Plan And Manage AN Azure AI Solution

You need to ensure that an Azure AI services resource is accessible only from a specific virtual network. Which configuration should you update in the Azure portal?

Your organization is preparing for an annual external security audit. The auditor requests proof that all Azure AI resources comply with ISO 27001 standards. Where can you download the official compliance audit reports for Azure AI services?

Your development team needs to test a new Azure AI Language service feature without incurring ongoing charges when the service is idle. Which billing model is appropriate for initial prototyping?

Your organization is planning to deploy multiple Azure AI services and needs to implement robust cost management and governance practices. Which TWO actions should you take? (Choose two.)

You need to ensure that an AI model deployment is resilient to regional outages. What should you implement?

You are deploying an Azure OpenAI resource and want to authenticate client applications using Microsoft Entra ID instead of static API keys. Which role must be assigned to the application's managed identity to permit it to invoke model deployments?

You are deploying a model that requires significant GPU resources. You want to ensure the deployment only scales when the average CPU load exceeds 70%. Which feature of Azure AI managed endpoints do you configure?

You are setting up budget alerts for your Azure AI services to prevent unexpected overspending. Which Azure tool should you use to create these alerts and automatically trigger an action group when the budget threshold reaches 90%?

Your organization is establishing a governance framework for Azure AI resources. You need to ensure cost control, tagging compliance, and security posture management across all subscriptions. Which THREE Azure services or features should you deploy? Each correct answer presents part of the solution.

Your company requires that all Azure AI service endpoints are accessible only from within a specific Azure Virtual Network (VNet) and that public internet access is completely disabled. How should you configure the Azure AI resource networking settings?

Your development team needs to deploy an Azure AI Search service and connect it to an Azure SQL Database containing source documents. Security requirements state that credentials must not be stored in application code. Which authentication method should you use between Azure AI Search and Azure SQL Database?

When configuring role-based access control (RBAC) for an Azure AI Services account, which TWO built-in roles are appropriate for assigning to users who only need to invoke AI models without managing the underlying resource infrastructure? Each correct answer presents part of the solution.

You need to export logs from your Azure AI service to an external SIEM (Security Information and Event Management) system. What is the best way to achieve this?

Which TWO monitoring strategies are effective for detecting 'data drift' in a deployed AI model?

You are designing a high-throughput, low-latency architecture for an Azure OpenAI application. Clients are distributed globally across North America, Europe, and Asia. To ensure minimal latency and high availability, you decide to deploy multiple Azure OpenAI instances in different regions. How should you route incoming client requests to the nearest optimal region?

When planning the deployment of an Azure AI Search service, which TWO sizing and capacity parameters must you configure during creation? Each correct answer presents part of the solution.

You are deploying an Azure AI Document Intelligence resource. You need to ensure that only client requests coming from your corporate public IP address range can access the endpoint. Which networking configuration should you apply?

You are migrating an Azure AI service from one region to another. What is the most efficient way to migrate the configuration?

You need to view the latency of requests made to an Azure AI services endpoint. Where do you find this information?

Which THREE options are available for configuring network security in Azure?

Which THREE security principles should you follow when managing Azure AI resources?

You are managing an enterprise Azure OpenAI resource that experiences bursty traffic patterns. To optimize cost without sacrificing availability during sudden workload spikes, you decide to implement a caching layer for frequent prompts and responses. Which Azure service should you integrate in front of Azure OpenAI?

You are deploying an Azure AI multi-service account in the West US region. The finance department requires that all resource deployment costs be tracked by department code using Azure Resource Manager tags. Which Azure feature should you use to enforce the mandatory application of the department tag across all future Azure AI resource deployments?

You are setting up diagnostic logging for an Azure OpenAI resource. Your security team mandates that all log streams must be exported in real-time to a security information and event management (SIEM) platform outside Azure, such as Splunk. Which destination should you configure in the Azure Monitor diagnostic setting?

Your enterprise architecture team is reviewing the security posture of an Azure AI deployment that handles sensitive financial documents. Which TWO actions should you implement to secure data in transit and at rest? (Choose two.)

You are managing an Azure OpenAI model deployment in an active-passive multi-region disaster recovery architecture. A regional outage occurs, and you failover traffic to the secondary region. However, clients report receiving authentication errors. What is the most likely cause?

Which authentication method is recommended to prevent 'key leakage' in Azure AI Services?

Your development team has created a custom model using Azure Machine Learning. You need to deploy this model as a real-time web service endpoint with auto-scaling capabilities. Which deployment target should you select?

You are deploying a custom AI model using a container image stored in Azure Container Registry (ACR). How do you ensure the deployment can pull the image securely?

You are configuring rate limiting and request throttling for multiple client applications consuming an Azure OpenAI endpoint. Different clients have different tier agreements (Bronze, Silver, Gold). Where should you implement these tiered rate-limiting policies?

You are deploying an Azure AI Speech resource using an ARM template. Which parameter defines the name of the resource instance?

Your development team requires secure, passwordless authentication from an Azure Function to an Azure AI Vision resource. Which authentication mechanism should you implement to adhere to security best practices?

What is the purpose of 'Azure Advisor' in an AI solution?

Which Azure feature allows you to control which users can modify or delete your Azure AI resources?

You are provisioning an Azure AI services account and need to select the kind of resource. Which kind parameter value should you select for an Azure OpenAI deployment?

Your organization has deployed an Azure AI Custom Vision model. You need to automate the retraining pipeline whenever new training images are uploaded to an Azure Blob Storage container. Which Azure service should you use to trigger the retraining pipeline?

You are planning to deploy an Azure AI solution that includes multiple Azure Cognitive Services resources. You need to ensure that the resources can be managed together and that costs are consolidated. What should you use?

You are deploying a custom text classification model using Azure AI Language. The model undergoes frequent retraining as new business data arrives. You need to establish a model versioning strategy that allows zero-downtime client updates while ensuring seamless rollback capability if regression occurs. What is the recommended architectural approach?

You are implementing a multi-region disaster recovery strategy for an Azure OpenAI deployment. If the primary region goes down, how should you configure traffic redirection to the secondary region using Azure Front Door?

You are planning to deploy an Azure AI solution that requires a dedicated endpoint for a custom model. You need to choose a deployment option that provides a static endpoint and supports autoscaling. What should you use?

You are planning the disaster recovery strategy for an Azure AI Translator resource. In the event of a regional outage in East US, you want to ensure minimal downtime and continuity of service. Which deployment model should you select?

Which THREE features are critical for managing the lifecycle of an AI model in a production environment?

You are optimizing the cost of your Azure AI infrastructure. You notice several resources are underutilized or incorrectly provisioned. Which THREE actions should you take to reduce unnecessary spending? Each correct answer presents part of the solution.

You are managing an enterprise Azure AI Search deployment. During an audit, you notice that index data is encrypted at rest using Microsoft-managed keys. Management mandates that you switch to customer-managed keys (CMK) stored in Azure Key Vault immediately without losing index data or rebuilding the service. How should you implement this?

You are setting up cost alerts for your Azure subscription, which contains several Azure AI services resources. You want to receive an email notification when your month-to-date spending reaches 80% of your $5,000 budget. Which feature should you configure?

You are managing costs for a multi-tenant Azure AI project. You need to attribute usage costs specifically to the 'Research' department. What is the most effective approach?

Your enterprise organization provisions multiple Azure AI Services accounts across different subscriptions. Security mandates that all API keys must be automatically rotated every 30 days without human intervention. Which Azure service configuration should you implement?

Your organization has strict compliance policies requiring all Azure AI Services endpoints to reject connections that do not use Transport Layer Security (TLS) version 1.3. Where can you enforce this minimum TLS version setting?

You are deploying an Azure AI service resource in the Azure portal. Which option specifies the geographic location where your data will be processed and stored?

Which THREE of the following are common Azure cost management tools that you should use to manage your AI solution budget?

Which TWO techniques are effective for improving the performance of an Azure AI application?

You are developing a Python application that uses the Azure OpenAI SDK. You need to programmatically retrieve the endpoint and key for your Azure OpenAI resource so the application can authenticate. The application must not store secrets in code. What should you use?

You are creating an Azure AI Services resource using Azure CLI. Which command parameter specifies the pricing tier of the resource?

Your company is provisioning a new Azure AI Services multi-service resource. The security team mandates that all network traffic between the client applications and the Azure AI endpoint must remain entirely within the Microsoft backbone network without traversing the public internet. Which feature should you configure?

You are managing cost allocation for multiple Azure AI services across different departments. Which TWO Azure tools or features can help you analyze and attribute these costs accurately? Each correct answer presents part of the solution.

You are troubleshooting a scenario where client applications are unable to connect to an Azure AI Language resource secured by a Private Endpoint. Which TWO troubleshooting steps should you perform? Each correct answer presents part of the solution.

You are reviewing the Azure Cost Management dashboard to analyze spending on Azure AI services. Which grouping option allows you to see costs broken down by specific resource names?

You are troubleshooting a performance issue where requests to an Azure OpenAI model deployment experience intermittent HTTP 429 errors. You examine Azure Monitor metrics and see that the 'Processed Tokens' metric is well below your provisioned limit, but the 'Requests' metric spikes. What is the root cause of the error?

Your company uses Azure Policy to enforce governance across all subscriptions. A developer attempts to deploy an Azure OpenAI resource in a region that is prohibited by corporate policy. What happens during the deployment?

Your company's compliance mandate requires that all data processed by Azure AI Speech and Document Intelligence services remain encrypted using keys managed entirely by your organization. Which THREE configuration steps are required? Each correct answer presents part of the solution.

Which TWO strategies are recommended for handling high-volume traffic to an Azure AI endpoint?

You are designing a disaster recovery and high availability strategy for an enterprise Azure OpenAI deployment. Which THREE architectural components or practices should you include? Each correct answer presents part of the solution.

You need to implement token-based authentication using Azure AD (Microsoft Entra ID) for a Python application consuming an Azure OpenAI resource. Which authorization header format must your application use to authenticate successfully?

You are provisioning a multi-service Azure AI resource using an Azure Resource Manager (ARM) template. Which resource type should you specify in the template for a generic multi-service cognitive services account?

What is the purpose of a 'Resource Group' in the context of Azure AI solutions?

You are provisioning an Azure AI Language resource and want to ensure that all telemetry and activity logs are retained for compliance auditing over a 365-day period. Where should you configure this retention policy?

You are troubleshooting a deployment failure where an ARM template fails to provision an Azure OpenAI account. Which TWO potential causes should you investigate? Each correct answer presents part of the solution.

You are conducting a security review of an Azure AI Search service and Azure OpenAI integration. You discover potential security misconfigurations. Which THREE remediation actions should you take to align with Azure security benchmarks? Each correct answer presents part of the solution.

Your development team wants to deploy a new version of an Azure OpenAI model while ensuring zero downtime for client applications currently calling the existing model deployment. What is the recommended deployment strategy?

Which TWO actions should you take to ensure that your Azure AI deployment is secure?

Your company's security policy requires that all Azure AI Services accounts disable public network access completely. However, internal applications hosted inside a specific Azure Virtual Network must still communicate with the AI services. How should you configure network access?

You are provisioning a new Azure AI Vision resource in the Azure Portal. You need to choose between a 'F0' free pricing tier and an 'S0' standard pricing tier. What is a key limitation of selecting the F0 pricing tier?

You are preparing an ARM template to deploy an Azure AI multi-service account. Which TWO properties are mandatory within the ARM template resource definition? Each correct answer presents part of the solution.

You are designing a high-availability architecture for an Azure AI Speech service solution. Which THREE practices should you incorporate into your design? (Choose three.)

You are designing a multi-tenant SaaS application on Azure. Each tenant requires isolation of their Azure OpenAI token usage and cost tracking. What is the recommended provisioning strategy to achieve strict cost and quota isolation per tenant?

Your organization has multiple Azure AI services deployed across different resource groups. Your security officer requests a centralized dashboard to monitor security recommendations, vulnerability assessments, and compliance posture for all AI resources. Which Azure service should you open?

You are designing a deployment strategy for an Azure AI Custom Vision project in an enterprise pipeline. Which THREE practices should you follow to ensure secure and repeatable deployments? Each correct answer presents part of the solution.

You are auditing your Azure AI services for cost optimization. You discover an Azure AI Search service that has been over-provisioned with too many search units and replica nodes. How can you right-size the service without losing your existing indexes?

You are deploying a custom text classification model using Azure AI Language. You need to implement cost management controls and track exact expenditures by tagging the Azure AI resource with the internal project cost center 'CC-409'. Where should you configure these tags in the Azure Portal?

Your organization requires that all data sent to Azure OpenAI Service remains encrypted using a key that your security team fully controls and rotates. Which feature should you configure during resource creation?

You are configuring diagnostic settings for an Azure AI Search service to audit administrative actions and query logs. Which destination should you choose if you want to stream these logs into a SIEM tool like Microsoft Sentinel for real-time security analysis?

You have an Azure AI application that is hitting rate limits (429 errors). You need to determine which specific client application is causing the issue. How do you identify this?

You are configuring network isolation and security for an Azure AI Search service that connects to an Azure SQL Database backend. Which THREE features can you utilize to secure this data flow? (Choose three.)

You are managing an Azure AI Search service with multiple replicas and partitions. During peak query hours, latency increases significantly, and CPU utilization on the search service hits 95%. You need to scale the service to improve query throughput without altering the index data schema. Which scaling action should you take?

You are deploying an Azure AI Speech container on an Azure Kubernetes Service (AKS) cluster. Your security policy dictates that pod-to-pod communication within the cluster must be encrypted in transit using mTLS, and egress traffic to Azure must flow through a strict outbound firewall. Which Kubernetes feature should you implement?

You are provisioning an Azure AI services account and want to view your current API key. Where can you retrieve the API key in the Azure portal?

You are planning the security architecture for an enterprise Azure AI multi-service account. Management requires that access to the resource be strictly controlled and audited. Which TWO security features or configurations should you implement? Each correct answer presents part of the solution.

Your organization is deploying an Azure OpenAI resource. Your security policy requires that all network traffic destined for the OpenAI service must traverse a secure hub-and-spoke virtual network topology and pass through an Azure Firewall instance. How should you route outbound traffic from your application subnet to Azure OpenAI?

Which command line tool is primarily used for managing Azure resources, including AI services, from a terminal?

When planning the model selection and versioning lifecycle for Azure OpenAI deployments in an enterprise environment, which TWO practices should you follow? (Choose two.)

You need to secure communications between an Azure App Service hosting your web app and an Azure AI Computer Vision service. The web app must authenticate to Computer Vision without storing API keys in application settings. Which feature should you enable?

You are deploying an Azure OpenAI GPT-4 model in a region experiencing high demand, and you need to guarantee a dedicated throughput level without contending with other tenants. Which deployment type should you select?

Your development team needs to deploy an Azure AI Language resource that can be accessed from an on-premises datacenter via an ExpressRoute circuit without traversing the public internet. Which Azure feature should you configure?

Your organization is implementing strict network isolation for Azure OpenAI. Direct internet access from worker nodes is prohibited. Which THREE mechanisms must be correctly configured to allow secure communication? Each correct answer presents part of the solution.

When establishing a governance strategy for Azure AI resources across multiple cloud teams, which THREE administrative tasks should an administrator perform? (Choose three.)

Your team needs to receive an email alert if the error rate for your AI endpoint exceeds 5% for more than 15 minutes. What should you create?

Your company wants to track and allocate Azure AI service costs by department. Which TWO mechanisms can assist with this requirement? (Choose two.)

You are using an Azure AI model that supports versioning. You want to perform an A/B test by routing 10% of traffic to a new version. Where do you configure this?

You are provisioning an Azure AI services account and want to ensure that all telemetry and monitoring metrics are collected. Which built-in monitoring feature is automatically enabled on Azure AI resources without requiring additional agent installation?

You are designing a secure, production-grade architecture for an Azure AI Search service integrated with Azure OpenAI. Which THREE security and operational best practices should you implement? Each correct answer presents part of the solution.

Your enterprise team is deploying multiple Azure AI Custom Vision resources across different development stages (Dev, Test, Prod). You need to ensure that billing costs for the Dev environment are billed to a specific cost center. Which Azure feature should you use to categorize these costs?

You are monitoring the performance of a deployed Azure OpenAI model. You notice occasional HTTP 429 (Too Many Requests) errors occurring during peak traffic hours. Which monitoring and management action should you take to resolve this issue?

When planning an Azure AI solution deployment strategy, what are THREE key considerations for model versioning and lifecycle management? (Choose three.)

You have an Azure AI endpoint exposed to the internet. You want to ensure traffic is inspected for malicious patterns. What is the recommended service?

When setting up an Azure AI service, you choose the 'Standard' tier. What is the primary benefit of this compared to the 'Free' tier?

Your organization wants to ensure that all Azure AI resources created in any subscription across the tenant adhere to a standardized naming convention (e.g., prefixing with 'ai-'). Which Azure governance tool should you use?

Your security team discovers that an application using Azure AI Services is intermittently failing with authentication errors due to expired client secrets. You need to refactor the application to use Microsoft Entra ID workflows with managed identities. Which authentication library should your application code use to acquire tokens securely without embedding secrets?

You are troubleshooting an intermittent connectivity issue between a client application and an Azure AI Speech service that sits behind an Azure Firewall and a Virtual Network. Which THREE diagnostic steps or tools should you utilize? (Choose three.)

Your organization is running an Azure AI Search service and needs to restrict management operations (such as index creation and deletion) to administrators while allowing standard client applications to perform search queries only. How should you configure access?

Your development team needs to monitor the latency and total call volume of an Azure AI Document Intelligence resource in near real-time. Where can you view these pre-aggregated metrics without writing custom log queries?

You are hardening an Azure OpenAI service deployment for a financial application that handles sensitive customer data. Which THREE security configurations should you apply? (Choose three.)

You need to provision an Azure AI resource that allows developers to access multiple AI capabilities (such as Vision, Speech, and Language) using a single endpoint and a single API key. Which resource type should you create?

You are auditing your Azure subscription and find several unused Azure AI Content Safety resources that are incurring base charges. You want to remove the resources permanently. Which operation should you perform?

You are managing Azure OpenAI deployments and need to monitor token consumption and error rates. Which TWO Azure Monitor features should you use to analyze this telemetry? Each correct answer presents part of the solution.

You are designing an automated deployment pipeline for Azure AI Search using GitHub Actions. The pipeline must authenticate to Azure securely without storing credentials or long-lived secrets in GitHub repository settings. Which authentication mechanism should you implement?

You are provisioning a new Azure AI Search service. You need to choose a pricing tier that supports semantic search capabilities. Which minimum tier should you select?

You are managing an Azure AI Custom Vision project and need to automate model training and evaluation updates as new training images are tagged. Which REST API or SDK component should you use to initiate the training iteration process?

Your development team needs to deploy an Azure OpenAI model deployment in an enterprise environment. They require provisioned throughput units (PTUs) to guarantee predictable latency and throughput for a mission-critical chatbot. Where can you purchase and manage PTU allocations?

You are developing an application that uses Azure OpenAI. You need to ensure that the application can authenticate to the Azure OpenAI service without storing credentials in code. What should you use?

You are monitoring the health and operational status of an Azure AI multi-service account. Which TWO built-in metrics can you track in Azure Monitor to evaluate performance and reliability? (Choose two.)