Courseiva

Microsoft Certified: Azure AI Apps and Agents Developer Associate (AI-103) (AI-103) (AI-103) — Questions 226–300

455 questions total · 7 pages · All types, answers revealed

Page 3

Page 4 of 7

Page 5
226
MCQmedium

When labeling documents for a custom extraction model, what happens if you label the same field inconsistently across documents?

A.Model accuracy will decrease
B.The training will fail immediately
C.No impact
D.The model will automatically correct the labels
AnswerA

Inconsistent labels give the model contradictory supervision for identical field patterns, so it cannot learn a stable decision boundary. This label noise directly degrades precision and recall, meaning model accuracy will decrease — the constraint the question asks you to identify.

Why this answer

Inconsistent labeling of the same field across training documents introduces conflicting ground truth, which degrades the model's ability to learn a stable pattern. The neural trainer will still complete, but precision and recall for that field drop because the model receives contradictory signals. Consistency is a core labeling best practice in Document Intelligence Studio.

Exam trap

AI-103 often tests whether candidates understand that bad labels degrade accuracy rather than causing hard failures — the tempting wrong answer is 'training will fail immediately,' which sounds strict but is not how the service behaves.

How to eliminate wrong answers

Option B is wrong because inconsistent labels do not cause an immediate training failure — the service accepts the labels and produces a model, just a less accurate one. Option C is wrong because label quality directly drives model quality; claiming 'no impact' ignores how supervised learning works. Option D is wrong because the model has no mechanism to detect and auto-correct inconsistent human labels — it treats every label as ground truth.

227
Multi-Selectmedium

Which THREE features are provided by the prebuilt Layout model in Azure AI Document Intelligence? (Choose THREE)

Select 3 answers
A.Automatic sentiment analysis of paragraph text
B.Extraction of text lines and words with bounding polygons
C.Table structure extraction (rows, columns, cell spans)
D.Language translation of extracted text into English
E.Selection mark state detection (selected or unselected checkboxes)
AnswersB, C, E

The Layout model returns a pages object containing lines and words, each with bounding polygons expressed as coordinate arrays. This satisfies the scenario's need for positional text extraction, distinct from the Read model's plainer output and from field-specific prebuilt models.

Why this answer

Option B is correct because the prebuilt Layout model in Azure AI Document Intelligence returns OCR results as text lines and individual words, each accompanied by bounding polygons that give the precise coordinates of the text on the page. Option C is correct because the Layout model extracts table structures, including the rows, columns, and cell spans, so tabular data is returned in an organized, machine-readable form. Option E is correct because the Layout model detects selection marks such as checkboxes and radio buttons and reports their state as selected or unselected.

Option A does not belong because sentiment analysis is a natural language processing capability (for example, from Azure AI Language), not a feature of the Document Intelligence Layout model. Option D does not belong because translation is handled by Azure AI Translator, whereas the Layout model only extracts and structures document content without translating it.

Exam trap

AI-103 often tests the misconception that the Layout model includes NLP features like sentiment analysis or translation, when it is strictly a document structure extraction model.

228
MCQeasy

You are designing a solution that processes user reviews. You want to extract key terms such as 'battery life', 'screen quality', and 'customer service' from the text. Which Azure AI Language feature is best suited for this?

A.Key phrase extraction
B.Sentiment analysis
C.PII detection
D.Language detection
AnswerA

Key phrase extraction returns the salient noun phrases in unstructured text, which is exactly what surfacing terms such as 'battery life' and 'screen quality' requires. Named entity recognition would instead classify entities into fixed categories, not extract review topics.

Why this answer

Key phrase extraction is designed to identify the main talking points or salient terms in text, which is exactly what is needed to surface terms like 'battery life' and 'screen quality' from reviews. It returns a ranked list of key phrases without requiring training. This makes it the best fit for extracting review topics.

Exam trap

AI-103 often tests whether candidates confuse key phrase extraction with sentiment analysis, choosing sentiment when the requirement is to surface topics or terms rather than tone.

How to eliminate wrong answers

Option B is wrong because sentiment analysis determines positive, negative, or neutral tone and does not extract key terms. Option C is wrong because PII detection identifies and redacts personal data such as names and phone numbers, not product-related key phrases. Option D is wrong because language detection only identifies the language of the text and returns no key terms.

229
MCQmedium

You are integrating Azure OpenAI into an enterprise application. You need to prevent prompt injection attacks where users attempt to override the system instructions. Which approach provides the most robust defense?

A.Implement an input guardrail using Azure AI Content Safety to detect and block jailbreak attempts before they reach the model.
B.Set the model frequency penalty to 2.0 to penalize repeated malicious phrases.
C.Append 'Ignore previous instructions' at the end of every user message.
D.Encode all user input in Base64 before sending it to the model.
AnswerA

Azure AI Content Safety's prompt shields detect jailbreak and indirect injection patterns in user input, blocking them before inference. This satisfies the requirement for the most robust defence, because filtering occurs outside the model, so attackers cannot override system instructions through crafted prompts.

Why this answer

Azure AI Content Safety's Prompt Shields (jailbreak detection) is purpose-built to detect and block prompt injection and jailbreak attempts at the input boundary before they reach the model. This provides a robust, model-agnostic defense layer that is maintained and updated by Microsoft against emerging attack patterns. Input filtering is the recommended first line of defense in Microsoft's defense-in-depth guidance for LLM applications.

Exam trap

AI-103 often tests the misconception that model parameters (frequency/presence penalty) or encoding tricks defend against prompt injection, when the correct answer is a dedicated input guardrail like Azure AI Content Safety Prompt Shields.

How to eliminate wrong answers

Option B is wrong because frequency penalty only discourages token repetition in the model's output — it has no effect on detecting or blocking adversarial input instructions. Option C is wrong because appending 'Ignore previous instructions' actually amplifies the injection risk and does not neutralize attacker-supplied overrides. Option D is wrong because Base64 encoding is trivially reversible and does not prevent the model from decoding and acting on malicious instructions; it obscures but does not defend.

230
MCQhard

You are configuring a secure enterprise architecture where Azure AI Vision calls must not traverse the public internet. You create a private endpoint for your Azure AI Services resource in your Virtual Network. Which DNS configuration step is required for client applications within the VNet to resolve the private endpoint correctly?

A.Add the endpoint IP to the local hosts file of every Azure AI Vision instance.
B.Configure Azure Private DNS zones corresponding to the cognitive services DNS zone and link it to your VNet.
C.Configure public DNS records on your corporate DNS server to point to the public IP.
D.Modify the routing table to drop all DNS traffic.
AnswerB

Private endpoints resolve via private DNS; creating the privatelink.cognitiveservices.azure.com zone and linking it to the VNet overrides public resolution, directing Azure AI Vision calls to the private IP and keeping traffic off the public internet.

Why this answer

When you create a private endpoint for an Azure AI Services resource, the private IP is associated with the service's public DNS name (for example, <resource>.cognitiveservices.azure.com). For clients in the VNet to resolve that name to the private IP instead of the public IP, you must create an Azure Private DNS zone named privatelink.cognitiveservices.azure.com and link it to the VNet, with an A record mapping the resource to the private endpoint IP.

Exam trap

AI-103 often tests the misconception that creating the private endpoint alone is sufficient, when DNS configuration via a linked Private DNS zone is mandatory for correct name resolution.

How to eliminate wrong answers

Option A is wrong because editing hosts files on every client is unmanageable, does not scale, and is not the Azure-recommended approach; it also breaks if the private endpoint IP changes. Option C is wrong because pointing DNS to the public IP defeats the purpose of the private endpoint and would route traffic over the public internet. Option D is wrong because dropping DNS traffic would prevent name resolution entirely and break all name-based connectivity, not just the private endpoint.

231
MCQmedium

You are building an ASP.NET Core web API that submits user reviews to the Azure AI Language service for sentiment analysis and opinion mining. The API must return both the document-level sentiment and the sentiment expressed toward individual product aspects such as 'screen' and 'battery'. Which request configuration must you use when calling the analyze-text endpoint?

A.Set the 'kind' property to 'OpinionMining' at the root of the request payload.
B.Add the 'opinionMining=true' query string parameter to the analyze-text URL.
C.Set the 'opinionMining' property to true inside the 'parameters' object of the request payload.
D.Set the 'opinionMining' property to true inside the 'analysisInput' object of the request payload.
AnswerC

The analyze-text request schema places analysis behavior switches such as 'opinionMining' inside the 'parameters' object. Setting it to true instructs the service to return aspect-level opinion targets and their associated sentiments alongside the document sentiment, which is exactly what the API must surface to callers.

Why this answer

Opinion mining is enabled through the 'parameters' object of the analyze-text payload, where the 'opinionMining' boolean sits alongside other analysis settings. Because the stem requires both document sentiment and aspect-level sentiment, the request must explicitly turn on opinion mining in that parameters block so the response includes opinion targets and their polarities.

Exam trap

The trap here is assuming analysis switches such as opinion mining belong in the input or URL rather than in the request's parameters object.

232
Multi-Selectmedium

You are troubleshooting a deployment failure where an ARM template fails to provision an Azure OpenAI account. Which TWO potential causes should you investigate? Each correct answer presents part of the solution.

Select 2 answers
A.The subscription has exceeded its regional quota or model deployment quota limit.
B.The local workstation IP address is not whitelisted in Azure DevOps.
C.The client web browser cache is corrupted.
D.The requested region does not support Azure OpenAI model deployments.
E.The local git repository has uncommitted changes.
AnswersA, D

ARM provisioning fails when the subscription lacks available capacity, because Azure OpenAI model deployments consume regional quota for the chosen model and SKU. Exceeding that limit returns a quota error during template deployment, so quota must be checked first.

Why this answer

Option A is correct because Azure OpenAI provisioning fails when the target subscription has hit its regional quota or per-model deployment quota limit, so you must verify available quota in the chosen region before redeploying. Option D is correct because Azure OpenAI model deployments are only offered in specific regions, and requesting a region that does not support the model causes the ARM template to fail. Options B, C, and E do not belong: Azure DevOps IP whitelisting, browser cache corruption, and uncommitted local git changes affect pipeline connectivity, client rendering, and source control state respectively, none of which block ARM template provisioning of an Azure OpenAI account.

Exam trap

AI-103 often tests whether candidates can distinguish ARM deployment failures caused by Azure-side constraints (quota, region availability, RBAC) from local developer environment issues (git state, browser cache, IP allowlists) — the latter are planted as plausible-but-irrelevant distractors.

233
Multi-Selecthard

Which THREE attributes are critical for a successful custom model training set?

Select 3 answers
A.High-quality images
B.Consistent labeling across all documents
C.Representative samples of all document layouts
D.All documents from the same printer
E.At least 1,000 pages per model
AnswersA, B, C

High-quality images directly satisfy the training-set requirement for accurate pattern recognition, since noisy, blurred or mislabelled samples degrade learned feature representations and inflate validation error. For custom model training, image fidelity and consistent labelling determine whether the model generalises beyond the training distribution, making quality a critical attribute alongside relevance and sufficient volume.

Why this answer

Option A (High-quality images) is correct because custom model training relies on OCR and layout analysis, so clear, well-lit, high-resolution scans or photos with minimal skew, blur, and noise give the model reliable visual features to learn from. Option B (Consistent labeling across all documents) is correct because supervised training requires ground-truth labels to be applied with the same schema and conventions throughout the dataset; inconsistent labels introduce contradictory signals that degrade accuracy and confuse the model. Option C (Representative samples of all document layouts) is correct because the model must generalize to every form, template, and layout it will encounter in production, so the training set must include examples covering the full variety of structures, fonts, and field placements.

Option D is not required because documents need not come from a single printer; in fact, variety in printers, scanners, and capture conditions improves robustness. Option E is not required because there is no fixed minimum of 1,000 pages per model; the needed volume depends on document complexity and diversity, and quality and representativeness matter more than a rigid page count.

Exam trap

AI-103 often tests training data requirements — candidates assume a large fixed page count (like 1,000 pages) is mandatory, but the real requirements are quality, consistent labeling, and layout diversity; quantity thresholds vary by model type (template vs. neural).

234
Multi-Selectmedium

When building a custom template model in Azure AI Document Intelligence Studio, which THREE types of data or attributes can you extract by labeling your training documents? (Choose THREE)

Select 3 answers
A.Facial biometric embeddings
B.Real-time audio transcription timestamps
C.Tables (including row and column structures)
D.Selection marks (checkboxes and radio buttons)
E.Fields (key-value pairs)
AnswersC, D, E

Custom template models support labelled extraction of tables, capturing row and column structure alongside key-value pairs and selection marks. Labelling table cells teaches the model to reconstruct the grid, satisfying the scenario's requirement to extract tabular data from training documents.

Why this answer

Option C is correct because custom template models in Azure AI Document Intelligence Studio support labeling and extracting tabular data, including the row and column structure of tables, which the service returns as structured cells with row/column indices. Option D is correct because selection marks such as checkboxes and radio buttons are a first-class labeled entity type, returned with a state of selected or unselected and a confidence score. Option E is correct because the core purpose of a custom template model is to label and extract fields, i.e., key-value pairs such as invoice number, date, or total, which are returned as named field/value pairs.

Option A does not belong because facial biometric embeddings are produced by Azure AI Face, not by Document Intelligence, which analyzes document text, layout, and structure rather than identifying people. Option B does not belong because real-time audio transcription timestamps come from Azure AI Speech (for example, the Speech-to-Text API), whereas Document Intelligence processes documents and images, not live audio streams.

Exam trap

AI-103 often tests whether candidates know the exact set of labelable entity types in Document Intelligence Studio, and they mistakenly include capabilities from other Azure AI services like Face or Speech.

235
MCQeasy

You are developing a global news aggregation application using the Azure AI Language service. You need to automatically identify the primary language of incoming user-submitted articles across 120 different languages before routing them to translation pipelines. Which API endpoint should you call?

A.POST /language/translate?api-version=3.0
B.POST /language/:analyze-text?api-version=2023-04-01 with the CustomEntityRecognition task
C.POST /language/analyze-text/jobs?api-version=2023-04-01 with the TextSentimentAnalysis task
D.POST /language/:analyze-text?api-version=2023-04-01 with the TextLanguageDetection task
AnswerD

The TextLanguageDetection task on the analyze-text endpoint returns the detected ISO language code and confidence for submitted text, covering the 120-language breadth required. Calling it before translation routing satisfies the stem's automatic primary-language identification constraint.

Why this answer

The TextLanguageDetection task in the /language/:analyze-text endpoint is specifically designed to identify the language of a document and return the detected language code and confidence score. It supports the full range of Azure AI Language languages (currently 120+), making it the correct choice for routing multilingual articles.

Exam trap

AI-103 often tests whether candidates confuse the Translator service's auto-detect feature with the dedicated Language Detection API — the trap is selecting the translate endpoint because it can also detect language, but the question asks for the API endpoint specifically designed for language identification.

How to eliminate wrong answers

Option A is wrong because /language/translate is the Translator service endpoint for translating text, not detecting language — although it can auto-detect source language, it is not the dedicated language detection API and returns translations, not language metadata. Option B is wrong because CustomEntityRecognition extracts custom named entities (e.g., product names, project codes) and has nothing to do with language identification. Option C is wrong because the /language/analyze-text/jobs endpoint with TextSentimentAnalysis is an asynchronous long-running job for sentiment analysis, not language detection.

236
MCQeasy

You are developing an application to extract specific fields from invoices using Azure AI Document Intelligence. Which prebuilt model should you use for this task?

A.custom-template
B.prebuilt-layout
C.prebuilt-document
D.prebuilt-invoice
AnswerD

The prebuilt-invoice model returns structured fields — vendor name, invoice date, due date, amounts, and line items — without custom training, satisfying the requirement to extract specific fields from invoices. Its dedicated schema targets invoice documents directly, unlike the general prebuilt-read or prebuilt-document models, which return raw text and generic key-value pairs.

Why this answer

The prebuilt-invoice model is purpose-built for invoice documents and returns structured fields such as VendorName, InvoiceDate, InvoiceTotal, DueDate, CustomerName, and line items without any training. Because the task is extracting specific fields from invoices, this prebuilt model directly matches the document type and required output. Custom models or generic layout models would require extra work and would not return invoice-specific fields out of the box.

Exam trap

AI-103 often tests whether candidates confuse generic document analysis (prebuilt-document or prebuilt-layout) with domain-specific prebuilt models, causing them to pick a general model when a specialized one like prebuilt-invoice is required.

How to eliminate wrong answers

Option A is wrong because custom-template requires you to label and train your own model on sample documents, which is unnecessary when a prebuilt invoice model already exists. Option B is wrong because prebuilt-layout only extracts structural elements like tables, selection marks, and text lines, not semantic invoice fields such as InvoiceTotal or VendorName. Option C is wrong because prebuilt-document is a general-purpose model for key-value pairs and entities across arbitrary documents, not a specialized invoice field extractor.

237
MCQmedium

You are building a chat application with Azure OpenAI. To improve perceived latency for users, you want to stream the model's response token-by-token to the client interface. Which API parameter or client SDK feature should you enable?

A.Set max_tokens to 1
B.Configure Azure AI Search with hybrid search
C.Enable semantic caching
D.Enable streaming in the chat completion request (stream=True)
AnswerD

Setting `stream=True` makes the chat completions endpoint return server-sent events, emitting each token as it is generated rather than buffering the full completion. This directly satisfies the stem's token-by-token requirement, cutting perceived latency because the client renders partial output immediately. Microsoft Entra ID authentication is unaffected by this parameter.

Why this answer

Setting stream=True in the chat completion request enables server-sent events (SSE) that deliver tokens incrementally as the model generates them, dramatically improving perceived latency. The client SDKs expose this as a streaming iterator or callback, letting the UI render partial responses immediately.

Exam trap

AI-103 often tests whether candidates conflate latency-reduction techniques (caching, smaller max_tokens) with streaming, so they pick an option that changes output content or retrieval rather than enabling incremental token delivery.

How to eliminate wrong answers

Option A is wrong because max_tokens=1 limits output to a single token, which truncates the response rather than streaming it. Option B is wrong because hybrid search is a retrieval technique for grounding, unrelated to response streaming. Option C is wrong because semantic caching reuses prior responses to reduce cost/latency but does not stream tokens.

238
MCQmedium

Your application uploads an image to Azure AI Vision for analysis. You need to generate thumbnail images with specific aspect ratios while maintaining the primary region of interest. Which API endpoint or feature should you use?

A.Use Custom Vision Training API to train a cropping model.
B.Call the Analyze Image API with features=objects and crop the image locally.
C.Call the Get Thumbnail API passing width, height, and smartCropping parameters.
D.Use Azure AI Document Intelligence layout analysis.
AnswerC

The Get Thumbnail API accepts width, height, and smartCropping parameters; smartCropping analyses saliency to keep the primary region of interest inside the requested aspect ratio, satisfying the requirement to generate thumbnails without cropping the subject.

Why this answer

The Get Thumbnail API in Azure AI Vision is specifically designed to generate thumbnails with a specified width and height, and it supports a smartCropping parameter. When smartCropping is set to true, the service analyzes the image to identify the primary region of interest (e.g., faces, salient objects) and crops the image to that region while preserving the requested aspect ratio. This directly fulfills the requirement without needing custom models or local processing.

Exam trap

AI-103 often tests the confusion between image analysis features that return metadata (like object detection) and those that directly manipulate images (like thumbnail generation), so candidates may incorrectly choose Analyze Image with objects assuming it can crop.

How to eliminate wrong answers

Option A is wrong because Custom Vision is for training image classification or object detection models, not for image cropping or thumbnail generation; it would require labeled data and a training cycle, which is overkill and not designed for this purpose. Option B is wrong because the Analyze Image API with features=objects returns object bounding boxes but does not perform cropping; you would have to implement cropping logic locally, which is not an API endpoint feature and may not intelligently determine the primary region of interest. Option D is wrong because Azure AI Document Intelligence is specialized for extracting text and structure from documents, not for image thumbnail generation or smart cropping of general images.

239
MCQmedium

You are integrating Azure AI Document Intelligence into a web application. You call the analyzeDocument API and receive a 202 Accepted response. What is the correct pattern for your application to retrieve the final extraction results?

A.Wait for exactly 60 seconds and then send a GET request to the original analyze endpoint.
B.Immediately parse the response body of the 202 Accepted response for the extracted JSON data.
C.Poll the URL provided in the Operation-Location response header until the status returns 'succeeded', then fetch the results.
D.Open a WebSocket connection to the streaming endpoint specified in the WebSocket-Location header.
AnswerC

The 202 response means extraction is asynchronous, so the Operation-Location header carries the polling URL. Repeatedly GET that URL until the status field reads 'succeeded', then retrieve the results from the same endpoint. This satisfies the stem's requirement for the correct retrieval pattern after an accepted submission.

Why this answer

The analyzeDocument API is asynchronous: a 202 Accepted response means the request was accepted and processing is ongoing. The response includes an Operation-Location header with a URL that the client must poll until the operation status becomes 'succeeded', after which the results can be fetched from that same URL. This polling pattern is the documented and correct way to retrieve extraction results.

Exam trap

AI-103 often tests whether candidates treat analyzeDocument as synchronous and try to parse the 202 body directly, instead of following the Operation-Location polling pattern.

How to eliminate wrong answers

Option A is wrong because there is no fixed 60-second wait; processing time varies and the correct approach is to poll the Operation-Location URL until completion. Option B is wrong because the 202 response body does not contain the extracted JSON; it only acknowledges acceptance and provides the operation URL. Option D is wrong because Document Intelligence does not use a WebSocket streaming endpoint or a WebSocket-Location header for analyzeDocument results.

240
Multi-Selectmedium

Which TWO actions should you take to ensure your agentic solution is 'Responsible'?

Select 2 answers
A.Enable Content Safety filters for all inputs and outputs.
B.Disable all logging to protect user privacy.
C.Provide transparent disclosures to users that they are interacting with an AI agent.
D.Set the model temperature to 1.0 to increase diversity.
E.Allow the agent to access the public internet without restrictions.
AnswersA, C

Content Safety filters screen prompts and completions for harmful categories such as violence, hate and self-harm, blocking unsafe agent behaviour at runtime. This enforces the safety pillar of Microsoft's Responsible AI standard across every input and output the agent processes.

Why this answer

Option A is correct because enabling Content Safety filters on all inputs and outputs is a core responsible-AI control that detects and blocks harmful content categories (hate, violence, sexual, self-harm) before they reach or leave the agent, directly mitigating safety risks. Option C is correct because transparent disclosure that users are interacting with an AI agent upholds the responsibility principles of transparency and accountability, ensuring users are informed and can calibrate their trust appropriately. Option B is not correct because disabling all logging removes auditability and traceability, which are essential for monitoring misuse, debugging, and accountability, and privacy is better handled through data minimization and redaction rather than eliminating logs.

Option D is not correct because raising temperature to 1.0 increases randomness and unpredictability, which undermines reliability and safety rather than improving responsibility. Option E is not correct because unrestricted public internet access expands the attack surface and risks unsafe or unverified content, so access should be governed by allowlists, grounding, and policy controls.

Exam trap

AI-103 often tests the misconception that 'privacy' means disabling logging — candidates must recognize that Responsible AI requires both safety filtering and transparency, while logging is a governance requirement, not a violation.

241
MCQmedium

You are deploying an LLM in Azure AI Foundry and want to restrict access to the endpoint to a specific virtual network. What should you configure?

A.Azure AD Conditional Access
B.Firewall Rule on the Model
C.Private Endpoint
D.Managed Identity
AnswerC

A private endpoint creates a private IP address for the Azure AI Foundry resource inside your virtual network, so traffic never traverses the public internet. This satisfies the requirement to restrict endpoint access to a specific virtual network, unlike service endpoints or firewall rules, which still permit public connectivity.

Why this answer

A private endpoint creates a private IP address for the Azure AI Foundry endpoint within your virtual network, ensuring traffic never traverses the public internet. This restricts access to only resources within that VNet. It is the standard Azure PaaS networking feature for private connectivity.

Exam trap

AI-103 often tests the confusion between identity-based access control (Conditional Access, Managed Identity) and network-based isolation (Private Endpoint), leading candidates to pick identity solutions for network restriction requirements.

How to eliminate wrong answers

Option A is wrong because Azure AD Conditional Access controls user access based on identity and device conditions, not network-level isolation of the endpoint. Option B is wrong because there is no 'Firewall Rule on the Model' feature; firewall rules apply to the Azure AI Foundry resource or its network settings, but a private endpoint is the correct mechanism for VNet restriction. Option D is wrong because Managed Identity provides authentication for the app to access other resources, not network restriction.

242
Multi-Selecthard

You are conducting a security review of an Azure AI Search service and Azure OpenAI integration. You discover potential security misconfigurations. Which THREE remediation actions should you take to align with Azure security benchmarks? Each correct answer presents part of the solution.

Select 3 answers
A.Grant Contributor permissions to anonymous external users.
B.Enable diagnostic logging and configure alerts for unauthorized access attempts and HTTP 401/403 errors.
C.Disable public network access on services where private endpoints are fully implemented.
D.Expose admin API keys in client-side single-page applications for direct access.
E.Rotate all static API keys regularly and transition client applications to Microsoft Entra ID managed identities.
AnswersB, C, E

Diagnostic logging captures control-plane and data-plane operations, letting alerts fire on HTTP 401 and 403 responses that signal unauthorised access attempts. This satisfies the benchmark requirement for detecting and auditing authentication failures against the search and OpenAI resources.

Why this answer

Option B is correct because enabling diagnostic logging and configuring alerts for unauthorized access attempts and HTTP 401/403 errors provides the audit trail and detection capability required by Azure security benchmarks to identify and respond to authentication and authorization failures against Azure AI Search and Azure OpenAI. Option C is correct because disabling public network access once private endpoints are fully implemented enforces network isolation, ensuring traffic reaches the services only through the private endpoint (private link) rather than the public internet, which is a core Azure security benchmark recommendation. Option E is correct because rotating static API keys regularly limits the blast radius of leaked keys, and transitioning clients to Microsoft Entra ID managed identities eliminates long-lived shared secrets entirely by using token-based, identity-driven authentication.

Option A does not belong because granting Contributor to anonymous external users violates least privilege and exposes the services to unauthorized modification. Option D does not belong because embedding admin API keys in client-side single-page applications exposes full administrative credentials to anyone inspecting the browser, which is a critical secret-management anti-pattern.

Exam trap

AI-103 often tests whether candidates can distinguish security remediations from insecure anti-patterns disguised as convenience features — options like 'expose keys to SPAs' or 'grant anonymous Contributor' are deliberately planted as obvious-but-wrong distractors.

243
MCQhard

You are configuring an Azure AI Document Intelligence custom extraction pipeline that processes thousands of diverse medical forms daily. You notice that extraction confidence scores for certain hand-written fields are low. What is the most effective remediation step within the Document Intelligence workflow?

A.Disable the OCR engine parameter in the API call to bypass text recognition steps.
B.Decrease the model training iterations configuration setting to prevent overfitting on handwriting.
C.Add additional labeled training documents that specifically feature diverse handwriting samples for those low-confidence fields.
D.Switch from a Custom Neural model to a Custom Template model.
AnswerC

Low confidence on handwritten fields reflects insufficient training examples matching that handwriting variability. Adding labelled documents containing diverse handwriting for those specific fields gives the custom extraction model the patterns it needs, directly raising confidence scores.

Why this answer

The most effective remediation for low-confidence extraction of handwritten fields in a custom Document Intelligence model is to provide more labeled training data that represents the variability causing the low confidence. Handwriting is highly variable, so adding diverse handwriting samples for the specific fields helps the model learn the patterns and improve accuracy. This directly addresses the root cause—insufficient training examples for those field variations—within the Document Intelligence workflow.

Exam trap

AI-103 often tests the misconception that tweaking model parameters (like iterations) or switching model types is the first fix for accuracy issues, when the primary solution is almost always improving training data quality and diversity.

How to eliminate wrong answers

Option A is wrong because disabling OCR would prevent any text recognition, making extraction impossible; OCR is essential for converting handwritten and printed text into machine-readable characters. Option B is wrong because decreasing training iterations would likely reduce model accuracy and underfit, not prevent overfitting; overfitting is typically addressed with more data or regularization, not fewer iterations. Option D is wrong because Custom Template models rely on fixed layouts and are poor at handling handwriting variability; switching to a template model would likely worsen performance on diverse handwritten forms.

244
MCQhard

You are troubleshooting a custom text classification model that exhibits high training loss and low validation accuracy, indicating severe model underfitting. What adjustment should you make to improve the model?

A.Lower the confidence score threshold to 0.01.
B.Increase the diversity and volume of training data and ensure model training is allowed to complete fully.
C.Reduce the training dataset size by 90%.
D.Switch the resource pricing tier from Standard to Free.
AnswerB

Underfitting means the model has not learnt the underlying patterns, so adding more diverse training data and allowing training to run to completion gives it sufficient signal and iterations to fit properly. This addresses the high training loss and low validation accuracy directly.

Why this answer

Underfitting means the model has not learned the underlying patterns in the data — training loss stays high because the model cannot even fit the training set. The remedy is to give the model more signal (more diverse, higher-volume data) and to let training run to completion so it has enough iterations to converge. Lowering thresholds or shrinking data would worsen the problem, not fix it.

Exam trap

AI-103 often tests the confusion between training-time hyperparameters (data volume, iterations) and inference-time settings (confidence threshold), so candidates pick the threshold option when the symptom is actually underfitting.

How to eliminate wrong answers

Option A is wrong because the confidence score threshold controls how predictions are filtered at inference time (e.g., in Custom Vision), not how the model learns; lowering it to 0.01 only surfaces more low-confidence predictions and does nothing for training loss. Option C is wrong because reducing the training dataset by 90% removes the signal the model needs, which deepens underfitting rather than resolving it. Option D is wrong because the pricing tier affects throughput, quota, and SLA — not the model's ability to learn; a Free tier may even impose stricter training limits, but it is not the corrective action for underfitting.

245
MCQhard

You are building an agentic solution in Microsoft Foundry where a planner agent delegates subtasks to several specialist agents. During testing, the planner repeatedly loses track of completed subtasks and re-delegates work, causing duplicate API calls and inflated costs. You need the planner to maintain reliable state across turns without exceeding the context window. What should you implement?

A.Convert the planner into a single monolithic agent that performs all subtasks sequentially in one prompt.
B.Implement a shared thread or state store where each subtask's status is recorded, and give the planner a tool to read and update that state between delegations.
C.Raise the planner's temperature so it explores alternative delegation orders and avoids repeating identical calls.
D.Increase the model's context window by switching to a larger deployment and append the full conversation history to every planner request.
AnswerB

Externalizing task state into a shared store gives the planner an authoritative record of what has been completed and what remains, independent of the context window. A read-and-update tool lets the planner consult status before delegating, eliminating duplicate work and keeping prompts compact because only relevant state is retrieved.

Why this answer

Persisting subtask status in a shared store and exposing it to the planner through read and update tools provides durable, queryable state that survives across turns without consuming context. The planner checks status before delegating, so completed work is not repeated, and prompts stay small because only the relevant state is retrieved.

Exam trap

The trap here is assuming that a larger context window or higher temperature fixes repeated delegation, when the real gap is the absence of an external, authoritative task-state record.

246
MCQeasy

Which of the following is a key advantage of using a 'prebuilt' model over a 'custom' model?

A.Higher accuracy for niche documents
B.Lower cost per page
C.Ability to define custom fields
D.No training required
AnswerD

Prebuilt models ship with pretrained weights, so they can be consumed immediately without any dataset preparation, training runs or compute spend. Custom models require labelled data and training time. This directly satisfies the scenario's constraint of avoiding the training effort entirely.

Why this answer

A prebuilt model is trained by the provider on a broad corpus of common document types, so it can be used immediately without any labeled training data or training cycle. This 'no training required' characteristic is its defining advantage — you get fast time-to-value and predictable behavior out of the box. Custom models, by contrast, require you to label documents and train, which costs time and effort.

Exam trap

AI-103 often tests the trade-off between prebuilt and custom models — candidates pick 'higher accuracy' as the prebuilt advantage, but accuracy on niche documents is exactly where custom models win; the correct prebuilt advantage is zero training effort.

How to eliminate wrong answers

Option A is wrong because higher accuracy on niche documents is precisely the advantage of a custom model, which is trained on your domain-specific data; prebuilt models often underperform on unusual layouts. Option B is wrong because lower cost per page is not a guaranteed advantage of prebuilt models — pricing depends on the service tier and volume, and custom models can be more cost-effective at scale for high-accuracy needs. Option C is wrong because defining custom fields is a capability of custom models (and in some services, composed models), not prebuilt ones, which return a fixed schema.

247
Multi-Selectmedium

You are optimizing an Azure OpenAI deployment in Azure AI Foundry for high-throughput batch processing. Which TWO strategies or configurations should you consider? (Choose TWO)

Select 2 answers
A.Azure OpenAI Batch API for asynchronous high-volume jobs at reduced costs
B.Disabling SSL certificate validation in the client SDK
C.Provisioned Throughput Units (PTUs) for guaranteed model capacity and predictable latency
D.Setting model max_tokens to 1
E.Routing all traffic through public developer local workstations
AnswersA, C

The Batch API accepts large asynchronous jobs at roughly 50% lower cost with separate quota, so it does not compete with real-time traffic. It satisfies the high-throughput batch processing requirement by decoupling bulk workloads from interactive deployments.

Why this answer

Option A is correct because the Azure OpenAI Batch API is purpose-built for asynchronous, high-volume workloads, processing requests in the background with a separate quota and offering roughly 50% lower cost than synchronous calls, which directly suits high-throughput batch processing. Option C is correct because Provisioned Throughput Units (PTUs) reserve dedicated model capacity for a deployment, guaranteeing consistent throughput and predictable latency rather than being throttled by shared pay-as-you-go quota, which is essential for sustained high-volume jobs. Option B is wrong because disabling SSL certificate validation weakens transport security and is never a valid optimization strategy.

Option D is wrong because setting max_tokens to 1 would truncate responses to a single token, breaking output quality rather than improving throughput. Option E is wrong because routing production traffic through public developer workstations is insecure, unreliable, and not a supported architecture for scaling Azure OpenAI workloads.

Exam trap

AI-103 often tests the confusion between cost-optimized asynchronous batch processing (Batch API) and latency-guaranteed dedicated capacity (PTUs) — candidates must recognize both as valid high-throughput strategies while rejecting security-weakening or nonsensical options.

248
MCQhard

You are implementing a function-calling flow in an Azure AI Foundry agent. The agent must call a get_order_status function, but during testing it sometimes invents an order ID and calls the function with a fabricated value instead of asking the user. You need the agent to request the missing order ID from the user before invoking the function. What should you do?

A.Mark the order_id parameter as required in the function's JSON schema and provide a clear parameter description, then let the model request it when absent.
B.Set the agent's temperature to 0 so the model becomes deterministic and stops fabricating order IDs.
C.Wrap the function call in a try/catch that retries with a random order ID when the first call fails.
D.Add a system message instructing the model to never guess values, and remove the order_id parameter from the function schema.
AnswerA

The function's JSON schema is the contract the model uses to decide whether it has enough information to call the tool. Declaring order_id as required with a descriptive field tells the model the call is incomplete without it, so the model asks the user instead of hallucinating a value. This is the supported mechanism for enforcing required arguments in function calling.

Why this answer

In function calling, the JSON schema of the tool defines what the model must supply. Declaring order_id as required with a descriptive field gives the model the signal it needs to ask the user for the missing value instead of inventing one, which is the correct fix for the observed behavior.

Exam trap

The trap here is assuming that prompt instructions or low temperature can substitute for schema-level enforcement of required function parameters.

249
Multi-Selectmedium

Which TWO actions should you perform to troubleshoot a model that consistently misinterprets tables?

Select 2 answers
A.Use the Read API instead
B.Disable the layout model
C.Change the resource region
D.Verify labels for alignment and completeness
E.Retrain with more diverse training samples
AnswersD, E

Verifying labels for alignment and completeness directly addresses table misinterpretation, since misaligned or missing annotations corrupt the training signal that teaches the model which cells belong to which rows and columns. This satisfies the stem's constraint that the model consistently misinterprets tables, pointing to systematic labelling errors rather than inference-time issues.

Why this answer

Option D is correct because when a model consistently misinterprets tables, the first troubleshooting step is to audit the ground-truth labels — verifying that bounding boxes, row/column tags, and table region annotations are aligned with the actual content and that no cells or headers are missing ensures the model is learning from accurate supervision. Option E is correct because table misinterpretation often stems from insufficient variety in the training data; retraining with more diverse samples (different table layouts, border styles, fonts, merged cells, and scan qualities) improves the model's ability to generalize to unseen table structures. Option A is not appropriate because the Read API is a general OCR endpoint for printed and handwritten text and does not provide the table-structure extraction or custom-model tuning needed to fix a misinterpreting custom model.

Option B is wrong because disabling the layout model removes the component that detects structural elements like tables, which would worsen rather than troubleshoot the problem. Option C is incorrect because changing the resource region only affects data residency and endpoint location, not the model's table-parsing accuracy.

Exam trap

The trap here is assuming an infrastructure or API change (region, Read API, disabling layout) can fix an accuracy problem, when the actual root cause in Document Intelligence troubleshooting is almost always data quality or training diversity.

250
MCQmedium

A media monitoring company subscribes to the Azure AI Language service and needs to extract named entities from news articles, then link each entity to its corresponding Wikipedia article when one exists. Which capability should you use to return both the entity text and its linked URL in a single call?

A.Key phrase extraction
B.Entity linking
C.Named entity recognition (NER) alone
D.Custom named entity recognition (Custom NER)
AnswerB

Entity linking identifies entities in text and maps each to a canonical entry, returning a URL such as the corresponding Wikipedia page together with a confidence score. That single call yields both the entity text and its linked resource, which is exactly what the monitoring pipeline needs.

Why this answer

Entity linking is the capability that both detects entities and resolves them to canonical entries with associated URLs, such as Wikipedia pages. Named entity recognition and custom NER provide types and spans without links, and key phrase extraction returns salient terms with no knowledge base association, so entity linking is the only fit for a single call returning text plus URL.

Exam trap

The trap here is assuming named entity recognition includes knowledge base linking, when linking is a distinct capability that returns the canonical URL.

251
MCQeasy

Which prebuilt Azure AI Document Intelligence model should you use to extract line items, merchant name, transaction date, and total tax from point-of-sale purchase receipts?

A.prebuilt-invoice
B.prebuilt-idDocument
C.prebuilt-businessCard
D.prebuilt-receipt
AnswerD

The prebuilt-receipt model is trained specifically on point-of-sale receipts, returning fields including merchant name, transaction date, line items and total tax. Other prebuilt models target invoices, identity documents or business cards, so they lack the receipt-specific field schema the scenario demands.

Why this answer

The prebuilt-receipt model is designed to extract key fields from sales receipts, including line items, merchant name, transaction date, and total tax. It is specifically trained on receipt layouts and is the correct choice for point-of-sale purchase receipts.

Exam trap

AI-103 often tests the distinction between prebuilt models by their target documents; candidates might confuse receipt extraction with invoice or business card models if they overlook the specific fields like line items and total tax.

How to eliminate wrong answers

Option A is wrong because prebuilt-invoice is for invoices, which have different fields like invoice ID and due date. Option B is wrong because prebuilt-idDocument extracts information from identity documents like passports or driver's licenses. Option C is wrong because prebuilt-businessCard extracts contact information from business cards, not receipt data.

252
MCQmedium

You are designing a generative AI application that processes user uploaded documents. You must ensure that Personally Identifiable Information (PII) such as Social Security numbers are automatically redacted before the text is sent to the Azure OpenAI model. Which service should you integrate into your pipeline?

A.Azure AI Language service (PII detection and redaction)
B.Azure AI Translator
C.Azure AI Vision OCR
D.Azure Monitor Application Insights
AnswerA

Azure AI Language's PII detection identifies and redacts entities such as Social Security numbers before text reaches the model, satisfying the requirement that sensitive data never leaves your pipeline unredacted. It provides a prebuilt, purpose-built redaction capability rather than relying on the model itself to avoid echoing PII.

Why this answer

Azure AI Language provides a prebuilt PII detection and redaction capability that identifies entities like Social Security numbers, credit card numbers, and names, and can mask or redact them in text. Integrating it into the pipeline before sending text to Azure OpenAI ensures sensitive data never reaches the model. This is the purpose-built service for the requirement.

Exam trap

AI-103 often tests the confusion between services that process text (Translator, OCR) and services that specifically detect and redact PII (Azure AI Language), or between observability tools and data protection tools.

How to eliminate wrong answers

Option B is wrong because Azure AI Translator handles language translation, not PII detection or redaction. Option C is wrong because Azure AI Vision OCR extracts text from images but does not identify or redact PII within that text. Option D is wrong because Azure Monitor Application Insights is an observability and telemetry service, not a data redaction tool.

253
MCQmedium

You are configuring text summarization using the Azure AI Language REST API. You need to generate a summary that consists of a few distinct sentences pulled directly from the source document without altering their wording. Which summarization kind should you specify?

A.Key phrase extraction
B.Extractive summarization
C.Abstractive summarization
D.Custom single-label classification
AnswerB

Extractive summarization returns sentences copied verbatim from the source, satisfying the requirement to preserve original wording. Abstractive summarization instead generates new phrasing, which would alter the text. Specifying extractive therefore produces the few distinct source sentences the scenario demands.

Why this answer

Extractive summarization produces a summary composed of sentences taken verbatim from the source document, preserving original wording. This exactly matches the requirement to pull distinct sentences without altering them. Abstractive summarization would rephrase and generate new text, which violates the constraint.

Exam trap

AI-103 often tests whether candidates confuse extractive and abstractive summarization, picking abstractive when the requirement explicitly demands verbatim sentences from the source.

How to eliminate wrong answers

Option A is wrong because key phrase extraction returns important terms or phrases, not a coherent multi-sentence summary. Option C is wrong because abstractive summarization generates new sentences that paraphrase the source, altering the original wording. Option D is wrong because custom single-label classification assigns one label to text and does not produce summaries.

254
Multi-Selectmedium

You are preparing training data for a custom named entity recognition (NER) project in Language Studio. Which THREE guidelines should you follow to ensure high model accuracy? (Choose three.)

Select 3 answers
A.Ensure consistent and accurate tagging of entities across all training documents.
B.Use exactly one training document for the entire project.
C.Provide sufficient examples for each entity type based on service guidelines.
D.Include a diverse set of training documents that reflect real-world data distribution.
E.Tag every single word in every document as an entity.
AnswersA, C, D

Inconsistent labels teach the model contradictory boundaries, degrading precision and recall. Applying the same tagging rules to every occurrence of an entity across all documents gives the model a coherent signal, directly satisfying the stem's requirement for high accuracy.

Why this answer

Option A is correct because consistent and accurate tagging is fundamental to supervised NER training: if the same entity type is labeled inconsistently across documents, the model receives contradictory signals and cannot learn reliable entity boundaries or types. Option C is correct because Azure AI Language's custom NER guidance recommends providing sufficient labeled examples per entity type (typically at least 10-15 examples per entity, and more for complex or ambiguous entities) so the model can generalize the entity pattern rather than memorize a few instances. Option D is correct because training data should reflect the real-world distribution and variety of documents the model will encounter, including different formats, domains, and contexts, which improves generalization and reduces overfitting to a narrow sample.

Option B is wrong because a single training document cannot provide enough examples or variability for the model to learn robust entity patterns, and the service requires a minimum number of documents for training. Option E is wrong because tagging every word as an entity defeats the purpose of NER, which must distinguish entities from non-entity tokens; the model also needs negative examples (words not tagged as entities) to learn what is not an entity.

Exam trap

AI-103 often tests the misconception that more data always compensates for poor labeling quality, but consistent and accurate tagging is non-negotiable for high accuracy.

255
MCQmedium

Your development team wants to deploy a new version of an Azure OpenAI model while ensuring zero downtime for client applications currently calling the existing model deployment. What is the recommended deployment strategy?

A.Overwrite the existing model deployment name with the new model version.
B.Delete the Azure OpenAI resource and provision a new one in the same region.
C.Create a new deployment with a distinct deployment name for the new model version, then update application configuration to point to the new deployment.
D.Downgrade the pricing tier to pause traffic while updating the model version.
AnswerC

Creating a separate deployment with a distinct name leaves the existing deployment serving live traffic untouched. Applications then switch their configuration to the new deployment once validated, giving zero downtime because both model versions coexist during the transition.

Why this answer

Azure OpenAI supports multiple simultaneous deployments of the same or different models under distinct deployment names within a single resource. By creating a new deployment for the updated model version and then switching application configuration to the new deployment name, traffic continues to be served by the old deployment until the cutover, achieving zero downtime. This also enables easy rollback by reverting the configuration.

Exam trap

AI-103 often tests the misconception that you must overwrite or recreate a deployment to change model versions; the correct pattern is side-by-side deployments with a configuration cutover.

How to eliminate wrong answers

Option A is wrong because overwriting the existing deployment name with a new model version causes an immediate switch, potentially breaking clients that depend on the prior model behavior and offering no rollback path. Option B is wrong because deleting and recreating the Azure OpenAI resource causes downtime, loses quota assignments, and requires reconfiguring keys, endpoints, and networking. Option D is wrong because pricing tiers cannot be used to pause traffic, and downgrading does not preserve availability or provide a controlled version transition.

256
MCQhard

You are implementing an agentic workflow where an agent executes tools that modify corporate data. To adhere to Responsible AI principles, you must ensure a human reviewer approves sensitive tool actions before they are executed. What design pattern should you implement in Azure AI Agent Service?

A.Fully autonomous agent loop with max iterations set to 50
B.Human-in-the-loop (HITL) approval workflow for tool execution
C.Azure API Management rate limiting policy
D.Asynchronous event grid notification after tool execution
AnswerB

Human-in-the-loop approval intercepts tool calls before execution, pausing the agent so a reviewer can authorise sensitive data modifications. This directly satisfies the Responsible AI constraint that a human must approve actions prior to execution, rather than auditing them afterwards.

Why this answer

Human-in-the-loop (HITL) approval inserts a human review step before sensitive tool actions execute, satisfying Responsible AI requirements for oversight of consequential operations. In Azure AI Agent Service, this is implemented by pausing the agent's tool call, surfacing it for approval (via UI, API, or Logic Apps), and only proceeding on explicit human consent. This preserves accountability and prevents autonomous harmful actions.

Exam trap

AI-103 often tests the confusion between post-execution notification/auditing and pre-execution human approval — candidates must recognize that Responsible AI requires gating sensitive actions before they occur, not just logging them afterward.

How to eliminate wrong answers

Option A is wrong because a fully autonomous loop with high max iterations removes human oversight entirely, directly violating the Responsible AI principle of human accountability for sensitive actions. Option C is wrong because API Management rate limiting controls traffic volume, not action approval — it does not gate individual tool executions on human consent. Option D is wrong because asynchronous Event Grid notification occurs after execution, which is post-hoc auditing, not pre-execution approval; the sensitive action would already have modified corporate data.

257
Multi-Selectmedium

Which TWO actions should you take to ensure that your Azure AI deployment is secure?

Select 2 answers
A.Keep the public IP exposed at all times.
B.Use Managed Identities for service-to-service communication.
C.Store all keys in a public GitHub repository.
D.Always use the latest TLS version for all communication.
E.Use the default 'Owner' role for all users.
AnswersB, D

Managed identities give Azure AI resources a Microsoft Entra ID-issued identity, eliminating embedded credentials or keys in code and configuration. This satisfies the stem's security requirement by removing secret sprawl and enabling auditable, least-privilege service-to-service access.

Why this answer

Option B is correct because Managed Identities let Azure AI services authenticate to other Azure resources (such as Key Vault, Storage, or Cognitive Services) through Microsoft Entra ID, eliminating the need to embed credentials or API keys in code and thus reducing the risk of secret leakage. Option D is correct because enforcing the latest TLS version (TLS 1.2 or 1.3) for all communication encrypts data in transit and protects against known protocol downgrade and cipher-suite vulnerabilities. Option A is wrong because leaving a public IP exposed at all times unnecessarily widens the attack surface; access should be restricted via private endpoints, VNet integration, or firewall rules.

Option C is wrong because storing keys in a public GitHub repository exposes secrets to anyone, leading to credential compromise. Option E is wrong because assigning the default 'Owner' role to all users violates least privilege and grants excessive control over the Azure AI deployment.

Exam trap

AI-103 often tests the misconception that exposing public IPs or using default owner roles is acceptable for convenience, but the exam expects recognition that least privilege and encrypted communication are non-negotiable for secure AI deployments.

258
MCQeasy

Which of the following is a core principle of Responsible AI in Azure AI Foundry?

A.Bypassing all safety filters.
B.Maximizing cost savings at any cost.
C.Forcing the model to agree with the user.
D.Transparency and explainability.
AnswerD

Transparency and explainability directly satisfy Responsible AI's requirement that stakeholders understand how models reach decisions. In Azure AI Foundry, this principle underpins model cards, evaluation reports and interpretability tooling, ensuring systems remain accountable and their behaviour auditable throughout deployment.

Why this answer

Transparency and explainability is a core principle of Responsible AI in Azure AI Foundry, ensuring that AI systems are understandable, their decisions can be explained, and users can comprehend how outputs are generated. This aligns with Microsoft's Responsible AI principles: fairness, reliability & safety, privacy & security, inclusiveness, transparency, and accountability. The other options describe anti-patterns that violate Responsible AI.

Exam trap

AI-103 often tests the confusion between operational goals (cost savings) or anti-patterns (bypassing filters) and the actual Responsible AI principles, with transparency and explainability being the correct core principle.

How to eliminate wrong answers

Option A (Bypassing all safety filters) is wrong because Responsible AI requires safety filters and content moderation to prevent harmful outputs; bypassing them is a violation, not a principle. Option B (Maximizing cost savings at any cost) is wrong because cost optimization is an operational goal, not a Responsible AI principle, and pursuing it 'at any cost' would compromise safety and ethics. Option C (Forcing the model to agree with the user) is wrong because this describes sycophancy, which undermines truthfulness and reliability — Responsible AI promotes honest, calibrated responses, not forced agreement.

259
MCQeasy

In Azure AI Foundry, which tool would you use to measure the quality of your RAG application against a golden dataset?

A.Evaluation
B.Model Catalog
C.Deployment
D.Prompt Flow Tracing
AnswerA

Evaluation in Azure AI Foundry runs automated metrics — groundedness, relevance, retrieval score — comparing your RAG application's responses against a golden dataset, directly satisfying the requirement to measure quality. It provides repeatable, quantitative scoring rather than manual inspection, making regression testing and iterative improvement possible.

Why this answer

The Evaluation tool in Azure AI Foundry is designed to measure the quality of generative AI applications, including RAG systems, against a golden dataset using metrics such as groundedness, relevance, coherence, and fluency. It provides both built-in and custom evaluators, making it the correct choice for quality measurement. Model Catalog, Deployment, and Prompt Flow Tracing serve different purposes.

Exam trap

AI-103 often tests the distinction between observability (Prompt Flow Tracing) and quality measurement (Evaluation) — candidates pick Tracing because it sounds like it measures quality, but it only shows execution details.

How to eliminate wrong answers

Option B is wrong because Model Catalog is a repository for discovering and provisioning foundation models, not for evaluating application quality. Option C is wrong because Deployment is the process of provisioning a model or agent endpoint, not measuring quality. Option D is wrong because Prompt Flow Tracing provides observability into execution flow and latency, but it does not compute quality metrics against a golden dataset.

260
MCQeasy

You want to extract gender and age attributes from human faces in photos. While Azure AI Face service handles facial analysis, which base Azure AI Vision 4.0 feature detects the presence and bounding boxes of people?

A.features=objects
B.features=people
C.features=tags
D.features=read
AnswerB

The people feature returns bounding boxes and confidence scores for detected persons, satisfying the stem's requirement to locate people before facial attribute extraction. It differs from the faces feature, which returns face rectangles and attributes, so people detection supplies the presence and location data needed.

Why this answer

In Azure AI Vision 4.0 image analysis, the 'people' feature detects human presence and returns bounding boxes for each person in the image, which is the base capability you need before applying Face service for gender/age attributes. The 'objects' feature detects common objects (not specifically people), and 'tags'/'read' serve different purposes. So 'features=people' is the correct query parameter.

Exam trap

AI-103 often tests the boundary between Vision's 'people' detection (bounding boxes only) and Face's attribute extraction (age/gender) — the trap is choosing 'objects' or 'tags' thinking they cover person detection.

How to eliminate wrong answers

Option A is wrong because 'features=objects' returns bounding boxes for generic objects (e.g., cars, furniture) and does not specifically identify people. Option C is wrong because 'features=tags' returns content tags (e.g., 'outdoor', 'person' as a tag) without bounding boxes or person-specific detection. Option D is wrong because 'features=read' performs OCR text extraction, which is unrelated to detecting people.

261
MCQmedium

Your company's security policy requires that all Azure AI Services accounts disable public network access completely. However, internal applications hosted inside a specific Azure Virtual Network must still communicate with the AI services. How should you configure network access?

A.Configure an inbound Network Security Group (NSG) rule on the AI resource subnet.
B.Disable public network access and configure a Private Endpoint for the resource.
C.Keep public network access enabled and rely on API keys for security.
D.Deploy a VPN gateway inside the Azure AI resource group.
AnswerB

A Private Endpoint assigns a private IP from the virtual network to the Azure AI Services resource, so traffic stays on the Microsoft backbone. Disabling public network access then blocks internet reachability while internal applications retain connectivity, meeting the security policy.

Why this answer

To disable public network access while allowing internal applications in a specific Azure Virtual Network to communicate with Azure AI Services, you should disable public network access and configure a Private Endpoint. This creates a private IP address in the VNet for the service, enabling secure private connectivity.

Exam trap

AI-103 often tests the confusion between network security groups and private endpoints, leading candidates to choose NSG rules when private connectivity to PaaS services is required.

How to eliminate wrong answers

Option A is wrong because an NSG rule on the AI resource subnet does not apply to the AI service itself; NSGs filter traffic to subnets, but the AI service is a PaaS offering, not a VM in your subnet. Option C is wrong because keeping public network access enabled violates the security policy. Option D is wrong because deploying a VPN gateway inside the resource group does not provide private connectivity to the AI service; a VPN gateway connects on-premises networks to Azure, but private access to PaaS services requires Private Endpoint or Service Endpoints.

262
MCQeasy

You are provisioning a new Azure AI Vision resource in the Azure Portal. You need to choose between a 'F0' free pricing tier and an 'S0' standard pricing tier. What is a key limitation of selecting the F0 pricing tier?

A.It does not support regional data residency guarantees.
B.It disables diagnostic log streaming to Azure Monitor.
C.It restricts the total number of calls allowed per month and limits transaction rates.
D.It prohibits the use of managed identities for authentication.
AnswerC

F0 caps both the monthly transaction volume and the per-second call rate, so production workloads exhaust the quota quickly. S0 removes those caps and bills per call, making F0 suitable only for trials and evaluation.

Why this answer

The F0 (free) tier for Azure AI Vision is designed for evaluation and small-scale testing, and it enforces both a monthly call quota (e.g., 5,000 transactions per month for many Vision APIs) and a low transactions-per-second (TPS) rate limit. Exceeding either causes 429 throttling or 403 quota-exceeded errors, which is why F0 is unsuitable for production workloads.

Exam trap

AI-103 often tests the assumption that F0 disables security or compliance features (managed identity, data residency) — the trap is that F0's only real limitation is quota and rate, not feature availability.

How to eliminate wrong answers

Option A is wrong because regional data residency is a property of the resource's deployment region, not the pricing tier — F0 resources still reside in the chosen region and honor the same data residency commitments. Option B is wrong because diagnostic settings and log streaming to Azure Monitor are configured at the resource level and are available on F0, though the volume of logs is naturally lower due to lower traffic. Option D is wrong because managed identity support is a control-plane feature of the resource and is available on both F0 and S0 — authentication method is not gated by pricing tier.

263
MCQhard

You are building an advanced agentic RAG solution. When a user asks a complex question, the agent needs to generate multiple search queries, execute them in parallel against Azure AI Search, synthesize the findings, and then formulate a final answer. Which agent pattern are you implementing?

A.Model fine-tuning
B.Single-shot keyword extraction
C.Static prompt templating
D.Query decomposition and parallel retrieval
AnswerD

The agent splits the complex question into multiple sub-queries, dispatches them concurrently to Azure AI Search, then synthesises results before answering. This matches the stem's parallel execution and synthesis requirements, distinguishing it from single-query or sequential patterns.

Why this answer

Query decomposition and parallel retrieval is an agentic RAG pattern where the agent breaks a complex question into multiple sub-queries, executes them concurrently against Azure AI Search, and then synthesizes the results into a final answer. This pattern improves recall and handles multi-hop reasoning. It is distinct from fine-tuning, keyword extraction, or static templating, which do not involve dynamic query generation and parallel execution.

Exam trap

AI-103 often tests the confusion between simple RAG and agentic RAG patterns, where candidates may pick fine-tuning or static templating instead of query decomposition and parallel retrieval.

How to eliminate wrong answers

Option A is wrong because model fine-tuning adjusts model weights for style or domain adaptation and does not generate or execute multiple search queries. Option B is wrong because single-shot keyword extraction produces one set of keywords from the query and does not decompose or parallelize retrieval. Option C is wrong because static prompt templating uses fixed prompts without dynamic query generation or parallel execution.

264
MCQmedium

You are developing an Azure AI Search index for a RAG application. You need to ensure that the search results include semantic relevance scores to improve the quality of the model's grounding. Which feature must you enable?

A.Use Custom Analyzers
B.Enable Knowledge Store
C.Enable Semantic Ranker on the search service
D.Enable Hybrid Search with vectorization
AnswerC

Semantic Ranker adds a reranking stage that returns semantic relevance scores alongside results, directly satisfying the stem's requirement for grounding quality. It operates on top of the existing index without altering the base scoring profile, so enabling it on the search service is sufficient.

Why this answer

Semantic Ranker is the Azure AI Search feature that applies a Microsoft-hosted language model to re-rank the top results from an initial retrieval pass, producing semantic relevance scores (semantic captions and answers) that improve grounding quality for RAG. Enabling it on the search service (Standard tier or higher) and then configuring it on the index/query is what surfaces the semantic score. Without Semantic Ranker, results are ranked only by BM25 or vector similarity, not by deep semantic understanding.

Exam trap

AI-103 often tests the misconception that hybrid search or vectorization alone produces semantic scores — candidates must recognize that Semantic Ranker is a distinct, separately enabled feature that generates the semantic relevance score.

How to eliminate wrong answers

Option A is wrong because Custom Analyzers only control lexical tokenization, stemming, and stop-word handling at index time — they improve keyword matching but do not produce semantic relevance scores. Option B is wrong because Knowledge Store is a feature that persists enriched content (from AI enrichment skillsets) into Azure Storage for downstream analytics; it does not rank or score query results. Option D is wrong because Hybrid Search with vectorization combines keyword and vector queries to improve recall, but the ranking is still based on BM25 and vector similarity — it does not generate semantic relevance scores unless Semantic Ranker is also enabled.

265
MCQhard

You need to ensure that an LLM-based agent in your application follows a specific output schema (JSON) for downstream processing. What is the most reliable way to enforce this?

A.Use a few-shot prompt with JSON examples
B.Use a custom parser in Prompt Flow
C.Configure the response_format property to JSON
D.Set the Stop Sequences parameter
AnswerC

Setting response_format to JSON constrains the model's decoding to emit valid JSON conforming to a supplied schema, giving deterministic structure for downstream parsing. Prompt instructions alone cannot guarantee schema compliance, so this API-level constraint is the reliable mechanism.

Why this answer

Configuring the response_format property to JSON (or json_schema for structured outputs) instructs the model at the API level to emit valid JSON conforming to the schema, which is enforced by constrained decoding rather than relying on prompt compliance. This is the most reliable enforcement because it operates at the model's token-generation layer, not on post-hoc parsing.

Exam trap

AI-103 often tests the confusion between response_format json_object (valid JSON only) and json_schema strict mode (schema-guaranteed), luring candidates toward prompt-based approaches that cannot guarantee structure.

How to eliminate wrong answers

Option A is wrong because few-shot examples only bias the model probabilistically; the model can still emit malformed JSON or extra prose, so it is not a guarantee. Option B is wrong because a custom parser in Prompt Flow only detects and possibly repairs invalid output after generation, which is reactive and cannot prevent schema violations. Option D is wrong because Stop Sequences merely halt generation at a token sequence; they do not constrain the structure or validity of the JSON produced.

266
MCQhard

You are developing a solution that uses custom text classification in Azure AI Language. You choose the multi-label classification architecture. What is the key characteristic of multi-label text classification?

A.A single document can be assigned zero, one, or multiple categories simultaneously.
B.Each document must be assigned to exactly one mutually exclusive category.
C.The output is restricted to binary positive or negative values.
D.Categories are automatically generated by the service without user training data.
AnswerA

Multi-label classification assigns any combination of classes to one document, so a single record can carry zero, one, or several category labels at once. This satisfies the stem's requirement for the multi-label architecture, distinguishing it from single-label classification, where exactly one mutually exclusive category is applied per document.

Why this answer

Multi-label text classification in Azure AI Language allows a single document to be assigned zero, one, or multiple categories simultaneously. This is in contrast to multi-class classification, where each document is assigned exactly one mutually exclusive category. The multi-label architecture is ideal when categories are not mutually exclusive and a document can belong to several at once.

Exam trap

The trap is confusing multi-label with multi-class classification; candidates often assume that all classification assigns exactly one category, but multi-label explicitly allows multiple simultaneous categories.

How to eliminate wrong answers

Option B is wrong because it describes multi-class classification, where each document is assigned to exactly one category. Option C is wrong because binary classification is a separate type where the output is limited to two classes (e.g., positive/negative). Option D is wrong because custom text classification requires user-provided training data; categories are not automatically generated.

267
MCQhard

Your application integrates Azure AI Vision and processes images stored in an Azure Blob Storage container. To adhere to security best practices, you want to avoid exposing public blob URLs. How should you provide the image to the Image Analysis API?

A.Use FTP to transfer images to the vision service endpoint.
B.Download the image bytes in your application code and send them in the binary request body (application/octet-stream).
C.Permanently change the blob container access level to Public Read.
D.Mount the Blob Storage container directly to the Azure AI Vision service via NFS.
AnswerB

Posting raw image bytes as application/octet-stream lets the Image Analysis API consume the image directly from your request, so no publicly accessible blob URL is ever generated. This satisfies the stem's constraint of avoiding public blob exposure while keeping storage private.

Why this answer

The Image Analysis API accepts image bytes directly in the request body with Content-Type: application/octet-stream, so your application can read the blob using its own credentials (managed identity, SAS, or connection string) and forward the bytes without ever making the blob publicly accessible. This keeps the storage account private and avoids exposing URLs. The API also supports image URLs, but only if the URL is publicly reachable — which violates the stated security requirement.

Exam trap

AI-103 often tests the trade-off between convenience (passing a URL) and security (passing bytes) — the trap is forgetting that URL-based input requires public accessibility, which conflicts with private-storage requirements.

How to eliminate wrong answers

Option A is wrong because FTP is not a supported transport for the Image Analysis API, and it would expose credentials and data in transit without the security controls of HTTPS. Option C is wrong because setting the container to Public Read exposes every blob to anonymous internet access, directly violating the security best practice the question asks you to follow. Option D is wrong because Azure AI Vision does not support mounting Blob Storage containers via NFS — that is not a supported integration pattern for the service.

268
MCQmedium

You are training a Custom Vision multiclass classification model for retail products. After training, you notice that the precision is high, but the recall is low for a specific product category. What does low recall indicate?

A.The training dataset had zero images for that category.
B.The model is incorrectly predicting that product when it is not present (high false positives).
C.The model is missing many actual instances of that product category (high false negatives).
D.The probability threshold is set too high for all classes uniformly.
AnswerC

Low recall means the model fails to identify many genuine instances of that product category, producing high false negatives. Precision stays high because predictions it does make are usually right, but it overlooks real products. This directly satisfies the stem's constraint: precision high, recall low for one category.

Why this answer

Recall measures the proportion of actual positive instances that the model correctly identifies. Low recall means the model is missing many actual instances of the product category, resulting in a high number of false negatives. High precision with low recall indicates the model is conservative: when it predicts the category it is usually right, but it fails to catch many true cases.

Exam trap

AI-103 often tests precision vs. recall, and candidates confuse the two, thinking low recall means false positives when it actually means false negatives (missed instances).

How to eliminate wrong answers

Option A is wrong because zero training images would likely cause the model to never predict the category, but the scenario states precision is high, implying the model does predict it correctly sometimes. Option B is wrong because high false positives would lower precision, not recall. Option D is wrong because a uniformly high threshold would affect all classes and typically reduce recall across the board, but the issue is specific to one category and the question asks what low recall indicates, not its cause.

269
Multi-Selecteasy

Which TWO file formats are natively supported as inputs for analysis in Azure AI Document Intelligence? (Choose TWO)

Select 2 answers
A.text/html
B.application/pdf
C.application/zip
D.image/jpeg
E.application/vnd.ms-excel
AnswersB, D

Document Intelligence accepts application/pdf natively, processing both text-based and scanned PDFs through its Read and prebuilt models. This satisfies the stem's requirement for a natively supported input format, unlike formats needing prior conversion such as DOCX or HTML.

Why this answer

Azure AI Document Intelligence natively accepts application/pdf (option B) because PDF is one of its primary supported input formats, allowing both digital and scanned documents to be submitted directly to the Analyze Document operations. It also natively supports image/jpeg (option D), since JPEG is among the supported image formats (along with PNG, BMP, TIFF, and HEIF) that the service can process for OCR and document analysis. The other options are not natively supported inputs: text/html (A) is not an accepted content type, application/zip (C) is not a document format the service reads directly, and application/vnd.ms-excel (E) is an Excel spreadsheet format that Document Intelligence does not accept as a native input.

Exam trap

AI-103 often tests whether candidates confuse 'formats the OCR engine can read after conversion' with 'formats natively accepted by the analyze API' — HTML and ZIP feel plausible but are not on the supported content-type list.

270
Multi-Selectmedium

You are preparing an ARM template to deploy an Azure AI multi-service account. Which TWO properties are mandatory within the ARM template resource definition? Each correct answer presents part of the solution.

Select 2 answers
A.VirtualMachineSize
B.sku
C.OperatingSystemType
D.KernelVersion
E.location
AnswersB, E

The sku property defines the pricing tier and feature set of the Azure AI multi-service account, and ARM requires it during resource creation because the platform must allocate the correct capacity and billing model before provisioning can succeed.

Why this answer

Option B (sku) is mandatory because an Azure AI multi-service (Cognitive Services) account resource requires a pricing/tier definition, e.g. "sku": {"name": "S0"}, to specify the billing tier and feature set of the account. Option E (location) is mandatory because every Azure resource, including a Cognitive Services multi-service account, must declare the Azure region where it is deployed, e.g. "location": "eastus". Options A (VirtualMachineSize), C (OperatingSystemType), and D (KernelVersion) do not belong because they are compute/VM-related properties relevant to virtual machines or VM scale sets, not to a Cognitive Services multi-service account, which is a PaaS resource with no OS or VM sizing attributes.

Exam trap

AI-103 often tests confusion between IaaS VM properties (VirtualMachineSize, OperatingSystemType) and PaaS Cognitive Services properties, tricking candidates into selecting VM-centric fields for an AI account resource.

271
MCQmedium

You are configuring a code interpreter tool for an AI agent in Azure AI Agent Service. The agent needs to analyze a CSV dataset uploaded by a user. How does the agent execute this task securely?

A.The agent compiles the CSV data into C# binaries and runs them on the host Azure App Service instance.
B.The agent sends the raw CSV data to an external public third-party execution API.
C.The agent generates Python code to analyze the CSV and executes it inside a secure, isolated sandbox environment managed by the service.
D.The agent translates the CSV data into SQL queries and executes them directly against the primary production database.
AnswerC

The service runs generated Python inside a managed, isolated sandbox with no network or host access, so uploaded CSV data is analysed without exposing the platform. This sandboxed execution model is what makes code interpreter safe for untrusted user datasets.

Why this answer

The code interpreter tool in Azure AI Agent Service generates and runs Python code in a secure, isolated sandbox managed by the service. This allows the agent to analyze uploaded CSV data without exposing the host environment or production systems.

Exam trap

AI-103 often tests whether candidates understand that code interpreter execution is sandboxed and managed, not run on the host or against production databases, and not outsourced to public third-party APIs.

How to eliminate wrong answers

Option A is wrong because the agent does not compile CSV data into C# binaries or run them on the host App Service instance; that would be unsafe and is not how the tool works. Option B is wrong because sending raw CSV data to an external public third-party execution API would create data residency, privacy, and security risks and is not the native behavior. Option D is wrong because translating CSV data into SQL and executing it directly against the primary production database would be dangerous and is not how the code interpreter operates.

272
Multi-Selecthard

You are implementing indirect prompt injection defenses in a RAG application where documents are ingested from public web pages. Which THREE mitigation strategies should you deploy? (Choose THREE)

Select 3 answers
A.Use strict structural delimiters (like XML tags) to isolate retrieved context from system instructions
B.Trust all incoming web page text unconditionally without inspection
C.Disable all content moderation filters to maximize processing speed
D.Implement output validation filters to check model completions for unauthorized actions or exfiltration attempts
E.Enable Prompt Shields for indirect prompt injection in Azure AI Content Safety
AnswersA, D, E

Wrapping retrieved documents in strict structural delimiters such as XML tags separates untrusted web content from system instructions, so injected text inside a document is treated as data rather than executable instruction. This directly mitigates indirect prompt injection during RAG ingestion from public pages.

Why this answer

Option A is correct because strict structural delimiters such as XML tags (e.g., <context>...</context>) create a clear boundary between untrusted retrieved document text and trusted system instructions, making it harder for injected instructions inside web content to be interpreted as authoritative commands. Option D is correct because output validation filters inspect model completions for unauthorized actions, data exfiltration patterns, or policy violations, providing a defense-in-depth control that catches injection effects even if the input-side isolation fails. Option E is correct because Azure AI Content Safety's Prompt Shields feature is specifically designed to detect both direct (user) and indirect (document) prompt injection attacks, including spotlighting techniques used in RAG ingestion pipelines.

Option B is incorrect because trusting all incoming web page text unconditionally is the exact vulnerability that enables indirect prompt injection, since public pages can contain adversarial instructions. Option C is incorrect because disabling content moderation filters removes a key safety layer and increases the risk that malicious or harmful injected content is processed and acted upon.

Exam trap

AI-103 often tests the misconception that a single control (e.g., delimiters alone) suffices for indirect prompt injection, when the correct answer requires multiple layered mitigations including detection and output validation.

273
MCQeasy

You are designing a generative AI solution in Azure AI Foundry. You need to ensure that user data sent to Azure OpenAI is not used to train Microsoft's foundational models. What is Microsoft's default data privacy policy for Azure OpenAI?

A.Customer data is stored in public Azure storage accounts
B.Customer data is not used to train foundation models by default
C.Customer data is automatically published to public hugging face repositories
D.Customer data is used for model training unless you opt out by submitting a support ticket
AnswerB

Azure OpenAI does not use customer prompts or completions to train, retrain, or improve Microsoft's foundation models by default; data is used only to provide the requested service. This default satisfies the stem's requirement that user data sent to Azure OpenAI must not train Microsoft's foundational models.

Why this answer

Microsoft's default policy for Azure OpenAI is that customer data (prompts and completions) is not used to train foundation models and is not shared with model providers. Data is processed only for the requested inference and retained per the service's data retention terms, not for training.

Exam trap

AI-103 often tests the misconception that Azure OpenAI trains on customer data unless you opt out, when in fact no-training is the default and opt-out is not required.

How to eliminate wrong answers

Option A is wrong because customer data is not stored in public Azure storage accounts; it is processed in the service's isolated environment with encryption. Option C is wrong because Microsoft does not publish customer data to public repositories like Hugging Face; that would be a catastrophic privacy breach. Option D is wrong because the default is already opt-out of training—there is no need to submit a support ticket to prevent training, as training on customer data is not the default behavior.

274
MCQhard

You are processing health-related clinical notes using the Azure AI Language service. You need to extract medical concepts and link them to standardized medical vocabularies such as ICD-10-CM and SNOMED-CT. Which specific feature and endpoint task should you use?

A.Named Entity Recognition (NER) with standard prebuilt-entity models
B.Key phrase extraction with medical domain parameters
C.Custom Named Entity Recognition with a trained ICD-10 dictionary
D.Healthcare text analytics (Healthcare-specific NER and relation extraction)
AnswerD

Healthcare text analytics extracts health-related entities and links them to specialized ontologies like UMLS, SNOMED-CT, and ICD-10.

Why this answer

Azure AI Language's healthcare text analytics feature is specifically designed to extract medical entities and relations from clinical text, and it can link entities to standardized vocabularies like ICD-10-CM, SNOMED-CT, and UMLS. It uses a dedicated endpoint task (e.g., /entities/health/jobs) and returns entities with categories, subcategories, and ontology links. This is the only option that provides medical concept extraction and vocabulary linking out of the box.

Exam trap

AI-103 often tests the confusion between general NER and healthcare-specific NER, leading candidates to choose standard NER or custom NER when the requirement explicitly mentions medical vocabularies like ICD-10-CM.

How to eliminate wrong answers

Option A is wrong because standard NER prebuilt models recognize general entities like people, places, and organizations, but not medical concepts or vocabulary linking. Option B is wrong because key phrase extraction identifies main points in text but does not extract medical concepts or link to standardized vocabularies. Option C is wrong because custom NER requires you to train a model with your own labeled data; while you could train it to recognize medical terms, it does not inherently link to ICD-10 or SNOMED-CT and would require significant effort.

275
Multi-Selectmedium

You are designing an agentic workflow in Prompt Flow. Which TWO components are required to define a tool-based agent? (Choose two)

Select 2 answers
A.A LLM to act as the agent brain
B.Tool definition (OpenAPI spec or Python function)
C.A SQL Database
D.A Power Automate cloud flow
E.An Azure Container Registry
AnswersA, B

The LLM acts as the agent brain, interpreting input and deciding which tools to invoke. It is required to define a tool-based agent in Prompt Flow, providing the reasoning step that selects tools and produces the final response.

Why this answer

Option A is correct because a tool-based agent in Prompt Flow requires an LLM to serve as the agent's reasoning brain, deciding which tools to invoke and how to interpret their outputs. Option B is correct because the agent must have tool definitions—provided as an OpenAPI specification or a Python function—so the LLM knows the available actions, their parameters, and how to call them. Option C is incorrect because a SQL Database is merely a possible backend a tool might query; it is not a required component of the agent definition.

Option D is incorrect because a Power Automate cloud flow is an optional integration, not a mandatory element for defining a tool-based agent. Option E is incorrect because Azure Container Registry is only relevant for storing container images used in custom environments, not for defining the agent itself.

Exam trap

AI-103 often tests the misconception that additional infrastructure like databases or Power Automate is required for agents, when only LLM and tool definitions are essential.

276
Multi-Selecthard

You are designing a high-availability architecture for an Azure AI Speech service solution. Which THREE practices should you incorporate into your design? (Choose three.)

Select 3 answers
A.Hardcode the primary region IP address in all client applications without using a routing DNS layer.
B.Configure Azure Front Door or Traffic Manager with health probes to route traffic away from unhealthy regions.
C.Set up Azure Monitor alert rules to notify operations teams of sudden spikes in server error rates or latency.
D.Deploy Speech resources in multiple Azure regions for active-passive or active-active failover.
E.Rely exclusively on a single-region deployment without backups to minimize operational complexity.
AnswersB, C, D

Azure Front Door or Traffic Manager health probes continuously test regional endpoints, automatically routing traffic away from unhealthy regions. This satisfies the stem's high-availability constraint by removing failed Speech endpoints from rotation, maintaining service continuity during regional outages.

Why this answer

Option B is correct because Azure Front Door or Traffic Manager with health probes provides DNS-based global load balancing and automatically routes clients away from an unhealthy Speech region, which is essential for high availability. Option C is correct because Azure Monitor alert rules on metrics such as server error rates and latency enable operations teams to detect degradation quickly and trigger failover or remediation before users are broadly impacted. Option D is correct because deploying Speech resources in multiple Azure regions supports active-passive or active-active failover, ensuring service continuity if one region becomes unavailable.

Option A is incorrect because hardcoding a primary region IP bypasses DNS-based failover and creates a single point of failure. Option E is incorrect because a single-region deployment without backups offers no redundancy and cannot meet high-availability requirements.

Exam trap

AI-103 often tests the misconception that simply deploying a resource in the cloud provides high availability, when in fact multi-region deployment plus health-probe-based routing and monitoring are required.

277
MCQhard

You are designing a multi-tenant SaaS application on Azure. Each tenant requires isolation of their Azure OpenAI token usage and cost tracking. What is the recommended provisioning strategy to achieve strict cost and quota isolation per tenant?

A.Use a single Azure OpenAI resource for all tenants and track usage using custom HTTP headers.
B.Deploy all tenants in the F0 free pricing tier.
C.Provision a separate Azure OpenAI resource for each tenant.
D.Rely on Azure Cost Management resource group tags alone without resource separation.
AnswerC

A separate Azure OpenAI resource per tenant provides independent quota, rate limits and billing, giving strict cost and token isolation. Shared resources with tags or per-tenant keys cannot enforce hard quota separation, so dedicated resources meet the isolation requirement.

Why this answer

Provisioning a separate Azure OpenAI resource per tenant provides independent quota limits, separate keys, and distinct billing meters, which together deliver strict cost and quota isolation. This is the recommended multi-tenant pattern when isolation is a hard requirement.

Exam trap

AI-103 often tests whether candidates believe tags or headers can substitute for resource-level isolation — the trap is choosing tag-based tracking when the requirement is strict quota and cost isolation, which requires separate resources.

How to eliminate wrong answers

Option A is wrong because a single resource shares quota and billing across tenants; custom HTTP headers are not a native Azure OpenAI cost-tracking mechanism and cannot enforce per-tenant quota. Option B is wrong because the F0 free tier has severe rate and quota limits and is intended for evaluation, not production multi-tenant workloads. Option D is wrong because resource group tags alone provide reporting granularity but do not isolate quota or prevent one tenant from consuming another's capacity.

278
MCQmedium

Your organization has multiple Azure AI services deployed across different resource groups. Your security officer requests a centralized dashboard to monitor security recommendations, vulnerability assessments, and compliance posture for all AI resources. Which Azure service should you open?

A.Azure Advisor
B.Microsoft Entra ID protection portal
C.Azure Policy compliance blade
D.Microsoft Defender for Cloud
AnswerD

Microsoft Defender for Cloud provides a centralised secure score, security recommendations, vulnerability assessment and regulatory compliance dashboard spanning subscriptions and resource groups. It satisfies the requirement to aggregate AI resource posture centrally, unlike per-service metrics or Log Analytics, which lack built-in recommendation and compliance engines.

Why this answer

Microsoft Defender for Cloud provides a centralized security posture management dashboard that aggregates security recommendations, vulnerability assessments, regulatory compliance, and threat protection across Azure resources, including Azure AI services. It is the correct service to open when a security officer requests a unified view of security recommendations and compliance posture across multiple resource groups.

Exam trap

AI-103 often tests the confusion between Azure Policy (compliance rules) and Defender for Cloud (security posture + threat protection), so candidates who see 'compliance posture' and pick Azure Policy miss the broader security dashboard requirement.

How to eliminate wrong answers

Option A is wrong because Azure Advisor provides cost, performance, reliability, and operational recommendations, not security vulnerability assessments or compliance posture. Option B is wrong because Microsoft Entra ID Protection focuses on identity risk (sign-in risk, compromised credentials), not resource-level security posture for AI services. Option C is wrong because Azure Policy compliance shows which policies are compliant or non-compliant, but it does not include vulnerability assessments or the broader security recommendations that Defender for Cloud aggregates.

279
MCQeasy

You are building an app to analyze customer feedback. You want to extract named entities such as people, locations, and organizations. Which Azure AI Language feature should you use?

A.Language detection
B.Sentiment analysis
C.Named Entity Recognition (NER)
D.Key phrase extraction
AnswerC

Named Entity Recognition detects and categorises mentions of people, locations, organisations and other entity types within text. It directly satisfies the requirement to extract those specific entity categories from customer feedback, unlike key phrase extraction or sentiment analysis.

Why this answer

Named Entity Recognition (NER) is the Azure AI Language feature specifically designed to identify and categorize entities like people, locations, organizations, and more from unstructured text. It returns both the entity text and its type (e.g., Person, Location, Organization), which directly matches the requirement to extract named entities from customer feedback. Other features like sentiment analysis or key phrase extraction do not provide entity type classification.

Exam trap

AI-103 often tests the distinction between NER and key phrase extraction: candidates may confuse extracting important phrases with classifying entities into types, leading them to choose key phrase extraction when entity type classification is required.

How to eliminate wrong answers

Option A is wrong because language detection only identifies the language of the text (e.g., English, French) and does not extract any entities. Option B is wrong because sentiment analysis determines the overall positive, negative, or neutral tone and may provide opinion mining, but it does not identify people, locations, or organizations. Option D is wrong because key phrase extraction returns main talking points or topics as a list of strings, but it does not classify them into entity types such as Person or Organization.

280
Multi-Selectmedium

When configuring a Custom Vision project, which TWO project types are available? (Choose two.)

Select 2 answers
A.Speech Synthesis
B.Form Extraction
C.Classification
D.Text Recognition (OCR)
E.Object Detection
AnswersC, E

Classification assigns one or more labels to an entire image, which is precisely what the Custom Vision service offers alongside object detection. It satisfies the stem's requirement for a valid project type, supporting both multiclass and multilabel variants within Microsoft Entra ID-authenticated projects.

Why this answer

Azure Custom Vision supports exactly two project types: Classification (option C) and Object Detection (option E). Classification (C) is correct because it trains a model to assign one or more labels to an entire image (e.g., "cat" vs. "dog"), which is a core Custom Vision project type. Object Detection (E) is correct because it trains a model to locate and classify multiple objects within an image by returning bounding boxes with labels, the other supported Custom Vision project type.

The remaining options do not belong: Speech Synthesis (A) is an Azure Speech service capability, Form Extraction (B) is handled by Form Recognizer, and Text Recognition/OCR (D) is provided by Computer Vision or Read API, not Custom Vision.

Exam trap

AI-103 often tests whether candidates confuse Custom Vision project types with other Azure AI services (Speech, Document Intelligence, Vision OCR); only Classification and Object Detection belong to Custom Vision.

281
Multi-Selecthard

Which THREE of the following are best practices for Responsible AI when using Generative AI solutions?

Select 3 answers
A.Removing all system instructions to maximize creativity
B.Implementing content safety filters
C.Collecting all user PII for model training
D.Maintaining human-in-the-loop oversight
E.Providing transparency to users that they are interacting with an AI
AnswersB, D, E

Content safety filters classify and block harmful categories such as violence, hate, sexual content and self-harm in both prompts and completions. This directly satisfies the Responsible AI requirement by preventing harmful generated output, complementing other measures like transparency notes and human oversight rather than replacing them.

Why this answer

Option B is correct because implementing content safety filters (such as Azure AI Content Safety categories for hate, violence, sexual, and self-harm content) helps prevent generative models from producing or surfacing harmful, offensive, or disallowed output, which is a core Responsible AI safeguard. Option D is correct because maintaining human-in-the-loop oversight ensures that consequential AI-generated decisions or outputs are reviewed and validated by a person before action, reducing risk of unchecked errors or misuse. Option E is correct because providing transparency to users that they are interacting with an AI (for example, disclosing that content is AI-generated or that they are chatting with a bot) upholds the Responsible AI principles of transparency and accountability, helping users calibrate trust.

Option A does not belong because removing all system instructions degrades safety guardrails and controllability rather than improving responsible use, and Option C does not belong because collecting all user PII for model training violates data minimization, privacy, and consent principles central to Responsible AI.

Exam trap

The trap is that distractor options sound like they improve model quality or personalization (more creativity, more training data), but AI-103 expects you to recognize they violate Responsible AI principles of safety, privacy, and transparency.

282
MCQhard

Your team is implementing 'Human-in-the-loop' (HITL) for an agent that performs account updates. Which mechanism should you use to pause the agent and wait for approval?

A.Set a long timeout in the API call.
B.Increase the model's 'stop_sequences'.
C.Use an infinite loop in Python.
D.Use a Prompt Flow 'Pause' node or custom state management logic.
AnswerD

A Prompt Flow 'Pause' node or custom state management suspends agent execution mid-run, persisting state until an approval signal resumes it. This satisfies the HITL constraint of halting account updates before they commit, rather than logging or post-hoc review.

Why this answer

Human-in-the-loop requires the agent to suspend execution, persist its state, and resume only after an external approval signal. In Azure Prompt Flow this is implemented with a Pause node (or equivalent custom state management) that halts the flow and waits for an external event or API call to continue. This preserves the agent's context and prevents the account update from executing until a human explicitly approves it.

Exam trap

AI-103 often tests whether candidates understand that HITL requires explicit state persistence and an approval gate — the trap is choosing a timeout or model parameter that merely delays execution instead of truly pausing it.

How to eliminate wrong answers

Option A is wrong because a long API timeout only delays failure — it does not pause the workflow, persist state, or provide an approval gate; the call will eventually time out and the operation will fail. Option B is wrong because stop_sequences controls where the model stops generating tokens; it has nothing to do with pausing a workflow or waiting for human input. Option C is wrong because an infinite loop blocks the worker thread, consumes compute, and provides no mechanism to receive or act on an approval signal.

283
MCQhard

You are performing Retrieval-Augmented Generation. You need to ensure the retrieved data includes metadata for filtering. Where should this metadata be defined?

A.Environment variables
B.Prompt Flow input schema
C.System message content
D.Azure AI Search Index Fields
AnswerD

Filterable metadata must be declared as fields in the Azure AI Search index schema, since filtering operates on index fields rather than on source documents or prompt content. Defining metadata there enables the filter expressions RAG queries require.

Why this answer

In a RAG architecture, metadata used for filtering (such as category, source, date, or access level) must be defined as fields in the Azure AI Search index schema so that queries can apply OData filter expressions against them. The index is the authoritative store of both vector/content data and its associated filterable attributes.

Exam trap

The trap is assuming metadata can be injected via prompts or environment variables; the exam tests whether you know that filterable metadata must live in the search index schema itself.

How to eliminate wrong answers

Option A is wrong because environment variables hold configuration secrets and connection strings, not per-document metadata used for query filtering. Option B is wrong because a Prompt Flow input schema defines the shape of inputs passed into a flow, not the searchable metadata stored alongside indexed documents. Option C is wrong because the system message is prompt text that shapes model behavior; it cannot be queried or filtered by Azure AI Search.

284
MCQeasy

You are deploying a model in Azure AI Foundry. You need to ensure that the model endpoint is protected by a virtual network. Which configuration should you use?

A.Enable public internet access with IP firewall rules
B.Enable Managed Identity on the endpoint
C.Deploy a dedicated Azure Application Gateway
D.Configure a Private Endpoint for the AI resource
AnswerD

A Private Endpoint assigns a private IP from your virtual network to the Azure AI resource, so traffic to the endpoint never traverses the public internet. This satisfies the requirement that the model endpoint be protected by a virtual network.

Why this answer

Configuring a Private Endpoint for the AI resource is correct because Azure Private Link creates a private IP address within your virtual network for the Azure AI Foundry resource, ensuring all traffic to the model endpoint stays on the Microsoft backbone and never traverses the public internet. This is the standard mechanism for VNet-protected PaaS endpoints in Azure.

Exam trap

AI-103 often tests the confusion between identity features (Managed Identity) and network features (Private Endpoint), or the belief that IP firewall rules constitute VNet protection — they do not.

How to eliminate wrong answers

Option A is wrong because enabling public internet access with IP firewall rules still exposes the endpoint publicly and does not satisfy the requirement that the endpoint be protected by a virtual network — it is a network-layer allowlist, not VNet isolation. Option B is wrong because Managed Identity provides authentication to Azure resources but does not provide network isolation; it is an identity feature, not a networking feature. Option C is wrong because an Application Gateway is a Layer 7 load balancer and WAF, not a mechanism for privately connecting to a PaaS endpoint — it does not create a private IP for the AI resource.

285
MCQmedium

You are using Azure AI Language custom text classification. You have uploaded your training dataset and trained a model. You notice that your evaluation metrics show low precision. What does low precision indicate about your model?

A.Many of the items predicted as a specific class actually belonged to a different class.
B.The model failed to find many actual positive instances in the dataset.
C.The latency of the REST API calls is too high.
D.The training dataset contained fewer than 5 documents per class.
AnswerA

Low precision means the model raises many false positives: items it labels as a given class genuinely belong elsewhere. This directly matches the stem's observation, since precision measures the proportion of predicted positives that are truly correct, so a low value indicates frequent misassignment into classes.

Why this answer

Low precision indicates that when the model predicts a class, it is often incorrect—meaning many predicted positives are false positives. In other words, items predicted as a specific class actually belong to a different class. This is the definition of low precision.

Exam trap

AI-103 often tests the confusion between precision and recall; candidates may incorrectly associate low precision with missing positive instances (recall) or with unrelated factors like latency or data quantity.

How to eliminate wrong answers

Option B is wrong because failing to find many actual positive instances describes low recall, not low precision. Option C is wrong because latency is a performance metric unrelated to precision. Option D is wrong because having fewer than 5 documents per class is a training data requirement issue that could cause poor model performance, but it does not directly define low precision.

286
Multi-Selecthard

You are developing an application that uses the Azure AI Language REST API for text analysis. Which TWO requirements must be met when constructing HTTP requests to the service? (Choose two.)

Select 2 answers
A.Format all request payloads as XML documents.
B.Include the master account password in the request query string.
C.Set the 'Content-Type' header to 'application/json'.
D.Authenticate exclusively using HTTP Basic Authentication with username and password.
E.Include the 'Ocp-Apim-Subscription-Key' header containing your API subscription key.
AnswersC, E

The Azure AI Language REST API accepts JSON request bodies, so the Content-Type header must declare application/json to ensure the service parses the submitted document correctly. Omitting or mis-setting this header causes the endpoint to reject the payload, so it is a mandatory requirement when constructing each HTTP request.

Why this answer

Option C is correct because the Azure AI Language REST API expects request bodies in JSON format, so the 'Content-Type' header must be set to 'application/json' for the service to correctly parse the payload. Option E is correct because the service authenticates requests using the 'Ocp-Apim-Subscription-Key' header, which must contain a valid API subscription key for the request to be authorized. Option A is incorrect because the API uses JSON, not XML, for request payloads.

Option B is incorrect because authentication does not use a master account password in the query string; the subscription key is passed in the header. Option D is incorrect because the service does not rely exclusively on HTTP Basic Authentication with username and password; it uses the subscription key header.

Exam trap

AI-103 often tests the misconception that Azure APIs use XML or Basic Auth, when they actually use JSON and subscription keys.

287
Multi-Selecthard

You are designing a deployment strategy for an Azure AI Custom Vision project in an enterprise pipeline. Which THREE practices should you follow to ensure secure and repeatable deployments? Each correct answer presents part of the solution.

Select 3 answers
A.Store API keys and connection strings securely in Azure Key Vault rather than hardcoding them.
B.Manually create and configure all production resources directly in the Azure portal without documentation.
C.Use Infrastructure as Code (ARM or Bicep) to provision Azure resources consistently.
D.Implement automated integration and validation tests in CI/CD pipelines before production release.
E.Store production API keys as plaintext comments in Bicep template files.
AnswersA, C, D

Hardcoded credentials in pipeline definitions or source control leak secrets and cannot be rotated safely. Azure Key Vault centralises storage with access policies and auditing, so Custom Vision training and prediction keys are retrieved at runtime, satisfying the secure-deployment half of the scenario.

Why this answer

Option A is correct because storing API keys and connection strings in Azure Key Vault keeps secrets out of source code and pipeline logs, and Custom Vision training/prediction keys can be referenced at runtime via Key Vault references or managed identities, supporting secure deployments. Option C is correct because Infrastructure as Code with ARM templates or Bicep provisions Azure resources (Custom Vision accounts, storage, compute) idempotently and consistently across environments, which is essential for repeatable deployments. Option D is correct because automated integration and validation tests in CI/CD pipelines verify that the deployed Custom Vision endpoint, keys, and model behavior work before production release, catching regressions and misconfigurations early.

Option B is incorrect because manual portal configuration is error-prone, undocumented, and not repeatable, undermining both security and consistency. Option E is incorrect because embedding production API keys as plaintext comments in Bicep files exposes secrets in source control and violates secure secret-management practices.

Exam trap

AI-103 often tests secure DevOps habits, so the trap is selecting manual portal configuration or plaintext secrets because they seem faster than implementing Key Vault and IaC.

288
Multi-Selecthard

You are troubleshooting an Azure OpenAI deployment in Azure AI Foundry where agents are failing to complete tasks due to excessive timeouts. Which THREE diagnostic steps should you take? (Choose three.)

Select 3 answers
A.Check if the tokens-per-minute (TPM) quota is throttling requests, causing queued delays.
B.Double the model temperature to 2.0 to accelerate reasoning speed.
C.Delete all vector indices to force local memory processing.
D.Inspect Application Insights telemetry to analyze execution duration per agent step and tool call latency.
E.Increase the client-side HTTP timeout threshold on the API request client.
AnswersA, D, E

Checking TPM quota directly addresses throttling, where exceeding the provisioned rate returns 429 responses and queues requests, inflating latency until agents time out. This satisfies the stem's excessive-timeout constraint by confirming whether rate limiting, rather than model or network faults, causes the delays.

Why this answer

Option A is correct because Azure OpenAI enforces tokens-per-minute (TPM) quotas per deployment; when requests exceed the quota, they are throttled with HTTP 429 responses and retried after a Retry-After delay, which manifests as queued latency and agent timeouts, so verifying TPM utilization and quota limits is a valid diagnostic step. Option D is correct because Application Insights integrated with Azure AI Foundry captures distributed traces of agent runs, including per-step durations, tool call latency, and dependency calls, letting you pinpoint exactly which step or tool is consuming the time budget. Option E is correct because the client-side HTTP timeout (for example, the timeout setting on the AzureOpenAI/OpenAI SDK client or HttpClient) may be shorter than the actual end-to-end agent execution time, so raising that threshold prevents premature client aborts while you investigate.

Option B is not appropriate because temperature controls randomness, not reasoning speed, and 2.0 is outside the supported range (0–2) and would degrade output quality rather than fix timeouts. Option C is not appropriate because deleting vector indices destroys the retrieval data agents depend on and does not accelerate processing; it would break RAG functionality instead of resolving latency.

Exam trap

AI-103 often tests whether candidates recognize that timeouts in agentic workflows are usually caused by throttling, insufficient observability, or client misconfiguration — not by model parameters like temperature.

289
MCQhard

You are auditing your Azure AI services for cost optimization. You discover an Azure AI Search service that has been over-provisioned with too many search units and replica nodes. How can you right-size the service without losing your existing indexes?

A.Switch the pricing tier from Standard to Free.
B.Export all index definitions, delete the service, and re-import the indexes into a new Basic tier service.
C.Modify the scale settings in the Azure portal to reduce the number of replicas and partitions.
D.Delete the search service and recreate it with fewer replicas and partitions.
AnswerC

Scaling down via the scale blade adjusts resource allocation while preserving index data.

Why this answer

Azure AI Search lets you change scale settings — the number of replicas and partitions — directly in the portal without deleting the service, and existing indexes are preserved. Reducing replicas lowers query throughput capacity while reducing partitions lowers storage and indexing capacity, so you can right-size to match actual load. This is the non-destructive way to optimize cost.

Exam trap

AI-103 often tests whether candidates know that scaling is non-destructive — the trap is choosing delete-and-recreate options (B or D) or an unsupported tier downgrade (A) when the portal scale settings (C) achieve the goal without data loss.

How to eliminate wrong answers

Option A is wrong because you cannot switch a Standard tier search service to Free — tier changes to Free are not supported, and Free has hard limits (1 replica, 1 partition, 50 MB) that would not accommodate existing indexes. Option B is wrong because exporting, deleting, and re-importing into a Basic tier is destructive and unnecessary; Basic also has a 2 GB per-partition limit that may not fit existing data. Option D is wrong because deleting and recreating the service destroys all indexes and requires rebuilding them, which is exactly what the question says to avoid.

290
Multi-Selecthard

You are designing an advanced agentic solution in Azure AI Foundry that requires tool integration and state management. Which TWO practices should you implement to ensure robust agent reliability and security? (Choose two)

Select 2 answers
A.Implement human-in-the-loop confirmation steps before the agent executes high-impact or destructive transactional tool calls.
B.Validate and sanitize all parameters generated by the model before passing them into downstream enterprise tool APIs.
C.Disable all logging and telemetry to minimize latency during agent execution loops.
D.Grant the agent unrestricted administrative permissions to all corporate databases to maximize autonomous problem-solving.
E.Rely solely on the model's internal memory to maintain multi-session conversation state without external persistence.
AnswersA, B

Human-in-the-loop confirmation inserts a review gate before destructive or high-impact tool calls execute. This satisfies the security and reliability requirement by preventing an agent from autonomously performing irreversible transactions, letting a human verify intent and parameters first.

Why this answer

Option A is correct because human-in-the-loop confirmation is a key safety pattern in agentic systems: before the agent invokes high-impact or destructive transactional tool calls (e.g., deleting records, issuing payments, modifying production resources), a human approval gate prevents irreversible or costly actions caused by model hallucination or prompt injection. Option B is correct because model-generated parameters are untrusted input; validating and sanitizing them (type checks, allowlists, schema validation, escaping) before passing them to downstream enterprise tool APIs prevents injection attacks, malformed requests, and unintended data exposure. Option C is wrong because disabling logging and telemetry removes the observability needed to detect failures, audit tool calls, and debug agent loops, and it does not meaningfully improve reliability or security.

Option D is wrong because granting unrestricted administrative permissions violates least privilege and dramatically increases blast radius if the agent is compromised or misbehaves. Option E is wrong because relying solely on the model's internal memory provides no durable, auditable multi-session state, leading to context loss, inconsistency, and inability to recover or trace conversations.

Exam trap

AI-103 often tests the misconception that giving an agent broad permissions and disabling logging improves autonomy, when in fact least privilege, observability, and human approval are the correct reliability and security practices.

291
MCQmedium

You are deploying a custom text classification model using Azure AI Language. You need to implement cost management controls and track exact expenditures by tagging the Azure AI resource with the internal project cost center 'CC-409'. Where should you configure these tags in the Azure Portal?

A.Within the Networking blade under Private endpoint connections
B.Under the Resource management > Tags section of the Azure AI Services resource blade
C.In the Access control (IAM) settings as a custom role assignment
D.In the Diagnostic settings by creating a new metric alert rule
AnswerB

Tags applied at the Azure AI Services resource blade propagate to the underlying resource for cost reporting. Configuring them under Resource management > Tags attaches the CC-409 cost centre directly to the billable resource, enabling expenditure tracking in Cost Management.

Why this answer

Tags in Azure are configured under the Resource management > Tags section of the Azure AI Services resource blade. This allows you to assign metadata such as cost center 'CC-409' to the resource, which is then used for cost tracking and management. Tags are key-value pairs that can be applied to resources, resource groups, and subscriptions for organizational and billing purposes.

Exam trap

AI-103 often tests the confusion between resource tagging and other management features like IAM or diagnostic settings, where candidates might incorrectly choose IAM for cost tracking instead of the Tags section.

How to eliminate wrong answers

Option A is wrong because the Networking blade under Private endpoint connections is for configuring private endpoints and network isolation, not for tagging resources. Option C is wrong because Access control (IAM) settings manage role assignments and permissions, not resource metadata or cost tracking. Option D is wrong because Diagnostic settings are used to configure logging and metrics export, not for tagging or cost allocation.

292
MCQeasy

Your organization requires that all data sent to Azure OpenAI Service remains encrypted using a key that your security team fully controls and rotates. Which feature should you configure during resource creation?

A.Azure Information Protection client-side encryption
B.Customer-managed keys (CMK) with Azure Key Vault
C.Service-managed keys (Default encryption)
D.Transparent Data Encryption with a SQL Managed Instance
AnswerB

Customer-managed keys with Azure Key Vault satisfy the requirement for full key control and rotation, since your security team owns the key material rather than Microsoft. Data at rest in Azure OpenAI Service is encrypted with your Key Vault key, and rotating that key re-wraps the data encryption key without redeployment.

Why this answer

Customer-managed keys (CMK) with Azure Key Vault allow an organization to supply and control the encryption keys used to protect data at rest in Azure OpenAI Service. This satisfies the requirement for full key control and rotation by the security team, as opposed to Microsoft-managed keys.

Exam trap

The trap is confusing client-side encryption tools (Azure Information Protection) or database-specific encryption (TDE) with the platform-level CMK feature that governs Azure OpenAI data-at-rest encryption.

How to eliminate wrong answers

Option A is wrong because Azure Information Protection is a client-side data classification and encryption tool for documents, not a mechanism for encrypting Azure OpenAI service data at rest. Option C is wrong because service-managed (default) keys are controlled by Microsoft, not the customer, so they fail the 'fully controls and rotates' requirement. Option D is wrong because Transparent Data Encryption applies to Azure SQL Database, not Azure OpenAI Service.

293
MCQhard

You notice your Azure AI agent is producing offensive content. You need to configure a guardrail that intercepts the model output before it is sent to the user. Which service should you integrate?

A.Azure AI Search Filters
B.Prompt Template Validation
C.Azure Monitor
D.Azure AI Content Safety
AnswerD

Azure AI Content Safety provides output moderation that evaluates model-generated text and blocks harmful categories before delivery to the user. Integrating it as a post-processing guardrail on the agent's response pipeline directly intercepts offensive output, satisfying the requirement to filter content after generation.

Why this answer

Azure AI Content Safety is the dedicated Azure service that provides guardrails for harmful content, including hate, violence, sexual, and self-harm categories, and can be applied to both prompts and completions. Integrating it on the output path lets you intercept and block offensive model responses before they reach the user. This is the purpose-built service for content moderation in Azure AI workloads.

Exam trap

AI-103 often tests the confusion between observability tools (Azure Monitor) and enforcement tools (Azure AI Content Safety) — monitoring can detect offensive content but only Content Safety can block it in the response path.

How to eliminate wrong answers

Option A is wrong because Azure AI Search Filters control which documents are retrieved from an index based on metadata or semantic criteria; they do not evaluate or block offensive model output. Option B is wrong because Prompt Template Validation checks the structure and safety of prompt templates at design time, not the runtime model output sent to users. Option C is wrong because Azure Monitor is an observability platform for metrics, logs, and alerts; it can detect that offensive content occurred but cannot intercept and block it in the request path.

294
MCQmedium

You are designing a customer feedback processing system. You need to extract key phrases from customer reviews and store them in an Azure Cosmos DB database. When you inspect the JSON response from the key phrase API, what data structure is returned for the key phrases?

A.A single concatenated string with semicolons separating each phrase.
B.An array of strings representing the key phrases found in the document.
C.A nested dictionary mapping phrase weights to sentiment scores.
D.An array of objects containing 'text', 'category', and 'confidenceScore' properties.
AnswerB

The key phrase extraction API returns a keyPhrases property containing a JSON array of strings, each string being one extracted phrase from the review text. This array structure lets you iterate the phrases and persist them individually into Azure Cosmos DB.

Why this answer

The Azure AI Language key phrase extraction API returns a 'keyPhrases' field containing a JSON array of strings, where each string is a key phrase identified in the input document. This flat array structure makes it straightforward to iterate and persist phrases into Cosmos DB. It does not return weights, categories, or confidence scores for key phrases.

Exam trap

AI-103 often tests whether candidates can distinguish the response schemas of key phrase extraction (array of strings) from entity recognition (array of objects with text, category, confidenceScore).

How to eliminate wrong answers

Option A is wrong because the API does not concatenate phrases into a single semicolon-delimited string — it returns structured JSON with a discrete array, which is essential for programmatic storage. Option C is wrong because key phrase extraction does not return phrase weights mapped to sentiment scores; sentiment is a separate API (sentiment analysis) with its own response schema. Option D is wrong because the array-of-objects with 'text', 'category', and 'confidenceScore' describes entity recognition (NER) output, not key phrase extraction — confusing the two APIs is a common error.

295
MCQmedium

You are analyzing product reviews using Azure AI Language. You receive sentiment analysis output where a sentence has a positive confidence score of 0.85, a neutral score of 0.10, and a negative score of 0.05. What is the sentiment label assigned to this sentence?

A.neutral
B.positive
C.mixed
D.negative
AnswerB

Positive is assigned because Azure AI Language returns the label with the highest confidence score across the three classes. With positive at 0.85 exceeding neutral (0.10) and negative (0.05), the argmax selects positive, satisfying the stem's requirement to identify the sentence's sentiment label from the supplied scores.

Why this answer

Azure AI Language sentiment analysis assigns the label corresponding to the highest confidence score among positive, neutral, and negative. Here positive is 0.85, which is the maximum, so the sentence is labeled positive. The scores are a probability distribution that sums to approximately 1.0.

Exam trap

AI-103 often tests the misconception that 'mixed' is a per-sentence label — mixed is only a document-level label when positive and negative sentences coexist.

How to eliminate wrong answers

Option A is wrong because neutral has a score of only 0.10, far below the positive score of 0.85. Option C is wrong because 'mixed' is a document-level sentiment label used when a document contains both positive and negative sentences — it is not assigned per sentence based on these three scores. Option D is wrong because negative has the lowest score at 0.05.

296
MCQmedium

You are using Azure AI Foundry to deploy an agent. You want to ensure that the agent only uses approved data sources. Which feature should you configure?

A.Prompt engineering for 'Do not use external info'.
B.Grounding data configuration in the Agent settings.
C.Model temperature control.
D.Content Safety policy filters.
AnswerB

Grounding data configuration binds the agent to specified indexes and connections, restricting retrieval to approved sources. It directly satisfies the constraint that the agent must only use approved data sources, preventing unvetted content from entering the prompt context.

Why this answer

Grounding data configuration in the Agent settings is where you specify the approved data sources (e.g., Azure AI Search indexes, uploaded files, or connected knowledge bases) that the agent can use. By configuring only approved sources, you restrict the agent's knowledge to vetted content, ensuring it does not pull from unapproved external information. This is the correct control for data source governance in Azure AI Foundry agents.

Exam trap

AI-103 often tests the difference between soft controls (prompt instructions) and hard controls (configuration); the trap is choosing a prompt-based instruction when the requirement is to technically restrict data sources, which only grounding configuration can enforce.

How to eliminate wrong answers

Option A is wrong because prompt engineering instructions like 'Do not use external info' are not enforceable; the model may still use parametric knowledge or ignore instructions, and it does not technically restrict data sources. Option C is wrong because model temperature controls randomness/creativity, not which data sources are accessed. Option D is wrong because Content Safety policy filters moderate harmful content categories and do not govern the provenance or approval of grounding data.

297
MCQhard

You are analyzing performance metrics of a Custom Vision object detection iteration. You observe a Mean Average Precision (mAP) of 88%, but when testing with real-world user photos, the model fails to detect objects that are partially occluded. What should you do to improve occlusion handling?

A.Switch from General domain to Food domain.
B.Lower the confidence threshold to 0.01.
C.Add training images containing partially occluded objects and ensure they are correctly tagged.
D.Increase image compression artifacts.
AnswerC

Occlusion is a training-data coverage problem, not a threshold or metric issue. Adding correctly tagged images of partially occluded objects teaches the detector those visual patterns, directly addressing the stem's real-world failure despite the 88% mAP.

Why this answer

Occlusion handling is a data problem: if the training set lacks examples of partially occluded objects, the model never learns to recognize them. Adding training images that contain partially occluded instances of the target class and tagging them with accurate bounding boxes teaches the model to detect objects even when parts are hidden, improving real-world performance.

Exam trap

AI-103 often tests the misconception that threshold tuning or domain switching can fix detection failures, when the correct fix for occlusion is adding representative occluded training images.

How to eliminate wrong answers

Option A is wrong because switching domains changes the model's feature extractor to a domain-specific one (Food) that is unrelated to occlusion and may not match the actual object class. Option B is wrong because lowering the confidence threshold to 0.01 will produce many more detections, including false positives, and does not improve the model's ability to recognize occluded objects. Option D is wrong because increasing compression artifacts degrades image quality and would harm detection accuracy rather than help occlusion handling.

298
MCQeasy

You are developing an application that needs to automatically extract key-value pairs and tabular data from standardized invoices without any prior labeled training data. Which Azure AI Document Intelligence model should you use?

A.Azure AI Document Intelligence General Document model
B.Azure AI Document Intelligence Custom Extraction model
C.Azure AI Document Intelligence Prebuilt Invoice model
D.Azure AI Vision OCR feature
AnswerC

The prebuilt invoice model is trained by Microsoft on invoice documents, extracting key-value pairs and line-item tables without any custom labelled data. This satisfies the stem's zero-training constraint, unlike custom or composed models that require labelled samples.

Why this answer

The Prebuilt Invoice model is purpose-built for standardized invoice documents and extracts key-value pairs (vendor, invoice date, totals, line items) plus tabular data out of the box, with no labeled training data required. It is one of the Document Intelligence prebuilt models trained on millions of invoice documents, so it handles common invoice layouts immediately. The General Document model extracts text and generic key-value pairs but does not understand invoice-specific fields like InvoiceTotal or DueDate.

Exam trap

AI-103 often tests the distinction between 'no training data required' (prebuilt models) and 'requires labeled samples' (custom models) — candidates who overlook the phrase 'without any prior labeled training data' may wrongly select Custom Extraction.

How to eliminate wrong answers

Option A is wrong because the General Document model only extracts generic text, layout, and untyped key-value pairs — it has no invoice-specific schema, so you would not get fields like VendorName or InvoiceTotal reliably. Option B is wrong because a Custom Extraction model requires you to label at least five sample documents and train the model, which contradicts the 'no prior labeled training data' requirement. Option D is wrong because Azure AI Vision OCR only returns raw text and bounding boxes; it does not understand invoice structure, key-value relationships, or tables.

299
Multi-Selectmedium

You are deploying an Azure AI Language resource to support a text analysis application that must extract key phrases and detect sentiment across documents in several languages. Your security team requires that the application authenticate without storing account keys in code, and that the resource expose a single endpoint that serves both capabilities. Which two actions should you take? (Choose two.)

Select 2 answers
A.Provision a single Azure AI Language resource and call both capabilities through its one analyze-text endpoint.
B.Assign the application's managed identity the Cognitive Services User role scoped to the Azure AI Language resource.
C.Create a separate Azure AI Language resource for key phrase extraction and another for sentiment analysis, then combine results in the application.
D.Enable a private endpoint on the resource and disable public network access for all traffic.
E.Store the resource's primary key in Azure Key Vault and have the application retrieve it at startup.
AnswersA, B

A single Azure AI Language resource exposes one endpoint and key, and the analyze-text operation accepts a tasks structure so key phrase extraction and sentiment analysis can be requested from the same resource. This meets the requirement for a unified endpoint serving both capabilities without deploying separate resources.

Why this answer

A single Azure AI Language resource provides one endpoint for both key phrase extraction and sentiment analysis through the analyze-text operation, and Microsoft Entra ID authentication with a managed identity holding the Cognitive Services User role lets the app call it without embedding account keys, meeting both the unified-endpoint and no-secrets requirements.

Exam trap

The trap here is treating network isolation or Key Vault storage as satisfying a no-keys-in-code requirement, when only identity-based authentication removes the secret entirely.

300
Multi-Selectmedium

Which TWO of the following are valid methods to improve the quality of retrieved data in a RAG system?

Select 2 answers
A.Reducing the number of vector dimensions
B.Implementing a hybrid search strategy
C.Optimizing document chunking strategies
D.Changing the chat history session length
E.Increasing the number of tokens in the prompt
AnswersB, C

Hybrid search combines keyword and vector retrieval, so exact terms and semantic similarity both contribute to ranking. This satisfies the stem's retrieval-quality constraint by surfacing relevant chunks that pure vector search misses when precise terminology matters.

Why this answer

Option B is correct because a hybrid search strategy combines dense vector similarity with sparse keyword retrieval (e.g., BM25), which improves recall and precision by matching both semantic meaning and exact terms, directly enhancing the quality of retrieved documents in a RAG pipeline. Option C is correct because optimizing document chunking strategies—such as choosing appropriate chunk sizes and overlaps or semantic chunking—ensures that retrieved passages are coherent and contextually complete, which raises the relevance and usefulness of the context passed to the LLM. Option A is not correct because reducing vector dimensions typically trades off retrieval accuracy for storage and speed, degrading rather than improving retrieval quality.

Option D is not correct because chat history session length affects conversational context, not the retrieval mechanism or the quality of retrieved documents. Option E is not correct because increasing prompt tokens only changes how much context is fed to the model and does not improve the retrieval step itself.

Exam trap

AI-103 often tests the confusion between retrieval-side improvements (hybrid search, chunking) and generation-side or session-side settings (prompt length, chat history), which do not change retrieved data quality.

Page 3

Page 4 of 7

Page 5

All pages