blocking all public internet access. Service endpoints provide a direct, optimized route from the VNet to the resource, while private endpoints assign a private IP from the VNet to the resource, making it accessible only within the VNet.

Exam trap

The trap here is that candidates often confuse network-level access controls (service/private endpoints) with authentication mechanisms (keys, managed identities) or IP-based firewalls, mistakenly believing that rotating keys or using managed identities can restrict network access, or that a VNet's public IP range is the same as the VNet's internal address space.

How to eliminate wrong answers

Option A is wrong because rotating shared access keys changes the authentication tokens but does not restrict network-level access; any client with the new keys can still call the endpoint from anywhere on the internet. Option C is wrong because assigning a managed identity enables the resource to authenticate to other Azure services (e.g., Azure Key Vault) without storing credentials, but it does not control which networks can reach the resource's endpoint. Option D is wrong because IP firewall rules with the VNet's public IP range are ineffective for restricting access to a specific virtual network, as VNet traffic typically uses private IPs (RFC 1918) and the public IP of a VNet's NAT gateway or load balancer is not the same as the VNet's internal address space; moreover, IP firewall rules cannot distinguish traffic originating from within the VNet versus other sources using the same public IP range.

Practice this question →
3
MCQmedium

You are designing an AI solution that uses Azure AI Document Intelligence to extract data from invoices. The solution must handle a high volume of documents with varying layouts. Which approach should you use?

A.Use a custom template model with fixed field positions
B.Train a custom neural model with labeled invoices
C.Use the prebuilt invoice model
D.Extract text using OCR and then use regex parsing
AnswerB

Neural models adapt to varying layouts and scale well.

Why this answer

Option B is correct because custom neural models in Azure AI Document Intelligence are designed to handle high volumes of documents with varying layouts. Unlike fixed template models, neural models learn from labeled examples and generalize across different invoice structures, making them ideal for diverse, high-volume scenarios.

Exam trap

The trap here is that candidates often assume the prebuilt invoice model (Option C) is sufficient for all invoice scenarios, but it only works for standard layouts and fails when invoices have custom fields or non-standard structures.

How to eliminate wrong answers

Option A is wrong because custom template models rely on fixed field positions and are brittle when layouts vary; they fail if the invoice format changes even slightly. Option C is wrong because the prebuilt invoice model is limited to standard invoice layouts and cannot adapt to custom or highly variable formats, leading to poor extraction accuracy. Option D is wrong because OCR with regex parsing is a brittle, rule-based approach that cannot handle the semantic understanding required for diverse invoice layouts and fails when fields are not in predictable positions or formats.

Practice this question →
4
Drag & Dropmedium

Drag and drop the steps to troubleshoot a failed Azure AI Search indexer execution into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order

Why this order

First check history, review errors, verify data source, check skillset, then re-run.

Practice this question →
5
MCQhard

You see the exhibit representing an Azure Bot resource configuration. The bot is not responding to user messages. What should you verify first?

A.Check that the endpoint URL is correct and the web app is running
B.Ensure that LUIS app IDs are provided
C.Verify that the Application Insights key is valid
D.Confirm that the msaAppId is a valid GUID
AnswerA

The bot's web app must be running and the endpoint must be reachable.

Why this answer

The most common reason a bot fails to respond to user messages is that the endpoint URL configured in the Azure Bot resource does not match the actual URL of the running web app, or the web app itself is stopped or unresponsive. Without a correct and reachable endpoint, the Bot Framework Service cannot forward messages to the bot's message handler, causing a complete communication breakdown.

Exam trap

The trap here is that candidates often jump to authentication or AI service configuration issues, but the most immediate and common cause of a non-responsive bot is a simple connectivity or endpoint misconfiguration.

How to eliminate wrong answers

Option B is wrong because LUIS app IDs are only required if the bot uses Language Understanding for intent detection; they are not necessary for basic message handling. Option C is wrong because Application Insights is used for telemetry and monitoring, not for core message routing; an invalid key would not prevent the bot from responding. Option D is wrong because the msaAppId (Microsoft App ID) is used for authentication with the Bot Framework Service, but if it were invalid, the bot would typically fail to register or authenticate, not silently ignore messages; the endpoint and web app availability are more fundamental.

Practice this question →
6
MCQmedium

You are a lead AI engineer for a global retail company. The company is building an AI-powered customer support chatbot using Microsoft Foundry. The chatbot must answer product questions, process returns, and escalate to human agents when needed. The solution uses Azure AI Language for intent recognition and Azure AI Bot Service for bot orchestration. During testing, the chatbot fails to understand customer queries about return policies. The intents 'ProductInquiry' and 'ReturnRequest' are defined, but the model often confuses them. You need to improve intent classification accuracy. The development team has already collected 500 sample utterances for each intent. You have a budget to collect additional data. What should you do?

A.Use Azure AI Translator to translate utterances into multiple languages
B.Collect additional utterances that are similar to the confusing ones and retrain
C.Increase the confidence threshold in the bot configuration
D.Create a new custom language project and retrain from scratch
AnswerB

Adds more examples to differentiate intents.

Why this answer

Option B is correct because collecting additional utterances that are similar to the confusing ones directly addresses the ambiguity between the 'ProductInquiry' and 'ReturnRequest' intents. By providing more representative examples of edge cases where the intents overlap, the Azure AI Language model can better learn the subtle linguistic patterns that distinguish them, thereby improving classification accuracy without requiring a complete retraining from scratch.

Exam trap

The trap here is that candidates often assume increasing the confidence threshold (Option C) will fix misclassifications, but this only adjusts the prediction cutoff and does not improve the underlying model's ability to differentiate intents, which is a data quality issue, not a threshold tuning issue.

How to eliminate wrong answers

Option A is wrong because translating utterances into multiple languages does not resolve confusion between two intents in the same language; it only adds multilingual support, which is irrelevant to the core issue of intent ambiguity. Option C is wrong because increasing the confidence threshold would only reject more low-confidence predictions, not improve the model's ability to distinguish between similar intents; it could actually increase false negatives by requiring higher confidence for correct classifications. Option D is wrong because creating a new custom language project and retraining from scratch is unnecessary and wasteful; the existing project already has 500 utterances per intent, and the problem is specifically about confusing utterances, not a fundamental flaw in the project setup.

Practice this question →
7
Multi-Selectmedium

Which TWO actions should you take to ensure compliance with data residency requirements when using Azure AI services across multiple regions?

Select 2 answers
A.Use a global Azure AI service resource and configure geo-replication
B.Configure the AI service's data residency settings to restrict data to the region
C.Enable Azure Front Door to route traffic to the nearest region
D.Disable data replication for the AI service
E.Deploy separate instances of the AI service in each required region
AnswersB, E

Some services offer data residency settings to limit data movement.

Why this answer

Option A is correct because deploying resources in the required region ensures data stays there. Option E is correct because configuring data residency settings in the service prevents cross-region data movement. Option B is incorrect because data may still move across regions.

Option C is incorrect because Azure Front Door does not affect data residency. Option D is incorrect because disabling redundancy does not guarantee data residency.

Practice this question →
8
MCQhard

You are deploying an Azure AI Search solution for a global e-commerce platform. The index must support real-time updates from a product catalog stored in Azure Cosmos DB, with a maximum indexing latency of 10 seconds. The solution must also handle 5000 queries per second (QPS) during peak hours. What should you configure?

A.Use the Storage Optimized L2 tier with 6 partitions and 4 replicas.
B.Use the Free tier and enable change tracking on Cosmos DB.
C.Use Standard S3 tier with 12 replicas and enable incremental indexing.
D.Use Standard S2 tier with 3 replicas and indexer scheduling every 5 minutes.
AnswerC

S3 supports high throughput; replicas multiply QPS; incremental indexing reduces latency.

Why this answer

Option C is correct because the Standard S3 tier supports high query volumes (up to 5000 QPS) with 12 replicas, and incremental indexing enables near-real-time updates from Cosmos DB by processing only changed documents, keeping latency under 10 seconds. The combination of sufficient replicas for throughput and incremental indexing for low-latency indexing meets both requirements.

Exam trap

The trap here is that candidates may confuse 'incremental indexing' with 'indexer scheduling,' assuming a scheduled indexer can meet low-latency requirements, but scheduling introduces fixed intervals (e.g., 5 minutes) that violate the 10-second latency constraint.

How to eliminate wrong answers

Option A is wrong because the Storage Optimized L2 tier is designed for large storage capacity with lower query throughput, not for high QPS (5000) or low-latency indexing; 6 partitions and 4 replicas cannot sustain 5000 QPS. Option B is wrong because the Free tier is limited to 1 partition, 1 replica, and 3 indexes, with a maximum of 10 QPS, making it incapable of handling 5000 QPS or real-time updates. Option D is wrong because the Standard S2 tier with 3 replicas supports only up to 1500 QPS (500 per replica), and indexer scheduling every 5 minutes introduces a minimum 5-minute latency, far exceeding the 10-second requirement.

Practice this question →
9
MCQhard

Your team is developing a chatbot using Azure AI Bot Service with Language Understanding (LUIS). You need to improve intent recognition for user queries that contain typos. What should you recommend?

A.Add synonym lists for common misspellings
B.Use Azure Cognitive Search to correct typos
C.Enable Bing Spell Check in the LUIS app settings
D.Train the model with many examples containing typos
AnswerC

Corrects typos automatically before processing.

Why this answer

Option C is correct because enabling Bing Spell Check in the LUIS app settings allows the service to automatically correct typos in user utterances before they are processed for intent recognition. This built-in feature integrates directly with LUIS at the endpoint, correcting misspelled words to improve the accuracy of intent and entity extraction without requiring manual data augmentation or external services.

Exam trap

The trap here is that candidates often assume training with typos (Option D) is the best way to handle misspellings, but Microsoft explicitly recommends using Bing Spell Check as a separate preprocessing layer rather than bloating the training data with error-prone examples.

How to eliminate wrong answers

Option A is wrong because synonym lists in LUIS are used to map different words that have the same meaning (e.g., 'car' and 'automobile'), not to handle typos or misspellings; they do not correct character-level errors. Option B is wrong because Azure Cognitive Search is a search indexing and query service, not a spell-checking tool; it cannot be used to correct typos in real-time LUIS utterances. Option D is wrong because while training with many examples containing typos might help the model learn some patterns, it is inefficient and does not generalize well to unseen typos; LUIS's built-in Bing Spell Check is the recommended and more robust approach.

Practice this question →
10
MCQhard

Refer to the exhibit. You deployed a Conversational Language Understanding (CLU) project. A user says 'hi, where is my order?' The model returns a single intent 'Greeting' with confidence 0.85. You need the model to detect both intents. What should you change?

A.Lower the confidenceThreshold to 0.5.
B.Add more utterances to the 'OrderStatus' intent.
C.Set 'multipleIntents' to true.
D.Change the project kind to 'Orchestration'.
AnswerC

Enabling multipleIntents allows the model to return multiple intents.

Why this answer

Option C is correct because the Conversational Language Understanding (CLU) service supports multi-intent detection only when the 'multipleIntents' flag is explicitly set to true in the project settings. By default, CLU returns only the highest-confidence intent; enabling this flag allows the model to return all intents whose confidence exceeds the threshold, enabling detection of both 'Greeting' and 'OrderStatus' from a single utterance.

Exam trap

The trap here is that candidates often confuse the confidenceThreshold parameter with the mechanism for returning multiple intents, assuming lowering the threshold will surface additional intents, when in fact the multipleIntents flag must be enabled first.

How to eliminate wrong answers

Option A is wrong because lowering the confidenceThreshold to 0.5 would still only return a single intent (the highest-confidence one) unless multipleIntents is enabled; the threshold controls the minimum confidence for returned intents but does not enable multi-intent detection. Option B is wrong because adding more utterances to the 'OrderStatus' intent improves its training data but does not change the inference behavior to return multiple intents; the model will still only output the top-scoring intent. Option D is wrong because changing the project kind to 'Orchestration' is used to route utterances to different language services (e.g., LUIS, QnA Maker) rather than enabling multi-intent detection within a single CLU project; it addresses a different architectural need.

Practice this question →
11
Multi-Selectmedium

Which TWO actions are recommended to secure an Azure AI Language resource?

Select 2 answers
A.Use managed identities for authentication from Azure services
B.Enable local authentication with access keys
C.Disable public network access and use a private endpoint
D.Allow all Azure services through the firewall
E.Enable anonymous access for public APIs
AnswersA, C

Managed identities eliminate the need for hard-coded credentials.

Why this answer

Managed identities allow Azure AI Language resources to authenticate to other Azure services (like Azure Storage or Azure Key Vault) without storing credentials in code or configuration. This eliminates the risk of access key leakage and aligns with the principle of least privilege, as the identity is tied to the resource lifecycle and can be granted granular RBAC permissions.

Exam trap

The trap here is that candidates often assume disabling public network access alone is sufficient, but they forget that managed identities are required to replace access keys for authentication from Azure services, making both A and C necessary together.

Practice this question →
12
MCQhard

You are responsible for managing costs for multiple Azure AI services in your organization. You notice that provisioned throughput units (PTUs) for Azure OpenAI are not fully utilized. What is the most cost-effective action to optimize spending?

A.Configure auto-scaling to reduce PTUs during low usage
B.Move the resource to a different region with lower pricing
C.Stop the Azure OpenAI service when not in use
D.Reduce the number of provisioned PTUs or switch to pay-as-you-go
AnswerD

Adjusting PTU commitment to actual usage or using token-based billing reduces costs.

Why this answer

Option D is correct because provisioned throughput units (PTUs) represent a fixed capacity commitment. If PTUs are underutilized, the most cost-effective action is to reduce the number of PTUs or switch to the pay-as-you-go (PAYG) model, which charges only for tokens consumed. This directly aligns with cost optimization by eliminating the fixed cost of unused capacity.

Exam trap

The trap here is that candidates confuse PTUs with standard Azure auto-scaling concepts (like VM scale sets) and assume auto-scaling is available for PTUs, when in fact PTUs are a fixed-capacity model that requires manual adjustment or a switch to PAYG for cost optimization.

How to eliminate wrong answers

Option A is wrong because Azure OpenAI does not support auto-scaling for PTUs; PTUs are a fixed, pre-provisioned capacity model, and scaling must be done manually via quota adjustments. Option B is wrong because moving to a different region does not address underutilization of PTUs; regional pricing differences are typically minimal and do not solve the core issue of paying for unused capacity. Option C is wrong because stopping the Azure OpenAI service (e.g., via the Azure portal) is not a supported operation for the resource itself; you can only pause or delete the resource, which would lose all configurations and data, making it impractical for intermittent use.

Practice this question →
13
MCQmedium

You are configuring semantic search in Azure AI Search. Based on the exhibit, which field is used as the title field for semantic ranking?

A.my-semantic-config
B.description
C.title
D.prioritizedKeywordsFields
AnswerC

The titleField property specifies the title field.

Why this answer

Option C is correct because in Azure AI Search semantic ranking, the 'title' field is designated as the primary field for semantic ranking. This field provides a concise, high-level summary of the document content, which the semantic ranker uses to understand the document's main topic and improve relevance scoring. The semantic configuration references this field via the 'titleField' parameter in the semantic configuration object.

Exam trap

The trap here is that candidates often confuse the semantic configuration name (e.g., 'my-semantic-config') with the actual field names used in the configuration, leading them to select the configuration name instead of the correct field like 'title'.

How to eliminate wrong answers

Option A is wrong because 'my-semantic-config' is the name of the semantic configuration object, not a field used for semantic ranking; it defines the configuration but is not a data field. Option B is wrong because 'description' is typically used as the content field (via 'contentFields') for semantic ranking, not the title field; the title field must be explicitly set to 'title' or a similarly named field. Option D is wrong because 'prioritizedKeywordsFields' is a separate parameter in the semantic configuration that specifies fields for keyword boosting, not the title field for semantic ranking.

Practice this question →
14
MCQmedium

You see the exhibit from an Azure OpenAI chat completion request. The assistant is not calling the get_weather function when asked about the weather. What is the most likely reason?

A.The required parameter 'location' is missing from the user message
B.Function calling is not supported in the current Azure OpenAI version
C.The function definition is malformed
D.The function is defined in the system message but not in the 'tools' array
AnswerD

Functions must be passed in the 'tools' parameter of the API request.

Why this answer

Option D is correct because the function definition must be included in the 'tools' array of the request, not in the system message. The system message can describe functions, but the actual definition must be in the 'tools' parameter. Option A is wrong because function calling is supported.

Option B is wrong because there is a required parameter. Option C is wrong because the definition looks correct.

Practice this question →
15
MCQmedium

Your company is deploying an Azure AI Document Intelligence solution to process invoices. The solution must: - Extract key fields (invoice number, date, total amount). - Handle invoices in both PDF and image formats. - Use a prebuilt model to reduce development effort. - Process high volumes (up to 10,000 invoices per day). - Store extracted data in Azure Cosmos DB. You need to design the processing pipeline. What should you do?

A.Use the synchronous API of the prebuilt invoice model. For each invoice, call the API and write the result to Cosmos DB.
B.Use the prebuilt invoice model with the async API. Submit all invoices for analysis. Use an Azure Function to poll for results and write to Cosmos DB.
C.Use the prebuilt receipt model to process invoices. Store results in Cosmos DB.
D.Use the layout model to extract text from invoices. Then use Azure AI Language to extract entities.
AnswerB

Async API handles high volume; Azure Function automates the workflow.

Why this answer

Option B is correct because the prebuilt invoice model's asynchronous API is designed for high-volume batch processing, allowing you to submit up to 10,000 invoices per day without timeout or rate-limit issues. The async API returns operation locations that you can poll via an Azure Function, and once results are ready, you write the extracted fields (invoice number, date, total amount) to Azure Cosmos DB. This decouples submission from retrieval, ensuring scalability and reliability for both PDF and image formats.

Exam trap

The trap here is that candidates assume the synchronous API is simpler and sufficient for high volume, but they overlook the rate limits and payload constraints that make the async API mandatory for production-scale invoice processing.

How to eliminate wrong answers

Option A is wrong because the synchronous API has strict payload size and rate limits (e.g., 8 MB per request, 15 requests per second per region), making it unsuitable for processing 10,000 invoices daily without throttling or timeouts. Option C is wrong because the prebuilt receipt model is trained on receipts, not invoices, so it will fail to extract invoice-specific fields like invoice number and total amount accurately. Option D is wrong because using the layout model plus Azure AI Language for entity extraction is a custom, multi-step approach that increases development effort and complexity, contradicting the requirement to use a prebuilt model to reduce development effort.

Practice this question →
16
MCQmedium

You are deploying an Azure AI Document Intelligence solution to process invoices. The solution must extract line-item details such as product code, quantity, and unit price. Which prebuilt model should you use?

A.prebuilt-receipt
B.prebuilt-invoice
C.prebuilt-idDocument
D.prebuilt-layout
AnswerB

Designed for invoice processing with line-item extraction.

Why this answer

The prebuilt-invoice model is specifically designed to extract line-item details such as product code, quantity, and unit price from invoices. It uses deep learning models trained on thousands of invoice samples to identify and extract structured data, including tables and line items, making it the correct choice for this requirement.

Exam trap

The trap here is that candidates might choose prebuilt-layout thinking it can extract any table data, but it lacks the specialized field mapping and labeling that prebuilt-invoice provides for invoice-specific line items.

How to eliminate wrong answers

Option A is wrong because prebuilt-receipt is optimized for receipt documents, focusing on fields like merchant name, transaction date, and total amount, not the detailed line-item structure (product code, quantity, unit price) found in invoices. Option C is wrong because prebuilt-idDocument is designed to extract information from government-issued identification documents (e.g., driver's licenses, passports), such as ID number, name, and date of birth, and has no capability for invoice line-item extraction. Option D is wrong because prebuilt-layout extracts text, tables, and selection marks from documents without specialized field extraction for invoices; it returns raw table data but lacks the pre-trained model logic to identify and label specific invoice fields like product code or unit price.

Practice this question →
17
MCQeasy

Refer to the exhibit. A developer creates an agent in Azure AI Foundry with a code_interpreter tool. The agent is supposed to generate plots but returns errors. What is the most likely cause?

A.The instructions are too generic
B.The JSON syntax is incorrect
C.The code interpreter tool does not support visualization libraries
D.The agent name is invalid
AnswerC

Code interpreter has limited capabilities; plotting may require additional configuration.

Why this answer

The code_interpreter tool in Azure AI Foundry is designed for executing Python code in a sandboxed environment, but it does not include or support visualization libraries such as Matplotlib, Seaborn, or Plotly. Therefore, any attempt to generate plots using these libraries will result in errors, making option C the correct answer.

Exam trap

The trap here is that candidates assume the code_interpreter tool supports all common Python libraries, including visualization ones, because it is based on Python, but Azure AI Foundry intentionally restricts the environment to prevent security risks and resource abuse.

How to eliminate wrong answers

Option A is wrong because generic instructions do not cause runtime errors; they may lead to incorrect outputs but not execution failures. Option B is wrong because JSON syntax errors would be caught during agent creation or configuration, not during plot generation. Option D is wrong because an invalid agent name would prevent agent creation entirely, not cause runtime errors when generating plots.

Practice this question →
18
MCQmedium

You need to analyze images to detect objects and read text from documents using a single Azure AI service. Which service should you use?

A.Azure AI Vision
B.Azure AI Document Intelligence (Form Recognizer)
C.Azure AI Custom Vision
D.Azure AI Language Service
AnswerA

Azure AI Vision includes both object detection and OCR capabilities.

Why this answer

Azure AI Vision is the correct choice because it provides both image analysis (object detection) and optical character recognition (OCR) for reading text from documents within a single service. Its Read API and Analyze Image API cover both requirements without needing separate services.

Exam trap

The trap here is that candidates often confuse Azure AI Document Intelligence (Form Recognizer) as the only service for text extraction, overlooking that Azure AI Vision also provides OCR for general document text reading.

How to eliminate wrong answers

Option B is wrong because Azure AI Document Intelligence (Form Recognizer) is specialized for extracting structured data from forms and documents, not general object detection in images. Option C is wrong because Azure AI Custom Vision is designed for training custom image classification and object detection models, not for reading text from documents. Option D is wrong because Azure AI Language Service focuses on natural language processing tasks like sentiment analysis and key phrase extraction, not image analysis or OCR.

Practice this question →
19
Matchingmedium

Match each Azure AI concept to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

URL to access a cognitive service

Authentication credential for API access

Azure datacenter location for the service

Container for related Azure resources

Billing and access management container

Why these pairings

These are fundamental concepts for managing Azure services.

Practice this question →
20
MCQeasy

You are planning to use Azure AI Content Safety to moderate user-generated content in a social media application. The solution must detect hate speech and self-harm content. Which Content Safety features should you enable?

A.Severity levels for all categories
B.Hate and self-harm content filters
C.Custom categories for hate speech and self-harm
D.Image moderation
AnswerB

These are built-in categories in Content Safety.

Why this answer

Azure AI Content Safety provides pre-built filters for specific harm categories, including hate speech and self-harm. Enabling the 'Hate and self-harm content filters' directly activates the detection models for these categories, meeting the requirement without needing custom categories or additional features.

Exam trap

The trap here is that candidates might think custom categories are needed for specific harm types like self-harm, but Azure AI Content Safety already includes these as built-in categories, so enabling the pre-built filters is the correct approach.

How to eliminate wrong answers

Option A is wrong because severity levels are a configuration setting within each category filter, not a feature to enable; they adjust sensitivity but don't activate detection for specific categories. Option C is wrong because custom categories are for defining new harm types not covered by built-in filters, but hate speech and self-harm are already supported as standard categories, so custom categories are unnecessary and add complexity. Option D is wrong because image moderation is a separate feature for analyzing visual content, but the question focuses on text-based hate speech and self-harm detection; enabling it alone wouldn't address the text requirement.

Practice this question →
21
MCQhard

You are developing a bot using Microsoft Bot Framework and Azure AI Language. The bot must handle user intents that change mid-conversation. Which feature should you implement?

A.Prompt dialogs
B.Waterfall dialogs
C.Adaptive dialogs
D.QnA Maker knowledge base
AnswerC

Adaptive dialogs support dynamic conversation flow and can handle interruptions and changing intents.

Why this answer

Adaptive dialogs are designed for dynamic, event-driven conversations where user intents can change mid-conversation. They use a trigger-based model (e.g., onIntent, onTurn) that allows the bot to react to new intents at any point, unlike linear dialog models. This makes them ideal for handling mid-conversation intent shifts without requiring predefined dialog flows.

Exam trap

The trap here is that candidates often confuse waterfall dialogs (which are sequential and rigid) with adaptive dialogs (which are event-driven and flexible), assuming any dialog can handle mid-conversation changes, but only adaptive dialogs support dynamic interruption and re-routing.

How to eliminate wrong answers

Option A is wrong because prompt dialogs are simple, reusable components for collecting a single piece of input (e.g., text, number) and do not handle intent changes mid-conversation. Option B is wrong because waterfall dialogs follow a fixed, sequential step-by-step flow and cannot dynamically redirect to a different intent once started; they are designed for linear, predictable interactions. Option D is wrong because QnA Maker knowledge base is a question-answering service that matches user queries to predefined Q&A pairs; it does not manage conversational state or handle intent routing.

Practice this question →
22
Multi-Selectmedium

You need to design an Azure AI solution that processes sensitive customer data. The solution must comply with GDPR and data residency requirements. Which TWO actions should you take?

Select 2 answers
A.Enable customer-managed keys (CMK) for the AI resource
B.Use Microsoft Entra ID for authentication
C.Use a private endpoint to connect to the AI resource
D.Deploy the AI resource in the region where the data originates
E.Configure data retention and deletion policies
AnswersD, E

Ensures data residency.

Why this answer

Option D is correct because deploying the AI resource in the region where the data originates ensures compliance with GDPR data residency requirements, which mandate that personal data must not leave the geographic region of the data subject. This directly addresses the principle of data localization, a core GDPR obligation for controllers and processors.

Exam trap

The trap here is that candidates confuse security controls (CMK, private endpoints, Entra ID) with data residency and compliance requirements, assuming any security measure satisfies GDPR, when in fact GDPR specifically mandates geographic data localization and retention policies.

Practice this question →
23
MCQmedium

Refer to the exhibit. You are reviewing a Bicep template for deploying an Azure AI Language resource. After deployment, you need to ensure that the resource uses a private endpoint to block public access. Which additional resource should you include in the template?

A.A service endpoint for Microsoft.CognitiveServices
B.A virtual network peering connection
C.A virtual network gateway
D.A Private Endpoint resource linked to the Cognitive Services account
AnswerD

Private endpoint enables private access and disables public access.

Why this answer

Option D is correct because a Private Endpoint resource, when linked to the Cognitive Services account via the `privateLinkServiceId` property, assigns a private IP address from a virtual network to the Azure AI Language resource. This blocks all public access by default when the resource's `publicNetworkAccess` property is set to 'Disabled', ensuring traffic only flows over the Microsoft backbone network through Azure Private Link.

Exam trap

The trap here is that candidates confuse service endpoints (which only filter source traffic but leave the public endpoint active) with private endpoints (which completely remove public accessibility), leading them to incorrectly select Option A.

How to eliminate wrong answers

Option A is wrong because a service endpoint for Microsoft.CognitiveServices does not block public access; it only restricts source traffic to a specific virtual network subnet while still allowing public endpoints to be reachable from the internet. Option B is wrong because virtual network peering connects two virtual networks but does not provide a private IP address or block public access to an Azure AI resource. Option C is wrong because a virtual network gateway is used for site-to-site VPN or ExpressRoute connections, not for creating a private endpoint to an Azure PaaS service.

Practice this question →
24
Multi-Selectmedium

Which TWO actions are required to enable private endpoint connectivity for an Azure AI Language resource?

Select 2 answers
A.Disable public network access on the AI resource
B.Create the private endpoint in a subnet of a virtual network
C.Configure an Azure Firewall rule to allow the private endpoint
D.Create a private DNS zone for the resource
E.Add a service tag to the network security group
AnswersA, B

To enforce private endpoint, public access must be disabled.

Why this answer

Private endpoint requires a subnet in a VNet and disabling public network access. Option A is wrong because private DNS zone is optional but recommended. Option D is wrong because service tags are not required.

Option E is wrong because firewall rules are not needed.

Practice this question →
25
MCQeasy

You are deploying an Azure AI Language service custom text classification model. After training, the model achieves 95% accuracy on the test set but only 60% on a held-out validation set. What is the most likely cause?

A.Overfitting to the training data
B.Data leakage between training and test sets
C.Insufficient training data
D.Label imbalance in the training data
AnswerA

Overfitting causes high accuracy on training/test sets but poor generalization.

Why this answer

A 95% accuracy on the test set but only 60% on a held-out validation set is a classic sign of overfitting. The model has memorized patterns specific to the training and test sets (which may share distribution or preprocessing artifacts) but fails to generalize to unseen data. In Azure AI Language custom text classification, overfitting often occurs when the model is too complex relative to the amount of training data or when hyperparameters like learning rate or number of epochs are not tuned properly.

Exam trap

The trap here is that candidates often confuse overfitting with data leakage or label imbalance, but the key diagnostic is the large gap between high test accuracy and low validation accuracy, which uniquely points to overfitting.

How to eliminate wrong answers

Option B is wrong because data leakage between training and test sets would inflate both test and validation accuracy, not create a large gap between them. Option C is wrong because insufficient training data typically causes underfitting (low accuracy on both test and validation sets), not a high test accuracy with low validation accuracy. Option D is wrong because label imbalance in the training data would cause the model to be biased toward the majority class, leading to poor performance on minority classes across both test and validation sets, not a discrepancy between them.

Practice this question →
26
MCQhard

Your Azure AI Language custom entity recognition model incorrectly extracts 'Microsoft' as an organization when it refers to the company, but fails to extract 'Microsoft' as a product when it refers to the software. How should you improve the model?

A.Reduce the amount of training data to avoid confusion
B.Remove the 'Organization' entity type from the model
C.Add more training sentences without labeling the entity type
D.Label 'Microsoft' as both 'Organization' and 'Product' in different training sentences with appropriate context
AnswerD

Providing multiple entity types for the same word helps the model learn context-based disambiguation.

Why this answer

Option D is correct because custom entity recognition models in Azure AI Language learn to distinguish entity types based on context. By labeling 'Microsoft' as 'Organization' in sentences where it refers to the company and as 'Product' in sentences where it refers to the software, you provide the model with the contextual clues needed to disambiguate the same token across different uses. This supervised learning approach directly addresses the model's failure to recognize the product entity.

Exam trap

The trap here is that candidates may think reducing data or removing entity types simplifies the problem, but Azure AI Language models require diverse, labeled examples with context to handle polysemy (same word, different meanings).

How to eliminate wrong answers

Option A is wrong because reducing training data would likely worsen model performance by removing valuable examples, not resolve the ambiguity. Option B is wrong because removing the 'Organization' entity type would prevent the model from correctly extracting 'Microsoft' as an organization, which is a valid extraction in many contexts, and does not solve the product extraction issue. Option C is wrong because adding training sentences without labeling the entity type provides no supervised signal for the model to learn the distinction between 'Organization' and 'Product' for the same token.

Practice this question →
27
Multi-Selecthard

Which THREE considerations are essential when designing a cost management strategy for an enterprise Azure AI solution that uses multiple AI services, including Azure OpenAI Service, Azure AI Language, and Azure AI Vision?

Select 3 answers
A.Use the Free tier for all services to minimize upfront costs.
B.Choose provisioned throughput units (PTUs) for Azure OpenAI Service for predictable workloads.
C.Use a single multi-service Cognitive Services account to consolidate usage.
D.Deploy Azure Site Recovery to replicate AI services across regions.
E.Enable autoscaling on Azure AI Language to adjust capacity based on demand.
AnswersB, C, E

PTUs provide cost savings over pay-as-you-go for steady usage.

Why this answer

Option B is correct because provisioned throughput units (PTUs) for Azure OpenAI Service provide reserved capacity, ensuring predictable performance and cost for stable workloads. PTUs are ideal for enterprise scenarios where latency and throughput must be consistent, as they allocate dedicated model processing capacity and avoid pay-per-token variability.

Exam trap

The trap here is that candidates often confuse the Free tier's suitability for production or assume Azure Site Recovery can replicate stateless API endpoints, when in fact it is designed for infrastructure-level failover, not cost management.

Practice this question →
28
MCQmedium

Your team uses Azure AI Foundry to deploy a custom chat model. The model must meet compliance by explaining its reasoning and citing sources. Which feature should you enable?

A.Fine-tuning with domain-specific data
B.Content filtering
C.Groundedness detection with citation
D.Prompt engineering
AnswerC

Groundedness detection ensures the model cites sources for compliance.

Why this answer

Groundedness detection with citation is the correct feature because it directly addresses the compliance requirement for the model to explain its reasoning and cite sources. This feature, available in Azure AI Foundry, evaluates the model's responses against the provided grounding documents and automatically generates citations, ensuring that the output is factually supported and traceable.

Exam trap

The trap here is that candidates may confuse content filtering (which blocks unsafe content) with groundedness detection (which ensures factual accuracy and source attribution), leading them to choose option B when the question specifically asks for reasoning and citation capabilities.

How to eliminate wrong answers

Option A is wrong because fine-tuning with domain-specific data improves the model's performance on specialized tasks but does not inherently enforce citation or reasoning transparency; it only adapts the model to a specific dataset. Option B is wrong because content filtering is designed to block harmful or inappropriate content based on predefined categories, not to provide reasoning or source citations for the model's outputs. Option D is wrong because prompt engineering involves crafting input prompts to guide model behavior, but it does not automatically generate citations or ensure that the model's reasoning is explained in a compliant manner; it relies on manual design and does not enforce source attribution.

Practice this question →
29
Multi-Selectmedium

Which THREE components are part of the Azure AI Bot Service?

Select 3 answers
A.Azure AI Search
B.Azure Bot Service (hosting)
C.Azure AI Language (CLU)
D.Bot Framework SDK
E.Bot Framework Composer
AnswersB, D, E

Azure Bot Service provides hosting for bots.

Why this answer

Azure Bot Service is the hosting component that provides a managed environment for deploying and running bots, integrating with channels like Teams, Slack, and Web Chat. It handles authentication, state management, and scaling, making it a core part of the Azure AI Bot Service.

Exam trap

The trap here is that candidates often confuse external AI services like Azure AI Search or Azure AI Language (CLU) as being part of the Azure AI Bot Service, when they are actually separate services that can be integrated but are not core components of the bot service itself.

Practice this question →
30
MCQeasy

You are building a chatbot using Azure AI Bot Service and Language Service. The bot must recognize user intent for 'check order status'. How should you configure the Language Service?

A.Create a custom intent classification project
B.Deploy a QnA Maker knowledge base
C.Configure a sentiment analysis endpoint
D.Use the prebuilt entity extraction model
AnswerA

Intent classification trains a model to map utterances to intents.

Why this answer

To recognize user intent for 'check order status', you need a custom intent classification project in Azure Language Service. This project type uses a trained model to map utterances to specific intents, such as 'CheckOrderStatus', which is exactly what the chatbot requires. Prebuilt models or QnA Maker do not provide custom intent recognition.

Exam trap

The trap here is that candidates confuse intent recognition with entity extraction or QnA, assuming any Language Service feature can handle intents, but only custom intent classification (or conversational language understanding) is designed for this purpose.

How to eliminate wrong answers

Option B is wrong because QnA Maker is designed for question-answering over a knowledge base, not for classifying user intent from natural language utterances. Option C is wrong because sentiment analysis determines the emotional tone of text, not the user's intent or goal. Option D is wrong because prebuilt entity extraction identifies named entities like dates or locations but does not classify the overall intent of a user message.

Practice this question →
31
MCQmedium

You are deploying an Azure AI Language service solution for a multilingual customer support chatbot. The solution must support real-time translation between English, Spanish, and French. Which Azure resource should you provision?

A.Azure AI Speech
B.Azure OpenAI Service
C.Azure AI Language
D.Azure AI Translator
AnswerD

Translator resource is designed for real-time text translation.

Why this answer

Azure AI Translator is the correct resource because it provides real-time text translation across multiple languages, including English, Spanish, and French, via a dedicated REST API. The scenario specifically requires translation between languages, not speech recognition or generative AI, making Azure AI Translator the precise service for this task.

Exam trap

The trap here is that candidates confuse Azure AI Language with Azure AI Translator, assuming the 'Language' service includes translation, when in fact translation is a separate service under the Azure AI Services umbrella.

How to eliminate wrong answers

Option A is wrong because Azure AI Speech handles speech-to-text, text-to-speech, and speech translation, but it is not optimized for pure text translation between multiple languages without audio input. Option B is wrong because Azure OpenAI Service is designed for generative AI tasks like content creation and conversation, not for direct, real-time text translation between specific languages. Option C is wrong because Azure AI Language provides natural language processing capabilities such as sentiment analysis and entity recognition, but it does not include a dedicated real-time translation API; translation is handled by Azure AI Translator.

Practice this question →
32
MCQeasy

Your organization is deploying Azure AI Document Intelligence to process invoices. You need to ensure that the solution meets compliance requirements by preventing data from being stored outside the European Union. What should you configure?

A.Deploy Azure AI Document Intelligence in a multi-region configuration across EU datacenters.
B.Create the Azure AI Document Intelligence resource in a region within the European Union and configure data residency settings.
C.Enable the Resource Firewall on the Azure AI Document Intelligence resource.
D.Use a Private Endpoint to connect to the Azure AI Document Intelligence resource.
AnswerB

Creating the resource in the EU and configuring data residency ensures data stays within the EU.

Why this answer

Option B is correct because creating the Azure AI Document Intelligence resource in an EU region and configuring data residency settings ensures that all data processed by the service remains within the European Union, meeting compliance requirements. Azure AI Document Intelligence does not automatically guarantee data residency based solely on the resource region; explicit data residency configuration is required to prevent data from being stored or processed outside the specified geographic boundary.

Exam trap

The trap here is that candidates assume simply creating the resource in an EU region automatically ensures data residency, but Azure AI Document Intelligence requires explicit data residency configuration to prevent data from being stored or processed outside the chosen region.

How to eliminate wrong answers

Option A is wrong because deploying in a multi-region configuration across EU datacenters does not prevent data from being stored outside the EU; it may replicate data across regions for redundancy, potentially violating data residency requirements. Option C is wrong because enabling the Resource Firewall restricts network access to the resource but does not control where data is stored or processed geographically. Option D is wrong because using a Private Endpoint ensures private network connectivity to the resource but does not enforce data residency; data can still be processed or stored in any region where the resource is deployed.

Practice this question →
33
MCQhard

You are deploying a custom text classification model using Azure AI Language. The model must be retrained monthly with new labeled data. You need to automate the retraining process with minimal manual intervention. Which approach should you use?

A.Create an Azure DevOps pipeline that manually retrains the model every month
B.Retrain the model manually using Language Studio each month
C.Use the Azure AI Language REST API to trigger training and deployment on a schedule using Azure Logic Apps
D.Use Azure Machine Learning to host the custom model and automate retraining
AnswerC

Logic Apps can call the Language API on a schedule to automate retraining.

Why this answer

Option C is correct because Azure Logic Apps can schedule HTTP requests to the Azure AI Language REST API to trigger training and deployment of a custom text classification model. This approach automates the monthly retraining process without manual intervention, using the API's capabilities for model creation, training, and deployment.

Exam trap

The trap here is that candidates may confuse Azure Machine Learning with Azure AI Language, thinking that Azure Machine Learning is the appropriate service for hosting and retraining custom text classification models, when in fact Azure AI Language provides its own REST API for this purpose and is the correct service for custom text classification.

How to eliminate wrong answers

Option A is wrong because an Azure DevOps pipeline that manually retrains the model every month still requires manual intervention to trigger the pipeline, contradicting the requirement for minimal manual intervention. Option B is wrong because retraining manually using Language Studio each month is entirely manual and does not automate the process. Option D is wrong because Azure Machine Learning is not designed to host custom text classification models built with Azure AI Language; it is a separate platform for building and deploying machine learning models, and using it would introduce unnecessary complexity and integration overhead.

Practice this question →
34
MCQeasy

You are designing a solution that uses Azure AI Language to analyze customer feedback. The solution must detect sentiment, extract key phrases, and identify named entities. Which feature should you use?

A.Azure AI Language service
B.Azure AI Speech service
C.Azure AI Computer Vision
D.Translator API
AnswerA

Azure AI Language provides sentiment, key phrases, and entity recognition.

Why this answer

The Azure AI Language service provides pre-built capabilities for sentiment analysis, key phrase extraction, and named entity recognition (NER) as part of its text analytics features. These three tasks are directly supported by the service's Analyze API, making it the correct choice for analyzing customer feedback text.

Exam trap

The trap here is that candidates may confuse Azure AI Language with other Azure AI services that have overlapping names (e.g., Translator API for language tasks) or assume Speech or Vision services can perform text analysis, but only the Language service provides the specific trio of sentiment, key phrases, and NER.

How to eliminate wrong answers

Option B is wrong because Azure AI Speech service is designed for speech-to-text, text-to-speech, and speech translation, not for analyzing text sentiment, key phrases, or named entities. Option C is wrong because Azure AI Computer Vision focuses on image and video analysis (e.g., object detection, OCR), not on natural language processing tasks like sentiment or entity extraction. Option D is wrong because Translator API is specifically for machine translation between languages and does not include sentiment analysis, key phrase extraction, or named entity recognition.

Practice this question →
35
MCQeasy

Your organization wants to implement a document processing pipeline that extracts text from scanned PDFs and identifies named entities. Which two Azure AI services should you use?

A.Azure AI Language
B.Azure AI Custom Vision
C.Azure AI Document Intelligence
D.Azure AI Translator
E.Azure AI Speech
AnswerA, C

Provides named entity recognition to identify entities in text.

Why this answer

Azure AI Document Intelligence (formerly Form Recognizer) is used to extract text from scanned PDFs via OCR, while Azure AI Language provides pre-built named entity recognition (NER) to identify entities like people, organizations, and locations. Together, they form a complete pipeline: Document Intelligence handles the image-to-text conversion, and Language processes the extracted text for entity extraction.

Exam trap

The trap here is that candidates often confuse Azure AI Document Intelligence with Azure AI Custom Vision, thinking Custom Vision can perform OCR, but Document Intelligence is the dedicated service for document text extraction and layout analysis.

How to eliminate wrong answers

Option B is wrong because Azure AI Custom Vision is designed for image classification and object detection, not for OCR or text extraction from scanned documents. Option D is wrong because Azure AI Translator is a machine translation service that converts text between languages, not for extracting text from images or identifying named entities. Option E is wrong because Azure AI Speech handles speech-to-text and text-to-speech, not OCR or NER from scanned PDFs.

Practice this question →
36
MCQmedium

You are testing an Azure OpenAI Service chat completion with function calling. The assistant returned null content and a tool call. What does this indicate?

A.The model is unable to answer the question and returned an error
B.The system message is preventing the model from responding
C.The model is using a tool to answer the question, so content is null
D.The function call syntax is invalid and the model skipped it
AnswerC

Null content with tool call indicates the model is delegating to a function.

Why this answer

Option C is correct because in Azure OpenAI Service function calling, when the model determines that it needs to invoke a tool (e.g., an external API or database query) to fulfill the user's request, it returns a `tool_calls` object with `content` set to `null`. This is the expected behavior—the model is signaling that it is delegating the response to the tool, not that it has failed or is blocked.

Exam trap

The trap here is that candidates often misinterpret a null content as a model failure or error, when in fact it is a standard indicator that the model is actively using a tool to fulfill the request.

How to eliminate wrong answers

Option A is wrong because a null content with a tool call is not an error; it is a deliberate design pattern in function calling where the model defers to the tool for the answer. Option B is wrong because the system message does not prevent the model from responding; the model actively chooses to return a tool call instead of text content. Option D is wrong because if the function call syntax were invalid, the model would either ignore the function definitions entirely or return an error, not a valid tool call with null content.

Practice this question →
37
Multi-Selecthard

You are designing a conversational AI solution using Microsoft Copilot Studio. The solution must: - Allow users to ask questions about company policies stored in SharePoint Online. - Use generative answers with grounding data. - Ensure that responses are based only on approved documents. - Support authentication via Microsoft Entra ID. Which THREE components must be configured as part of the solution?

Select 3 answers
A.Create a new data source in Copilot Studio pointing to SharePoint Online.
B.Create a Power Automate flow to retrieve documents from SharePoint.
C.Configure authentication settings to require Microsoft Entra ID sign-in.
D.Train an AI Builder model to classify policy documents.
E.Add a generative answers topic with a 'knowledge source' node referencing SharePoint.
AnswersA, C, E

This provides the grounding data source for generative answers.

Why this answer

Option A is correct because Copilot Studio allows you to create a new data source that connects directly to SharePoint Online, enabling the generative answers feature to retrieve and ground responses on approved policy documents stored there. This ensures that only content from the specified SharePoint site is used, meeting the requirement for grounding data from approved documents.

Exam trap

The trap here is that candidates often confuse the need for a Power Automate flow or AI Builder model as prerequisites for document retrieval or classification, when in fact Copilot Studio's built-in SharePoint connector and generative answers topic handle both retrieval and grounding without additional custom components.

Practice this question →
38
MCQeasy

You are developing a chatbot that uses Azure AI Language to understand user intents. The chatbot must handle multiple languages and direct users to the appropriate support team based on the detected intent. Which Azure AI Language feature should you use?

A.Text Analytics
B.Conversational language understanding (CLU)
C.QnA Maker
D.Translator
AnswerB

CLU identifies intents and entities from user utterances.

Why this answer

Conversational language understanding (CLU) is the correct feature because it is specifically designed to extract intents and entities from user utterances in a multi-language conversational context. CLU enables the chatbot to detect the user's intent (e.g., 'billing', 'technical support') and route them to the appropriate support team, while also supporting multiple languages through its language-agnostic model training and per-language project configurations.

Exam trap

The trap here is that candidates often confuse 'Text Analytics' (pre-built NLP) with 'Conversational language understanding' (custom intent/entity extraction), mistakenly thinking that Text Analytics can be trained to classify intents, when in fact it only provides pre-built capabilities like sentiment and key phrases.

How to eliminate wrong answers

Option A is wrong because Text Analytics (now part of Azure AI Language) provides pre-built sentiment analysis, key phrase extraction, and entity recognition, but it does not offer custom intent classification or entity extraction for conversational flows — it is not designed for building a chatbot's intent routing logic. Option C is wrong because QnA Maker (now Azure AI Language's custom question answering) is optimized for providing direct answers from a knowledge base of FAQ-style Q&A pairs, not for detecting user intents and routing to different support teams; it lacks the intent classification engine required for multi-intent conversational scenarios. Option D is wrong because Translator is a pure machine translation service that translates text between languages without any capability to detect intents or entities — it cannot interpret the user's goal or route them to a support team.

Practice this question →
39
Multi-Selectmedium

Which THREE factors should you consider when selecting an Azure AI service for a solution that processes multilingual content?

Select 3 answers
A.Availability of custom translation models.
B.Supported languages for the service.
C.Throughput limits and scaling options.
D.Geographic region of the resource.
E.Pricing per transaction.
AnswersA, B, C

Custom models improve translation accuracy for domain-specific terms.

Why this answer

Option A is correct because Azure AI Translator and Azure AI Language support custom translation models via the Custom Translator feature, which allows you to build and deploy domain-specific translation models for multilingual content. This is critical when generic translation models fail to handle industry-specific terminology or brand voice, ensuring higher accuracy for specialized use cases like legal or medical documents.

Exam trap

The trap here is that candidates confuse cost or region considerations (Options D and E) with functional requirements for multilingual processing, overlooking that language support and custom model availability are the primary technical factors, while throughput limits (Option C) are also relevant for scaling but not language-specific.

Practice this question →
40
MCQeasy

You need to enforce that only users from your Microsoft Entra ID tenant can call your Azure AI Language API endpoint. Which security mechanism should you configure?

A.Microsoft Entra ID authentication
B.API key authentication
C.IP whitelist
D.Azure Firewall
AnswerA

Ensures only authorized tenant users can call the endpoint.

Why this answer

Microsoft Entra ID authentication (formerly Azure AD) allows you to enforce that only users and applications from your specific Entra ID tenant can call the Azure AI Language API. This is achieved by configuring a managed identity or service principal and assigning it the Cognitive Services User role, which ensures that tokens issued by your tenant are required for access. API keys and IP whitelists do not provide tenant-level identity enforcement, and Azure Firewall is a network-level control that does not authenticate individual users or applications.

Exam trap

The trap here is that candidates often confuse network-level controls (IP whitelist, Azure Firewall) with identity-level controls, mistakenly thinking that restricting by IP address or network firewall is sufficient to enforce tenant-specific access, when in fact only Entra ID authentication can validate the caller's tenant membership.

How to eliminate wrong answers

Option B is wrong because API key authentication uses a static key that can be shared or leaked, and it does not verify the caller's identity or tenant membership, so any user with the key can access the endpoint regardless of their Entra ID tenant. Option C is wrong because an IP whitelist only restricts access based on source IP addresses, which does not authenticate the user or ensure they belong to a specific Entra ID tenant; an attacker could spoof an IP or use a VPN from an allowed range. Option D is wrong because Azure Firewall is a network security service that filters traffic at the network layer, not at the application or identity layer, and it cannot enforce tenant-specific authentication for API calls.

Practice this question →
41
MCQmedium

You are reviewing the response from an Azure OpenAI Service chat completion API call. The finish_reason is 'stop'. What does this indicate?

A.The model completed the response naturally
B.The response was truncated because the token limit was reached
C.The response was blocked by the content filter
D.The model is still generating the response
AnswerA

'stop' indicates natural completion.

Why this answer

The `finish_reason` field in the Azure OpenAI chat completion API response indicates why the model stopped generating tokens. A value of `'stop'` means the model encountered a natural stopping point, such as the end of a sentence or a logical conclusion, and completed the response without hitting any limits or filters.

Exam trap

The trap here is that candidates often confuse `finish_reason: 'stop'` with a successful completion, but fail to realize that `'stop'` only indicates natural termination—not that the response is necessarily correct or complete in terms of user intent.

How to eliminate wrong answers

Option B is wrong because a truncated response due to token limit is indicated by `finish_reason: 'length'`, not `'stop'`. Option C is wrong because a response blocked by the content filter is indicated by `finish_reason: 'content_filter'`, not `'stop'`. Option D is wrong because if the model were still generating, the API call would not have returned a final response; streaming would show incremental tokens, but a completed non-streaming call always has a definitive `finish_reason`.

Practice this question →
42
MCQhard

You executed the Azure CLI command to list Azure OpenAI resources. You need to programmatically access the endpoint of the resource named 'gpt4' in a script. What is the most reliable way to extract the endpoint?

A.Use Azure PowerShell Get-AzCognitiveServicesAccount cmdlet
B.Parse the table output using string manipulation
C.Use az cognitiveservices account show with --query to filter by name
D.Deploy a new Azure OpenAI resource with a known endpoint
AnswerC

Using --query with JMESPath provides a reliable way to extract specific values.

Why this answer

Option C is correct because `az cognitiveservices account show` with the `--query` parameter allows you to retrieve the specific endpoint property for a named resource using JMESPath filtering. This approach is reliable, scriptable, and avoids parsing unstructured output, which is error-prone. The Azure CLI returns structured JSON, and `--query` extracts the exact value without manual string manipulation.

Exam trap

The trap here is that candidates may default to parsing the default table output (Option B) because it looks human-readable, but the exam tests understanding that structured JSON queries are the reliable, production-grade method for programmatic access.

How to eliminate wrong answers

Option A is wrong because `Get-AzCognitiveServicesAccount` retrieves all cognitive services accounts, but does not directly filter by resource name in a single cmdlet; you would need additional piping or filtering, and it returns the entire object, not just the endpoint. Option B is wrong because parsing table output with string manipulation is fragile, depends on column alignment, and breaks if the CLI output format changes or if the resource name contains special characters. Option D is wrong because deploying a new resource is unnecessary, wasteful, and does not solve the requirement to access an existing resource's endpoint.

Practice this question →
43
MCQeasy

You are using Azure AI Content Safety to moderate user-generated content in a social media app. The solution must detect and block hate speech and self-harm content in real time. Which Content Safety feature should you use?

A.Custom category management
B.Severity analysis
C.Image moderation
D.Text moderation
AnswerD

Text moderation API detects hate, self-harm, violence, etc.

Why this answer

Text moderation is the correct choice because Azure AI Content Safety's text moderation API is specifically designed to detect and block hate speech and self-harm content in real time. It analyzes text for severity levels across multiple categories, including hate and self-harm, and returns a severity score to trigger blocking actions. This directly meets the requirement for real-time detection of these specific content types in user-generated text.

Exam trap

The trap here is that candidates may confuse severity analysis as a standalone feature, but it is actually a sub-component of text moderation; the question asks for the feature that performs the detection, not the analysis of the detection results.

How to eliminate wrong answers

Option A is wrong because custom category management allows you to define your own content categories (e.g., brand-specific terms), but it does not replace the built-in hate speech and self-harm detection; the question requires using existing Azure AI Content Safety features, not custom definitions. Option B is wrong because severity analysis is a component of the moderation process (it assigns a severity score to detected content), not a standalone feature; you must use text moderation to first detect the content before severity analysis can be applied. Option C is wrong because image moderation is used to analyze visual content (images) for inappropriate content, but the question specifically mentions user-generated content that includes hate speech and self-harm, which are primarily text-based; image moderation does not analyze text within images by default.

Practice this question →
44
MCQeasy

You need to monitor the performance of an Azure AI Language service custom entity recognition model. Which metric should you track to evaluate the model's ability to correctly identify entities?

A.Throughput
B.Response latency
C.F1 score
D.Accuracy
AnswerC

Harmonic mean of precision and recall for entity recognition.

Why this answer

The F1 score is the standard metric for evaluating custom entity recognition models in Azure AI Language, as it balances precision (correctly identified entities) and recall (missed entities). Unlike accuracy, which can be misleading due to class imbalance in entity labeling, F1 provides a harmonic mean that reflects the model's ability to correctly identify entities without bias toward the majority class.

Exam trap

The trap here is that candidates confuse accuracy (a common metric in classification) with the specialized F1 score required for entity recognition, where class imbalance makes accuracy a poor indicator of model performance.

How to eliminate wrong answers

Option A is wrong because throughput measures the number of requests processed per second, not the quality of entity identification. Option B is wrong because response latency measures the time taken to return a prediction, not the correctness of entity predictions. Option D is wrong because accuracy (ratio of correct predictions to total predictions) is misleading for entity recognition tasks where the number of non-entity tokens vastly outnumbers entity tokens, leading to inflated accuracy even if the model fails to identify entities.

Practice this question →
45
MCQhard

Your Azure AI solution uses multiple AI services including Computer Vision and Language. To reduce costs, you want to share a single key and endpoint across services. Which Azure resource type should you deploy?

A.Separate single-service resources for each AI service
B.Azure Key Vault for storing keys
C.Azure API Management gateway
D.Azure AI services multi-service resource
AnswerD

A multi-service resource provides a single key and endpoint for multiple AI services.

Why this answer

D is correct because Azure AI services multi-service resource provides a single endpoint and key that can be used across multiple AI services (e.g., Computer Vision, Language, Face, etc.), reducing management overhead and cost by consolidating billing. This resource type is designed specifically for scenarios where you want to share credentials across services without deploying separate single-service instances.

Exam trap

The trap here is that candidates may confuse Azure API Management (Option C) as a way to share endpoints, but it is a gateway for API management, not a shared AI resource; the correct answer is the multi-service resource that natively provides a single key and endpoint for multiple AI services.

How to eliminate wrong answers

Option A is wrong because deploying separate single-service resources for each AI service would require managing multiple keys and endpoints, increasing complexity and cost, which contradicts the goal of reducing costs through sharing. Option B is wrong because Azure Key Vault is a service for securely storing and managing secrets (like keys), not for providing a shared endpoint or key for AI services; it does not replace the need for an AI resource. Option C is wrong because Azure API Management gateway is used to create, publish, and manage APIs, not to provide a shared key and endpoint for Azure AI services; it adds an extra layer of abstraction and cost, not a direct shared resource.

Practice this question →
46
MCQhard

Your company deploys an Azure AI Vision solution to detect defects on a manufacturing assembly line. The solution uses a custom object detection model trained on images of products. The model is deployed as a real-time endpoint on an Azure Kubernetes Service (AKS) cluster. Recently, the defect detection accuracy dropped significantly. You suspect data drift because the lighting conditions on the assembly line changed after maintenance. You need to monitor and retrain the model to maintain accuracy. The solution must use Azure AI Foundry's model monitoring capabilities. You also need to automate retraining when drift is detected. What should you do?

A.Collect more training data from the new lighting conditions and retrain once
B.Manually review the model performance weekly and retrain if needed
C.Enable model monitoring in Azure AI Foundry, set up drift detection alerts, and create an automated retraining pipeline
D.Increase the number of replicas in the AKS cluster
AnswerC

Continuous monitoring and automated retraining.

Why this answer

Option C is correct because Azure AI Foundry's model monitoring provides built-in drift detection capabilities that can automatically monitor input data distributions and trigger alerts when drift is detected. By combining this with an automated retraining pipeline (e.g., using Azure Machine Learning pipelines or Azure DevOps), you can retrain the custom object detection model on new data reflecting the changed lighting conditions without manual intervention, ensuring sustained accuracy.

Exam trap

The trap here is that candidates may confuse operational scaling (increasing replicas) with model performance improvement, or assume manual retraining is sufficient when the question explicitly requires automated monitoring and retraining using Azure AI Foundry's capabilities.

How to eliminate wrong answers

Option A is wrong because simply collecting more training data and retraining once does not establish ongoing monitoring or automated retraining; it is a one-time fix that does not address future drift. Option B is wrong because manual weekly review is not automated and does not leverage Azure AI Foundry's model monitoring capabilities; it also introduces latency and human error. Option D is wrong because increasing the number of replicas in the AKS cluster only improves scalability and throughput, not model accuracy or drift detection.

Practice this question →
47
MCQeasy

You are planning to deploy an Azure AI Content Safety solution. What is the primary requirement for using the service?

A.Data must be stored in the same region as the service
B.All users must have Microsoft Entra ID P2 licenses
C.An active Azure subscription
D.The application must be written in C#
AnswerC

Required to provision the service.

Why this answer

An active Azure subscription is the primary requirement because Azure AI Content Safety is a cloud-based service that requires a valid subscription for resource provisioning, API access, and billing. Without an Azure subscription, you cannot create the Content Safety resource or authenticate API calls, regardless of other configurations.

Exam trap

The trap here is that candidates often confuse 'primary requirement' with optional or advanced features like data residency (A), licensing (B), or specific programming languages (D), but the fundamental prerequisite is always an active Azure subscription for any Azure AI service.

How to eliminate wrong answers

Option A is wrong because data does not need to be stored in the same region as the service; Azure AI Content Safety processes content in the region where the resource is deployed, but data residency requirements are separate and not a primary prerequisite. Option B is wrong because Microsoft Entra ID P2 licenses are not required; Azure AI Content Safety uses standard Azure AD authentication (free tier) or API keys, and P2 licenses are only relevant for advanced identity protection features unrelated to this service. Option D is wrong because the application does not need to be written in C#; the service is language-agnostic and can be accessed via REST APIs, SDKs in Python, Java, JavaScript, .NET, and other languages.

Practice this question →
48
Multi-Selectmedium

Which THREE factors should be considered when choosing a region for deploying Azure AI services?

Select 3 answers
A.Number of Azure data centers in the region.
B.Service availability and feature support.
C.Compliance and data residency requirements.
D.Latency to end users.
E.Cost of the services in each region.
AnswersB, C, D

Not all services are available in all regions.

Why this answer

Service availability and feature support (Option B) is a critical factor because not all Azure AI services are available in every region; for example, certain Cognitive Services like Azure OpenAI or Computer Vision OCR may be in preview or fully supported only in specific regions. Choosing a region without the required service or feature would prevent deployment or limit functionality, directly impacting solution design.

Exam trap

Microsoft often tests the misconception that the number of data centers or cost are primary region selection factors, but the exam emphasizes that service availability, compliance, and latency are the three key considerations for Azure AI services.

Practice this question →
49
MCQeasy

Refer to the exhibit. You have an Azure AI Search skillset with the custom skill shown. When you run the indexer, you notice that many documents fail with a timeout error. What is the most likely cause of the timeouts?

A.The HTTP method should be GET instead of POST.
B.The timeout value is too short for the function to complete.
C.The degreeOfParallelism is set too high, overwhelming the Azure Function.
D.The batch size is too large, causing each request to process too many documents.
AnswerC

High parallelism can cause the function to throttle, leading to timeouts.

Why this answer

The custom skill in Azure AI Search is configured with a `degreeOfParallelism` of 10, meaning up to 10 concurrent requests are sent to the Azure Function. If the function cannot handle this level of concurrency (e.g., due to limited resources or cold starts), requests will queue up and eventually time out. Reducing the `degreeOfParallelism` would throttle the load and prevent the function from being overwhelmed.

Exam trap

Microsoft often tests the misconception that timeouts are always caused by a short timeout value or large batch size, but here the trap is that the `degreeOfParallelism` setting is the hidden culprit that overwhelms the function, not the batch size or timeout duration.

How to eliminate wrong answers

Option A is wrong because the HTTP method for a custom skill in Azure AI Search must be POST to send the request body containing the documents; GET does not support a body and would fail immediately. Option B is wrong because the timeout value (230 seconds) is actually the default maximum allowed for custom skills, and the question states the function itself is timing out, not that the timeout value is too short. Option D is wrong because the batch size is set to 1, meaning each request processes only one document, so batch size is not causing the timeout.

Practice this question →
50
MCQmedium

Your Azure AI Document Intelligence model is failing to extract tables from scanned PDFs. The PDFs are low-quality images. What should you do first?

A.Verify that the Read OCR step is extracting text correctly.
B.Use Azure AI Computer Vision to enhance the image.
C.Retrain the model with more table examples.
D.Use a higher resolution scanner for input PDFs.
AnswerA

Read OCR is the foundation for table extraction.

Why this answer

Option A is correct because the Read OCR step is the foundational layer for table extraction in Azure AI Document Intelligence. If the OCR cannot accurately recognize text from low-quality images, subsequent table extraction models will fail regardless of training or image enhancement. Verifying OCR output first isolates whether the issue is at the text recognition stage or the table parsing stage, following a systematic troubleshooting approach.

Exam trap

The trap here is that candidates often jump to retraining or image enhancement without realizing that Document Intelligence's table extraction is entirely dependent on the quality of the OCR output, and the first diagnostic step must be to check that foundational layer.

How to eliminate wrong answers

Option B is wrong because Azure AI Computer Vision image enhancement does not improve OCR accuracy for Document Intelligence; the service already applies its own preprocessing, and external enhancement may introduce artifacts. Option C is wrong because retraining the model with more table examples will not fix the root cause if the OCR step cannot correctly extract text from low-quality images; the model relies on accurate OCR input. Option D is wrong because using a higher resolution scanner is a hardware solution that may not be feasible for existing PDFs and does not address the immediate diagnostic need; the first step should be software-based verification of OCR output.

Practice this question →
51
MCQhard

You are responsible for ensuring that an Azure AI solution complies with data residency requirements. The solution processes personal data from users in the European Union. You must ensure that data does not leave the EU region. Which two actions should you take?

A.Use the global Azure AI services endpoint for simplicity.
B.Configure the Azure AI services to disable cross-region replication.
C.Enable data encryption at rest and in transit.
D.Deploy all Azure AI resources in EU data center regions only.
E.Store data in Azure Blob Storage with hot tier.
AnswerB, D

Prevents data from being replicated to other regions.

Why this answer

Option B is correct because disabling cross-region replication ensures that data processed by Azure AI services remains within the specified region and is not automatically replicated to another geographic location for redundancy or disaster recovery. This is a critical control for meeting data residency requirements, as it prevents data from leaving the EU region even during failover scenarios.

Exam trap

The trap here is that candidates often confuse data encryption with data residency, thinking that encrypting data is sufficient to meet geographic restrictions, when in fact encryption does not control where data is physically stored or processed.

How to eliminate wrong answers

Option A is wrong because using the global Azure AI services endpoint routes traffic through Microsoft's global network and may process data in any Azure region worldwide, which violates the requirement to keep data within the EU. Option C is wrong because enabling data encryption at rest and in transit protects data confidentiality but does not control the geographic location where data is stored or processed; it does not address data residency. Option E is wrong because storing data in Azure Blob Storage with hot tier is a storage performance and cost choice, not a data residency control; the storage account itself must be deployed in an EU region and configured with appropriate replication settings to meet residency requirements.

Practice this question →
52
Multi-Selectmedium

Which TWO actions should you take to ensure your Azure AI Language custom question answering project can be used in a production environment with high availability?

Select 2 answers
A.Enable multiple read replicas for the knowledge base.
B.Disable redundant infrastructure to optimize performance.
C.Use the Free (F0) pricing tier to reduce costs.
D.Deploy the resource in a region that supports availability zones.
E.Train the model using only a single language.
AnswersA, D

Read replicas increase availability and throughput.

Why this answer

Option A is correct because enabling multiple read replicas for the knowledge base in Azure AI Language custom question answering distributes read traffic across replicas, ensuring high availability and fault tolerance. This is a key production requirement to handle concurrent user queries without a single point of failure.

Exam trap

The trap here is that candidates may confuse high availability with performance optimization or cost reduction, mistakenly thinking that disabling redundancy or using a free tier is acceptable for production workloads.

Practice this question →
53
MCQmedium

Your organization is using Azure AI Search with semantic ranking. Users report that search results are not showing relevant documents at the top. You need to improve relevance. What should you configure?

A.Add synonyms to the index
B.Define a custom scoring profile
C.Enable semantic search configuration on the index
D.Change the index analyzer to a different language analyzer
AnswerC

Semantic search configuration enables L2 ranking models for better relevance.

Why this answer

Semantic search configuration is required to enable semantic ranking, which uses deep learning models to re-rank search results based on contextual relevance rather than just keyword matching. Without this configuration, the index cannot leverage semantic ranking even if the service tier supports it, so enabling it directly addresses the user's complaint about irrelevant documents appearing at the top.

Exam trap

Microsoft often tests the misconception that enabling semantic ranking is automatic with the service tier, but candidates must explicitly configure a semantic configuration on the index and specify it in the query request to activate the feature.

How to eliminate wrong answers

Option A is wrong because adding synonyms expands query matching but does not re-rank results based on semantic understanding; it only broadens recall, not precision. Option B is wrong because custom scoring profiles operate on lexical term frequency and field weights, not on the deep neural network models that semantic ranking uses to understand query intent. Option D is wrong because changing the index analyzer affects tokenization and language-specific stemming, not the semantic re-ranking stage that determines which documents are most contextually relevant.

Practice this question →
54
MCQmedium

A company is using Azure AI Vision to analyze images from a manufacturing line. The solution must detect defects in real-time. The team discovers that the model's accuracy drops significantly when images are captured under different lighting conditions. What is the best approach to improve the model's robustness?

A.Apply image pre-processing to normalize lighting before sending to the model.
B.Increase the number of training images without varying lighting conditions.
C.Retrain the model using images captured under various lighting conditions, using data augmentation.
D.Use a pre-built model from Azure AI Vision instead of a custom model.
AnswerC

Including diverse lighting in training data and using augmentation improves robustness.

Why this answer

Option C is correct because retraining with augmented data (different lighting) directly addresses the issue. Option A is wrong because it only adds variation but does not ensure the model generalizes to new conditions. Option B is wrong because a different model (e.g., Custom Vision) may still need training data.

Option D is wrong because pre-processing alone cannot compensate for lack of training data.

Practice this question →
55
MCQeasy

A company uses Azure AI Document Intelligence to extract data from invoices. Recently, extraction accuracy dropped for new vendor formats. Which strategy should you implement to improve accuracy without retraining the entire model?

A.Train a custom extraction model using labeled examples from the new vendor formats.
B.Increase the confidence threshold for extraction results.
C.Switch from Document Intelligence to Azure AI Language service.
D.Increase the number of transactions per second (TPS) limit.
AnswerA

Custom models adapt to specific layouts and improve accuracy.

Why this answer

Option A is correct because custom extraction models can be trained on new invoice layouts. Option B is incorrect because adjusting confidence thresholds does not improve recognition of new formats. Option C is incorrect because increasing TPS does not affect accuracy.

Option D is incorrect because moving to a different AI service is unnecessary.

Practice this question →
56
MCQmedium

Your team is building a custom question-answering solution using Azure AI Language. The solution must be able to answer questions based on a set of PDF documents. You need to import the documents and create a knowledge base. What should you do first?

A.Use Azure AI Foundry to create a project and upload the documents
B.Create an index in Azure AI Search and upload the documents
C.Use the Azure AI Language service with the custom question answering feature and import the documents
D.Deploy an Azure AI Bot Service and connect it to the documents
AnswerC

Custom question answering can ingest PDFs directly.

Why this answer

Option C is correct because the custom question answering feature of Azure AI Language is specifically designed to ingest documents (including PDFs) and build a knowledge base that can be used for question-answering. This feature provides a built-in pipeline to extract question-answer pairs from documents, create a knowledge base, and deploy it as a service without needing additional search indexing or bot orchestration.

Exam trap

The trap here is that candidates often confuse Azure AI Search (a general-purpose search service) with the custom question answering feature, which is purpose-built for extracting and managing QnA pairs from documents, leading them to choose Option B incorrectly.

How to eliminate wrong answers

Option A is wrong because Azure AI Foundry is a development environment for building and managing AI models, but it does not directly import documents into a question-answering knowledge base; the custom question answering feature is the correct service for this task. Option B is wrong because creating an index in Azure AI Search is used for full-text or vector search, not for the structured question-answer pair extraction and management that custom question answering provides. Option D is wrong because Azure AI Bot Service is a framework for building conversational bots, not a tool for importing documents and creating a knowledge base; the knowledge base must be created first using the custom question answering feature before a bot can consume it.

Practice this question →
57
MCQmedium

Your team develops a document translation solution using Azure AI Translator. The solution must translate documents while preserving formatting and layout. Which feature should you use?

A.Azure AI Translator Custom Translator
B.Azure AI Translator Document Translation
C.Azure AI Document Intelligence
D.Azure AI Translator Text Translation
AnswerB

Document Translation translates entire documents while preserving structure and layout.

Why this answer

Azure AI Translator Document Translation is specifically designed to translate entire documents while preserving the original formatting, structure, and layout. Unlike Text Translation, which handles only plain text strings, Document Translation processes files (e.g., PDF, Word, Excel) and returns a translated version with the same formatting, making it the correct choice for this requirement.

Exam trap

The trap here is that candidates often confuse Document Translation with Text Translation, assuming that any translation feature can handle documents, but Text Translation only processes plain text strings and cannot preserve formatting or layout.

How to eliminate wrong answers

Option A is wrong because Custom Translator is a feature for building custom translation models tailored to specific domain terminology, not for preserving document formatting or layout. Option C is wrong because Azure AI Document Intelligence (formerly Form Recognizer) is used for extracting text, key-value pairs, and tables from documents, not for translating them. Option D is wrong because Text Translation only handles plain text strings and cannot preserve the formatting or layout of an entire document.

Practice this question →
58
MCQmedium

Refer to the exhibit. You are configuring content filtering for an Azure OpenAI deployment using a JSON policy. You want to block all content with a 'Hate' severity of 'medium' or higher. What should you modify in the policy?

A.Change the "severityThreshold" for "SelfHarm" to "low".
B.Change the "contentTypes" to include only "Normal".
C.Modify the "severityThreshold" for "Hate" to "medium".
D.Add a "policyAction" with "block" to the "BlockHateSpeech" policy.
AnswerC

Setting the threshold to 'medium' blocks all hate content at medium severity and above.

Why this answer

Option C is correct because in Azure OpenAI content filtering, the 'severityThreshold' for a given category (like 'Hate') defines the minimum severity level at which content is filtered. Setting it to 'medium' means all content with a severity of 'medium' or higher (including 'high') will be blocked, which matches the requirement to block 'Hate' severity 'medium' or higher.

Exam trap

The trap here is that candidates often confuse 'severityThreshold' with a 'block' action flag, thinking they need to add an explicit block action, or they mistakenly adjust a different category's threshold instead of the correct one.

How to eliminate wrong answers

Option A is wrong because changing the 'severityThreshold' for 'SelfHarm' to 'low' would affect the SelfHarm category, not the Hate category, and would block more SelfHarm content than needed, failing to address the requirement. Option B is wrong because 'contentTypes' typically refer to modalities like text, image, or code, not severity levels; restricting to only 'Normal' would block all non-normal content types, not specifically Hate content at medium severity. Option D is wrong because 'policyAction' with 'block' is not a valid property in the Azure OpenAI content filtering JSON policy; the blocking behavior is controlled by the 'severityThreshold' and the category definitions, not by an explicit 'block' action.

Practice this question →
59
MCQmedium

Refer to the exhibit. You deployed this Azure AI Service resource. Developers report that they cannot call the service from their local machines using the API endpoint. The developers are not connected to the corporate VPN. What should you do?

A.Disable network ACLs entirely.
B.Add the developers' public IP addresses to the ipRules list.
C.Change defaultAction to Allow and remove all rules.
D.Add a second virtual network rule for the developers' subnet.
AnswerB

Allows access from specific public IPs while keeping VNet rule.

Why this answer

The exhibit shows that the Azure AI Service resource's network configuration has 'Selected Networks and Private Endpoints' enabled with a defaultAction of 'Deny'. This means only traffic from explicitly allowed IP addresses or virtual networks can reach the endpoint. Since the developers are not on the corporate VPN, they cannot use a virtual network rule.

The correct solution is to add their public IP addresses to the ipRules list, which explicitly permits traffic from those specific IPs while keeping the default deny for all other traffic.

Exam trap

The trap here is that candidates often confuse 'virtual network rules' with 'IP rules', assuming that adding a virtual network rule for the developers' subnet will work even when the developers are not connected to that subnet, but virtual network rules require the client to be within the specified VNet's IP space, which is not the case for local machines without VPN.

How to eliminate wrong answers

Option A is wrong because disabling network ACLs entirely would remove all IP-based restrictions but would also require changing the defaultAction to 'Allow', which is an overly permissive approach that violates security best practices and is not necessary when only specific IPs need access. Option C is wrong because changing defaultAction to 'Allow' and removing all rules would open the service to the entire internet, which is a severe security risk and not required when you can simply add the developers' IPs. Option D is wrong because a virtual network rule requires the developers' machines to be connected to the specified virtual network (typically via VPN or ExpressRoute), and since they are not connected to the corporate VPN, a virtual network rule cannot be applied to their local machines.

Practice this question →
60
Multi-Selecthard

A company is designing a solution that uses Azure Cognitive Services for text analytics. The solution must meet the following requirements: - Detect sentiment in customer feedback. - Extract key phrases from the feedback. - Identify the language of the feedback automatically. - Ensure that the solution can scale to handle thousands of requests per second. Which TWO actions should the company take?

Select 2 answers
A.Deploy a separate Language Detection service for language identification.
B.Use the Text Analytics API for sentiment analysis and key phrase extraction.
C.Use the Free pricing tier to reduce costs.
D.Deploy the Cognitive Services resource in multiple regions and use a load balancer.
E.Use Azure Functions to aggregate results from multiple API calls.
AnswersB, D

Text Analytics API provides these features.

Why this answer

Option B is correct because the Text Analytics API (part of Azure Cognitive Services for Language) provides built-in capabilities for sentiment analysis, key phrase extraction, and language detection within a single API call. This eliminates the need for separate services and directly satisfies the requirements for detecting sentiment, extracting key phrases, and identifying language automatically.

Exam trap

The trap here is that candidates may think language detection requires a separate dedicated service (Option A) or that the Free tier can scale (Option C), when in fact the Text Analytics API consolidates all required features and the Free tier is severely throttled for high-throughput workloads.

Practice this question →
61
MCQhard

You are responsible for an Azure AI multi-agent system built on Microsoft Foundry. The system experiences frequent timeout errors when agents call external APIs. You need to implement a resilient pattern. What should you do?

A.Implement retry logic with exponential backoff in the agent tool definitions
B.Disable retry attempts to avoid duplicate requests
C.Increase the global timeout for all agents
D.Switch to synchronous agent calls
AnswerA

Retry with exponential backoff handles transient failures effectively.

Why this answer

Option A is correct because implementing retry logic with exponential backoff in agent tool definitions is a standard resilience pattern for transient failures when calling external APIs. This approach, often using the Retry-After header or a custom backoff strategy, reduces load on the API and prevents cascading timeouts in a multi-agent system built on Microsoft Foundry. It aligns with the recommended practices for building robust AI solutions that depend on external services.

Exam trap

The trap here is that candidates often confuse increasing timeouts with solving transient failures, but timeouts only mask the problem and do not provide resilience against intermittent API errors.

How to eliminate wrong answers

Option B is wrong because disabling retry attempts entirely would cause the system to fail on any transient error, making it less resilient and increasing the likelihood of incomplete agent tasks. Option C is wrong because increasing the global timeout for all agents does not address the root cause of transient API failures; it only delays the timeout, potentially masking underlying issues and wasting resources. Option D is wrong because switching to synchronous agent calls would block agent execution, reducing concurrency and potentially worsening timeout issues by making the system less responsive to failures.

Practice this question →
62
Multi-Selecthard

Which TWO factors should you consider when choosing between Azure AI Document Intelligence and Azure AI Language for extracting information from documents?

Select 2 answers
A.Use of REST APIs
B.Need to process handwritten text
C.Need to extract tables from scanned PDFs
D.Ability to extract key-value pairs
E.Real-time processing requirements
AnswersB, C

Document Intelligence supports handwriting recognition.

Why this answer

Option B is correct because Azure AI Document Intelligence (formerly Form Recognizer) is specifically designed to handle handwritten text through its 'Read' OCR model, which can extract printed and handwritten text from documents. Azure AI Language, on the other hand, focuses on natural language processing (NLP) tasks like sentiment analysis and entity recognition, and does not natively process handwritten content. Therefore, if your document contains handwritten notes, Document Intelligence is the appropriate service.

Exam trap

The trap here is that candidates often assume Azure AI Language can handle all text extraction tasks because of its name, overlooking that Document Intelligence is the specialized service for OCR, layout analysis, and structured data extraction from documents.

Practice this question →
63
MCQmedium

You are designing an Azure AI solution that uses Azure AI Document Intelligence to extract data from invoices. The solution must handle up to 1000 invoices per hour with a maximum latency of 5 seconds per invoice. You need to choose the appropriate pricing tier and resource configuration. What should you do?

A.Create a Cognitive Services multi-service account to increase throughput
B.Use the S0 tier and configure autoscaling if needed
C.Use the Free tier and implement a retry policy
D.Deploy the Document Intelligence resource in multiple regions
AnswerB

S0 tier supports higher throughput and meets latency requirements.

Why this answer

The S0 tier (Standard) for Azure AI Document Intelligence supports up to 15 transactions per second (TPS), which equates to 54,000 invoices per hour—far exceeding the 1,000 per hour requirement. With a maximum latency of 5 seconds per invoice, the S0 tier's default throughput is sufficient without needing autoscaling, though autoscaling can be configured for burst scenarios. The Free tier (F0) is limited to 20 transactions per minute (1,200 per hour) and is not designed for production workloads, making S0 the correct choice.

Exam trap

The trap here is that candidates often assume higher throughput requires multi-region deployment or multi-service accounts, but the S0 tier's default TPS limit already exceeds the requirement, making autoscaling optional rather than necessary.

How to eliminate wrong answers

Option A is wrong because creating a Cognitive Services multi-service account does not increase throughput for Document Intelligence; it simply combines multiple AI services under a single endpoint and key, and each service still has its own tier limits. Option C is wrong because the Free tier (F0) is capped at 20 transactions per minute (1,200 per hour) and has a maximum of 5 TPS, which cannot reliably handle 1,000 invoices per hour with 5-second latency, and retry policies do not overcome throughput limits. Option D is wrong because deploying Document Intelligence resources in multiple regions does not increase throughput for a single workload; it is used for geo-redundancy or data residency, not for scaling capacity within a single region.

Practice this question →
64
MCQhard

Refer to the exhibit. You are reviewing an Azure OpenAI Service API request. The deployment-id is 'gpt-4o'. The user asks 'What is the capital of France?' The response is cut off mid-sentence. Based on the parameters, what is the most likely cause?

A.The max_tokens value is too low
B.The temperature setting is too high
C.The stop parameter is causing early termination
D.The system message is missing a context
AnswerC

The stop sequence '\n' stops generation prematurely.

Why this answer

Option C is correct because the `stop` parameter in an Azure OpenAI API request defines a sequence of tokens that, when generated, causes the model to stop producing further output. If the `stop` sequence appears in the generated text, the response will be truncated at that point, even mid-sentence. In this scenario, the cut-off response is most likely due to the `stop` parameter matching a token in the generated output, not because of token limits or temperature settings.

Exam trap

Microsoft often tests the distinction between `max_tokens` (which limits total output length) and the `stop` parameter (which causes early termination based on content), leading candidates to mistakenly attribute mid-sentence cut-offs to token limits rather than stop sequences.

How to eliminate wrong answers

Option A is wrong because a low `max_tokens` value would cause the response to stop at the token limit, but the response would not necessarily be cut off mid-sentence; it would simply end after the specified number of tokens, which could be at a natural break. Option B is wrong because a high `temperature` setting increases randomness and creativity but does not cause early termination; it affects the probability distribution of token selection, not the stopping condition. Option D is wrong because the system message provides context or instructions for the model's behavior, but its absence would not cause a mid-sentence cut-off; it might lead to less relevant or less structured responses, but the response would still complete naturally unless another parameter stops it.

Practice this question →
65
MCQhard

Your company uses Azure AI Search to power a customer-facing product catalog search. The search index contains product data from Azure SQL Database. The indexer runs daily. Lately, users complain that new products appear in the catalog with a delay of up to 24 hours. The business requires near real-time indexing (within minutes) for new products. You have the following constraints: - The indexer must continue to run daily for full sync. - You need to minimize changes to the existing architecture. - You cannot use Azure Functions or Logic Apps due to cost. What should you do?

A.Add a high-water mark change detection policy (e.g., based on a LastModified column) to the indexer data source. Set the indexer to run every 5 minutes.
B.Enable change tracking on the Azure SQL Database and configure the indexer to use it.
C.Modify the application to use the push API to upload new products to the index as they are added.
D.Remove the daily indexer schedule and instead trigger the indexer manually after each new product insertion.
AnswerA

This enables incremental indexing with minimal changes, achieving near real-time updates.

Why this answer

Option D is correct. By creating a data change detection policy (e.g., using a LastModified timestamp), the indexer can track incremental changes. Setting the indexer schedule to run every 5 minutes allows near real-time updates.

The daily full sync can still be run separately. Option A is wrong because the push API requires code changes and additional infrastructure (e.g., a service to push changes). Option B is wrong because Azure SQL Database change tracking is more complex and not necessary.

Option C is wrong because removing the schedule would require manual runs, not solving the delay.

Practice this question →
66
MCQmedium

Refer to the exhibit. You deploy an Azure AI Services multi-service account using this ARM template. After deployment, developers cannot access the service from their local machines. What is the most likely reason?

A.The location is not specified correctly
B.The pricing tier S0 does not support network restrictions
C.The custom subdomain name is not globally unique
D.The network ACLs block all traffic by default
AnswerD

'defaultAction': 'Deny' blocks all traffic unless explicitly allowed via IP rules or virtual networks.

Why this answer

The ARM template for an Azure AI Services multi-service account includes a `networkAcls` property with `defaultAction` set to `Deny`. This configuration blocks all traffic by default, including requests from developers' local machines, unless an explicit IP rule or virtual network rule is added to allow access. Since no such rules are shown in the exhibit, the network ACLs are the most likely cause of the connectivity failure.

Exam trap

Microsoft often tests the misconception that network ACLs only affect virtual network traffic or that they are optional by default, when in fact setting `defaultAction: Deny` explicitly blocks all traffic unless allow rules are configured.

How to eliminate wrong answers

Option A is wrong because the location is specified as `eastus` in the ARM template, which is a valid Azure region and does not affect network access control. Option B is wrong because the S0 pricing tier does support network restrictions; network ACLs are available for all tiers of Azure AI Services multi-service accounts, including S0. Option C is wrong because the custom subdomain name `myaiservices` is used only for endpoint resolution and does not impact network-level access; global uniqueness is required for subdomain names but a conflict would cause a deployment failure, not a post-deployment access issue.

Practice this question →
67
MCQmedium

A company is deploying a solution using Azure AI Vision to analyze images of products on a retail website. They need to ensure that the image analysis is performed within a specific geographic boundary for data residency compliance. What should they configure?

A.Deploy the Azure AI Vision resource in the desired Azure region
B.Create a private endpoint for the Vision resource
C.Enable multi-region replication on the Vision resource
D.Use the Free tier of Azure AI Vision
AnswerA

Data stays in the region where the resource is deployed.

Why this answer

Azure AI Vision resources are regional Azure resources, meaning all data processing and storage occur within the Azure region where the resource is deployed. By deploying the resource in the desired geographic region, you ensure that image analysis and any derived data remain within that boundary, satisfying data residency compliance requirements. This is the fundamental mechanism for controlling data location in Azure AI services.

Exam trap

The trap here is that candidates confuse network isolation (private endpoints) with data residency, or assume that replication or tier changes can alter where data is stored, when in fact the region of the resource itself is the sole determinant for compliance.

How to eliminate wrong answers

Option B is wrong because a private endpoint restricts network access to the resource via a private IP address in your virtual network, but it does not control the geographic location where data is processed or stored. Option C is wrong because Azure AI Vision does not support multi-region replication; that feature is available for Azure Storage and Cosmos DB, not for AI services. Option D is wrong because the Free tier imposes usage limits (e.g., 20 transactions per minute) and does not provide any data residency guarantees; it still processes data in the region where the resource is created.

Practice this question →
68
Drag & Dropmedium

Drag and drop the steps to create a custom Azure AI Translator model into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order

Why this order

Start with parallel data, create the resource, upload to custom model, train, then deploy.

Practice this question →
69
MCQhard

Your Azure AI Search index is experiencing high query latency. You have enabled semantic search and custom scoring profiles. You need to reduce latency without degrading search quality. Which action should you take?

A.Remove custom scoring profiles.
B.Increase the number of replicas.
C.Reduce the number of partitions.
D.Disable semantic search.
AnswerB

More replicas distribute query load and reduce latency.

Why this answer

Increasing the number of replicas distributes query load across multiple copies of the index, allowing parallel processing of search requests. This directly reduces query latency without altering the search logic, scoring profiles, or semantic enrichment, thus preserving search quality.

Exam trap

The trap here is that candidates confuse partitions (which affect storage and indexing speed) with replicas (which affect query throughput), leading them to incorrectly reduce partitions or disable features instead of scaling query capacity.

How to eliminate wrong answers

Option A is wrong because removing custom scoring profiles would degrade search quality by eliminating relevance tuning, and it does not address the root cause of high latency (insufficient query capacity). Option C is wrong because reducing partitions decreases the index's data capacity and can increase latency by forcing more data per partition, while partitions primarily affect indexing speed and storage, not query throughput. Option D is wrong because disabling semantic search would degrade search quality by removing AI-powered ranking and relevance features, and it does not address the underlying query load issue that replicas solve.

Practice this question →
70
MCQmedium

You manage an Azure AI Search solution that indexes documents from Azure Blob Storage. The index must support real-time updates when documents are added or modified. Which approach should you use?

A.Use the push API to manually upload documents.
B.Configure an indexer with a short schedule and change tracking.
C.Manually reset and rerun the indexer after each change.
D.Add a cognitive skillset to process new documents.
AnswerB

Indexers can detect changes in Blob Storage and update the index automatically.

Why this answer

Option B is correct because Azure AI Search indexers can be configured with a short schedule (e.g., every 5 minutes) and change tracking (using high-water mark or integrated change detection on Azure Blob Storage) to automatically index new or modified documents without manual intervention. This provides near-real-time updates while leveraging the indexer's built-in change detection capabilities.

Exam trap

The trap here is that candidates often confuse the push API (Option A) as the only way to achieve real-time updates, overlooking that indexers with change tracking and a short schedule can provide automated near-real-time indexing without custom code.

How to eliminate wrong answers

Option A is wrong because the push API requires manual coding to upload documents, which does not automatically detect changes in Azure Blob Storage and is not a 'configured' approach for real-time updates from a data source. Option C is wrong because manually resetting and rerunning the indexer after each change is not automated and does not support real-time updates; it is a manual, batch-oriented process. Option D is wrong because a cognitive skillset enriches documents with AI transformations (e.g., OCR, entity recognition) but does not handle the scheduling or change tracking needed for real-time indexing of new or modified documents.

Practice this question →
71
MCQeasy

Your organization needs to monitor Azure AI services for unusual activity patterns that might indicate a security threat. Which Microsoft security solution should you use?

A.Microsoft Intune
B.Microsoft Defender XDR
C.Microsoft Purview
D.Microsoft Sentinel
AnswerD

Sentinel provides SIEM and SOAR capabilities for security monitoring.

Why this answer

Microsoft Sentinel is a cloud-native Security Information and Event Management (SIEM) and Security Orchestration Automated Response (SOAR) solution. It is specifically designed to ingest logs from Azure AI services, apply analytics to detect unusual activity patterns, and generate alerts for potential security threats, making it the correct choice for monitoring AI services for security anomalies.

Exam trap

The trap here is that candidates often confuse Microsoft Sentinel with Microsoft Defender XDR, assuming that 'security monitoring' always falls under Defender, but Sentinel is the SIEM solution required for ingesting and analyzing logs from Azure AI services, while Defender XDR focuses on endpoint and identity protection.

How to eliminate wrong answers

Option A is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) solution, focused on managing endpoints and enforcing compliance policies, not on monitoring cloud service activity for security threats. Option B is wrong because Microsoft Defender XDR (Extended Detection and Response) is designed to correlate signals across endpoints, email, and identities, but it does not natively ingest and analyze logs from Azure AI services for SIEM-style threat detection. Option C is wrong because Microsoft Purview is a data governance and compliance solution, primarily used for data cataloging, classification, and policy enforcement, not for real-time security monitoring or threat detection.

Practice this question →
72
Multi-Selecthard

You are architecting an Azure AI solution that uses Azure AI Language to analyze text for sentiment and key phrases. The solution must handle bursts of up to 500 requests per second but average only 50 requests per second. You need to ensure cost efficiency while meeting performance requirements. Which THREE actions should you take?

Select 3 answers
A.Use Azure Queue Storage to buffer requests during spikes
B.Select the Free tier and implement queuing
C.Use the S0 pricing tier
D.Implement client-side throttling and retry logic
E.Deploy the service in multiple regions
AnswersA, C, D

Decouples ingestion and processing, smoothing out bursts.

Why this answer

Option A is correct because Azure Queue Storage can decouple the ingestion of requests from processing, allowing the solution to buffer bursts of up to 500 requests per second while the Azure AI Language service processes at a lower sustained rate. This prevents request throttling and enables cost-efficient scaling by using a lower-cost queue to absorb spikes rather than over-provisioning the AI service tier.

Exam trap

The trap here is that candidates often assume a higher pricing tier (like S0) alone can handle bursts, but without queuing and retry logic, the service will still throttle requests, leading to failures or the need for costly over-provisioning.

Practice this question →
73
MCQhard

Your company is deploying an Azure AI solution that uses multiple AI services. You need to ensure that all API calls are authenticated securely using managed identities. Which of the following steps is required to enable managed identity authentication for an Azure AI service?

A.Enable system-assigned managed identity at the subscription level
B.Assign a managed identity to the Azure AI service and grant it the required RBAC role
C.Store the authentication key in Azure Key Vault and reference it in the application
D.Configure a shared access key in the Azure AI service
AnswerB

This enables secure authentication without secrets.

Why this answer

Option B is correct because managed identity authentication for Azure AI services requires assigning either a system-assigned or user-assigned managed identity to the resource, and then granting that identity the appropriate RBAC role (e.g., Cognitive Services User) on the target AI service. This eliminates the need for keys or secrets in the code and leverages Azure AD tokens for secure, passwordless authentication.

Exam trap

The trap here is that candidates often confuse managed identity with key management solutions like Key Vault, or assume that enabling a managed identity at a higher scope (subscription) automatically applies to all resources, when in fact the identity must be explicitly assigned to each resource and granted RBAC permissions.

How to eliminate wrong answers

Option A is wrong because managed identities are assigned at the resource level, not the subscription level; enabling a system-assigned identity at the subscription scope is not a valid operation. Option C is wrong because storing the authentication key in Key Vault is a valid security practice but does not use managed identity authentication—it still relies on a static key, not an Azure AD token. Option D is wrong because shared access keys are the traditional key-based authentication method, which managed identities are designed to replace; configuring a shared access key does not enable managed identity authentication.

Practice this question →
74
MCQhard

Refer to the exhibit. You are configuring a custom conversational language understanding project in Azure AI Language. The project currently has English training phrases. You need to add support for Spanish. The exhibit shows the current settings. What should you do?

A.Create a new project for Spanish
B.Set enableMultiLanguage to true and add Spanish training phrases
C.Set enableMultiLanguage to true and deploy
D.Use Azure AI Translator to translate English phrases to Spanish
AnswerB

Enables multi-language and provides training data.

Why this answer

Option B is correct because in Azure AI Language, a custom conversational language understanding (CLU) project can support multiple languages by setting the `enableMultiLanguage` property to `true` and then adding training phrases in the target language (Spanish) to the same project. This allows the model to learn intents and entities across languages without creating separate projects, leveraging the multilingual capabilities of the underlying LUIS-based engine.

Exam trap

The trap here is that candidates often assume they need separate projects for each language (Option A) or that enabling multilingual mode alone is sufficient without adding training phrases in the target language (Option C), overlooking the requirement to provide actual language-specific examples for the model to learn from.

How to eliminate wrong answers

Option A is wrong because creating a new project for Spanish would duplicate effort and miss the built-in multilingual support in Azure AI Language, which is designed to handle multiple languages within a single project when `enableMultiLanguage` is enabled. Option C is wrong because simply setting `enableMultiLanguage` to `true` and deploying without adding Spanish training phrases would not teach the model Spanish utterances, resulting in no Spanish support. Option D is wrong because Azure AI Translator is a separate service for text translation, not for training a CLU model; translating phrases would not create native Spanish training data that captures cultural or linguistic nuances, and the model would still need Spanish training phrases to learn intents correctly.

Practice this question →
75
MCQeasy

You need to provision an Azure AI Language resource that supports custom text classification. Which pricing tier should you select to use the custom training feature?

A.Free (F0)
B.Basic (B)
C.Standard (S)
D.Premium (P)
AnswerC

Supports custom text classification training.

Why this answer

The Standard (S) tier is the only pricing tier for Azure AI Language that supports custom text classification, including the custom training feature. The Free (F0) tier is limited to pre-built capabilities and cannot be used for training custom models, while Basic (B) and Premium (P) tiers do not exist for this service.

Exam trap

The trap here is that candidates may confuse the Azure AI Language pricing tiers with other Azure AI services (e.g., Azure Cognitive Search or Azure Bot Service) that offer Basic or Premium tiers, leading them to select a non-existent option for this specific service.

How to eliminate wrong answers

Option A is wrong because the Free (F0) tier only supports pre-built language features (e.g., sentiment analysis, key phrase extraction) and explicitly disables custom model training and deployment. Option B is wrong because Azure AI Language does not offer a Basic (B) pricing tier; the available tiers are Free (F0) and Standard (S). Option D is wrong because Azure AI Language does not have a Premium (P) tier; the highest tier for custom features is Standard (S).

Practice this question →
Page 1 of 3 · 218 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Plan Manage Azure Ai questions.

Start 20-question session