CCNA Plan And Manage AN Azure AI Solution Questions — Page 1 of 2

MCQeasy

You need to ensure that an Azure AI services resource is accessible only from a specific virtual network. Which configuration should you update in the Azure portal?

A.The Networking blade to configure Private endpoints.

B.The Resource tags to add a network security group.

C.The Authentication blade to disable local keys.

D.The Identity blade to assign a User Assigned Managed Identity.

AnswerA

Private endpoints assign a private IP from your virtual network to the Azure AI services resource, removing public internet exposure. Configuring them on the Networking blade restricts inbound access to that specific VNet, satisfying the isolation requirement.

Why this answer

To restrict an Azure AI services (Cognitive Services) resource so it is reachable only from a specific virtual network, you configure a Private Endpoint on the resource's Networking blade. A Private Endpoint creates a private IP address from your VNet, mapping the service into your network via Azure Private Link, so public internet access can be disabled entirely. This is the standard portal-based approach for VNet-level isolation of Azure AI resources.

Exam trap

AI-103 often tests the misconception that tags, keys, or managed identities provide network isolation — only Private Endpoints (or service firewalls/VNet rules) actually restrict network reachability.

How to eliminate wrong answers

Option B is wrong because Resource tags are metadata labels used for organization, cost tracking, and policy scoping — they cannot attach a network security group or enforce any network restriction. Option C is wrong because disabling local (key-based) authentication only changes the authentication model to Entra ID; it does not restrict which network can reach the resource. Option D is wrong because assigning a User Assigned Managed Identity grants the resource an identity for outbound access to other services — it has no bearing on inbound network isolation.

Practice this question →

MCQmedium

Your organization is preparing for an annual external security audit. The auditor requests proof that all Azure AI resources comply with ISO 27001 standards. Where can you download the official compliance audit reports for Azure AI services?

A.Microsoft Service Trust Portal

B.Microsoft 365 Admin Center security center

C.Visual Studio subscription benefits page

D.Azure OpenAI Studio compliance tab

AnswerA

The Microsoft Service Trust Portal hosts downloadable audit reports, ISO 27001 certificates and compliance documentation for Azure services, including Azure AI. It directly satisfies the auditor's request for official proof of ISO 27001 compliance, unlike marketing pages or the Azure portal itself.

Why this answer

The Microsoft Service Trust Portal is the official Microsoft repository for compliance documentation, including ISO 27001 audit reports, SOC reports, and other regulatory attestations for Azure and Azure AI services. Auditors accept these reports as evidence of compliance because they are produced by independent third-party assessors. Access requires signing in with a Microsoft Entra ID account and accepting the non-disclosure agreement.

Exam trap

AI-103 often tests whether candidates confuse the Service Trust Portal (compliance evidence) with the Microsoft 365 Admin Center or Azure Portal security blades, which show posture and recommendations but do not provide official audit reports.

How to eliminate wrong answers

Option B is wrong because the Microsoft 365 Admin Center security center focuses on Microsoft 365 service health, security scores, and threat intelligence—not downloadable ISO 27001 audit reports for Azure AI. Option C is wrong because the Visual Studio subscription benefits page provides software licenses, Azure credits, and support benefits, not compliance attestations. Option D is wrong because Azure OpenAI Studio is a model development and deployment interface; it has no compliance tab and does not host audit reports.

Practice this question →

MCQeasy

Your development team needs to test a new Azure AI Language service feature without incurring ongoing charges when the service is idle. Which billing model is appropriate for initial prototyping?

A.Pay-as-you-go (Consumption-based metering)

B.Dedicated hardware hosting

C.Reserved Instance 3-year term

D.Commitment tier (Pre-purchased capacity)

AnswerA

Consumption-based metering charges only for transactions and records processed, so idle periods incur no cost. This suits prototyping where usage is sporadic and unpredictable, avoiding the committed spend of provisioned throughput while still allowing full feature testing.

Why this answer

Pay-as-you-go (consumption-based metering) charges only for the transactions and features actually used, with no upfront commitment or idle cost, making it ideal for prototyping a new Azure AI Language feature. It lets the team experiment freely and stop incurring charges when the service is idle. This is the standard billing model for initial development and testing.

Exam trap

AI-103 often tests the misconception that commitment tiers or reserved instances save money in all cases — candidates forget that idle or low-volume prototyping incurs charges under pre-purchased models.

How to eliminate wrong answers

Option B is wrong because dedicated hardware hosting provisions always-on infrastructure with fixed costs regardless of usage, which is the opposite of avoiding idle charges. Option C is wrong because a 3-year Reserved Instance requires a long-term upfront commitment and is designed for steady-state production workloads, not prototyping. Option D is wrong because a commitment tier pre-purchases capacity for a fixed term, incurring charges even when the service is idle.

Practice this question →

Multi-Selectmedium

Your organization is planning to deploy multiple Azure AI services and needs to implement robust cost management and governance practices. Which TWO actions should you take? (Choose two.)

Select 2 answers

A.Implement Azure Policy to enforce mandatory cost-tracking tags on all AI resource deployments.

B.Deploy all development, test, and production AI resources into a single shared resource group to simplify administration.

C.Disable diagnostic logging across all AI resources to reduce Azure storage and log ingestion costs.

D.Organize AI resources into separate resource groups and subscriptions based on business units and environments.

E.Use the Free (F0) pricing tier for all production workloads to eliminate infrastructure costs.

AnswersA, D

Azure Policy enforces tag requirements at deployment, denying or auditing resources lacking cost-tracking tags. This guarantees consistent metadata across all AI services, which is the prerequisite for filtering and attributing costs in Azure Cost Management, satisfying the mandatory governance constraint.

Why this answer

Option A is correct because Azure Policy can enforce tagging requirements (such as cost center, owner, or environment tags) at deployment time, and consistent tags are the foundation for cost tracking, chargeback, and filtering in Azure Cost Management and Billing. Option D is correct because separating AI resources into distinct resource groups and subscriptions by business unit and environment provides clear cost boundaries, enables per-subscription budgets and access control, and prevents dev/test spend from being commingled with production. Option B is not appropriate because consolidating all environments into one resource group removes cost and access separation and makes it hard to attribute spend or apply environment-specific governance.

Option C is not appropriate because disabling diagnostic logging sacrifices auditability, security monitoring, and troubleshooting, and cost reduction should not come at the expense of required telemetry. Option E is not appropriate because the F0 free tier has strict call and transaction limits and no production SLA, so it cannot support production AI workloads.

Exam trap

AI-103 often tests whether candidates recognize that cost governance requires both tagging enforcement and structural separation, and it plants 'reduce cost by disabling logging' and 'use free tier in production' as tempting but harmful distractors.

Practice this question →

MCQmedium

You need to ensure that an AI model deployment is resilient to regional outages. What should you implement?

A.A single large VM.

B.Azure Front Door with regional endpoints.

C.Azure Storage redundancy.

D.Local VNET peering.

AnswerB

Azure Front Door is a global layer-7 load balancer that health-probes and fails over traffic between regional endpoints, so a regional outage routes users to a surviving region. This directly satisfies the resilience requirement, unlike single-region deployment or zone redundancy alone.

Why this answer

Azure Front Door is a global Layer 7 load balancer and CDN that can route traffic across multiple regional AI endpoints, performing health probes and automatic failover if a region becomes unavailable. By fronting regional endpoints with Front Door, the deployment remains reachable even during a regional outage. This is the standard Azure pattern for cross-region resiliency of HTTP-based AI inference services.

Exam trap

AI-103 often tests whether candidates confuse data redundancy (Storage replication) with compute/endpoint resiliency, leading them to pick storage options when the question is about keeping an inference endpoint reachable during a regional outage.

How to eliminate wrong answers

Option A is wrong because a single large VM is a single point of failure — if its region or host fails, the deployment is entirely unavailable, and vertical scaling does not provide regional redundancy. Option C is wrong because Azure Storage redundancy (LRS/ZRS/GRS) protects stored data durability, not the compute endpoint serving AI inference, so it does nothing for regional outage resilience of the model. Option D is wrong because local VNET peering only connects networks within or across regions for private connectivity; it does not provide traffic distribution, health probing, or failover for an endpoint.

Practice this question →

MCQeasy

You are deploying an Azure OpenAI resource and want to authenticate client applications using Microsoft Entra ID instead of static API keys. Which role must be assigned to the application's managed identity to permit it to invoke model deployments?

A.Storage Blob Data Contributor

B.Key Vault Secrets Officer

C.Cognitive Services OpenAI User

D.Contributor

AnswerC

Cognitive Services OpenAI User grants the managed identity data-plane access to invoke model deployments on the Azure OpenAI resource. Assigning it at the resource scope lets the application authenticate via Microsoft Entra ID tokens, removing the need for static API keys.

Why this answer

The Cognitive Services OpenAI User role is the RBAC role specifically scoped to grant data-plane access for invoking Azure OpenAI model deployments (chat completions, embeddings, etc.) without granting management permissions. Assigning it to the application's managed identity lets the app call the inference endpoints using Entra ID tokens instead of API keys. This follows the least-privilege principle for OpenAI resource consumption.

Exam trap

AI-103 often tests the distinction between management-plane roles (Contributor, Owner) and data-plane roles (Cognitive Services OpenAI User), tricking candidates into picking Contributor because it sounds powerful enough to 'do everything.'

How to eliminate wrong answers

Option A is wrong because Storage Blob Data Contributor only grants read/write access to Azure Blob Storage containers and has no relationship to Azure OpenAI inference endpoints. Option B is wrong because Key Vault Secrets Officer manages secrets in Key Vault — it does not authorize calls to model deployments. Option D is wrong because Contributor is a management-plane role that can create and manage resources but does not grant the data-plane action Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action required to invoke models.

Practice this question →

MCQhard

You are deploying a model that requires significant GPU resources. You want to ensure the deployment only scales when the average CPU load exceeds 70%. Which feature of Azure AI managed endpoints do you configure?

A.The 'Load Balancer' settings in the VNET.

B.Azure Front Door health probe settings.

C.The 'Endpoints' deployment configuration 'autoscaling' settings.

D.The 'Compute' instance restart policy.

AnswerC

Autoscaling settings on the deployment let you define a metric-based rule, such as average CPU utilisation exceeding 70%, so Azure AI managed endpoints add or remove instances only when that threshold is breached. This directly satisfies the stem's requirement to scale on CPU load rather than a fixed instance count.

Why this answer

Azure AI managed online endpoints support autoscaling rules configured on the deployment, where you define a metric (such as average CPU utilization) and a threshold (for example, 70%) that triggers scale-out or scale-in. This is configured in the deployment's 'autoscaling' settings under the endpoint configuration, allowing the deployment to add or remove instances based on load.

Exam trap

AI-103 often tests whether candidates confuse network-layer features (load balancers, Front Door, NSGs) with the deployment-level autoscaling configuration that actually controls instance count based on metrics.

How to eliminate wrong answers

Option A is wrong because load balancer settings in a VNET control traffic distribution across backend pools, not the scaling trigger for an Azure AI managed endpoint. Option B is wrong because Azure Front Door health probes determine backend health for global HTTP routing, not autoscale thresholds for a model deployment. Option D is wrong because a compute instance restart policy governs recovery behavior after failures, not the metric-based scaling logic of an endpoint deployment.

Practice this question →

MCQeasy

You are setting up budget alerts for your Azure AI services to prevent unexpected overspending. Which Azure tool should you use to create these alerts and automatically trigger an action group when the budget threshold reaches 90%?

A.Azure Monitor alerts

B.Azure Cost Management + Billing budgets

C.Microsoft Defender for Cloud pricing settings

D.Azure Advisor cost recommendations

AnswerB

Azure Cost Management + Billing budgets track spend against a scope and threshold, and can invoke action groups when usage reaches a set percentage such as 90%. This delivers the automated alerting and triggered response the scenario requires.

Why this answer

Azure Cost Management + Billing budgets are the native mechanism for defining spending thresholds (e.g., 90% of a monthly budget) and attaching action groups that fire when thresholds are crossed. Budgets support scopes like subscriptions, resource groups, and management groups, and can trigger email, Logic App, or Automation Runbook actions via action groups. This directly satisfies the requirement to alert and act at 90% of budget.

Exam trap

AI-103 often tests the confusion between cost governance (Cost Management budgets) and operational monitoring (Azure Monitor alerts) — candidates pick Azure Monitor because 'alerts' sounds right, but budgets are the only native cost-threshold mechanism.

How to eliminate wrong answers

Option A is wrong because Azure Monitor alerts operate on metrics and logs (CPU, latency, custom metrics), not on monetary budget consumption — there is no native 'cost' metric in Azure Monitor for budget thresholds. Option C is wrong because Microsoft Defender for Cloud pricing settings configure which resources are protected and at what tier, not spending alerts. Option D is wrong because Azure Advisor cost recommendations are advisory suggestions (e.g., resize underutilized VMs) and do not create threshold-based alerts or trigger action groups.

Practice this question →

Multi-Selecthard

Your organization is establishing a governance framework for Azure AI resources. You need to ensure cost control, tagging compliance, and security posture management across all subscriptions. Which THREE Azure services or features should you deploy? Each correct answer presents part of the solution.

Select 3 answers

A.Microsoft Defender for Cloud for security posture and compliance assessments

B.Azure Bastion for database query optimization

C.Azure Policy for automated tag enforcement and region restriction

D.Azure Cost Management budgets with alerts for spending thresholds

E.Azure Traffic Manager for database scaling

AnswersA, C, D

Microsoft Defender for Cloud continuously assesses resources against security benchmarks and regulatory standards, surfacing misconfigurations and recommendations. This satisfies the stem's security posture management requirement across all subscriptions, providing the compliance assessment layer the governance framework needs.

Why this answer

Azure Cost Management budgets with alerts (D) directly address cost control by letting you set spending thresholds per subscription and trigger notifications when actual or forecasted costs exceed them. Azure Policy (C) enforces tagging compliance and region restrictions by evaluating resource properties against built-in or custom policy definitions and applying deny, audit, or modify effects automatically. Microsoft Defender for Cloud (A) provides the security posture management piece through continuous secure score assessments, regulatory compliance dashboards, and recommendations across all subscriptions.

Azure Bastion (B) is a managed jump-host service for secure RDP/SSH access to VMs, not a database query optimization tool, so it does not fit. Azure Traffic Manager (E) is a DNS-based global traffic load balancer for distributing user traffic across endpoints, not a database scaling mechanism, so it is also irrelevant here.

Exam trap

AI-103 often tests whether candidates can distinguish genuine governance pillars (policy, cost, security posture) from unrelated Azure networking or access services that sound plausible but serve entirely different purposes.

Practice this question →

MCQmedium

Your company requires that all Azure AI service endpoints are accessible only from within a specific Azure Virtual Network (VNet) and that public internet access is completely disabled. How should you configure the Azure AI resource networking settings?

A.Set the routing preference to Microsoft network routing and enable service endpoints on the default subnet.

B.Disable public network access on the Networking blade and create a Private Endpoint associated with your VNet and subnet.

C.Configure the firewall to allow only the corporate public IP address range and keep public network access enabled.

D.Deploy an Azure Application Gateway in front of the Azure AI multi-service account endpoint.

AnswerB

Disabling public network access removes all internet-facing connectivity, while a Private Endpoint assigns a private IP from your VNet subnet, so traffic reaches the Azure AI resource over the Microsoft backbone and satisfies the VNet-only constraint.

Why this answer

Disabling public network access and creating a Private Endpoint associated with the VNet and subnet ensures the Azure AI resource is reachable only through private IP addresses inside the virtual network. This fully removes public internet exposure, which matches the requirement.

Exam trap

AI-103 often tests the difference between service endpoints and private endpoints, so the trap is choosing service endpoints or firewall IP allowlists when the requirement is to completely disable public access.

How to eliminate wrong answers

Option A is wrong because service endpoints still allow traffic over the Azure backbone but do not disable public network access, and routing preference does not restrict exposure. Option C is wrong because allowing a corporate public IP range keeps public network access enabled, violating the requirement. Option D is wrong because an Application Gateway is a public-facing reverse proxy and does not by itself disable public access to the AI endpoint.

Practice this question →

MCQmedium

Your development team needs to deploy an Azure AI Search service and connect it to an Azure SQL Database containing source documents. Security requirements state that credentials must not be stored in application code. Which authentication method should you use between Azure AI Search and Azure SQL Database?

A.Shared Access Signature (SAS) token

B.Hardcoded SQL administrator password in indexer configuration

C.Anonymous access connection string

D.Managed Identity

AnswerD

Managed Identity lets Azure AI Search authenticate to Azure SQL Database through Microsoft Entra ID, issuing tokens from the platform-assigned identity rather than embedding secrets. This directly satisfies the stem's constraint that credentials must not reside in application code, since no password or connection-string secret is stored or rotated by your team.

Why this answer

Managed Identity allows Azure AI Search to authenticate to Azure SQL Database without storing credentials in code. The indexer can use the search service's managed identity to access the SQL database, provided the identity has been granted appropriate permissions in SQL.

Exam trap

AI-103 often tests the misconception that SAS tokens or connection strings with passwords are acceptable for secure authentication, when in fact managed identities are the recommended approach for Azure services to authenticate without secrets.

How to eliminate wrong answers

Option A is wrong because SAS tokens are for Azure Storage, not Azure SQL Database, and they still require managing secrets. Option B is wrong because hardcoding passwords violates security requirements. Option C is wrong because anonymous access is not supported for Azure SQL Database and would be insecure.

Practice this question →

Multi-Selectmedium

When configuring role-based access control (RBAC) for an Azure AI Services account, which TWO built-in roles are appropriate for assigning to users who only need to invoke AI models without managing the underlying resource infrastructure? Each correct answer presents part of the solution.

Select 2 answers

A.Owner

B.Cognitive Services OpenAI User

C.Contributor

D.Cognitive Services User

E.Storage Blob Data Reader

AnswersB, D

Cognitive Services OpenAI User grants inference access to OpenAI models without permitting resource management, satisfying the stem's constraint of invoking models only. It excludes control-plane actions such as creating or deleting the Azure AI Services account.

Why this answer

Option B, Cognitive Services OpenAI User, is correct because it grants the ability to call Azure OpenAI model inference endpoints (such as chat completions and embeddings) without granting permissions to manage the account, keys, or deployments. Option D, Cognitive Services User, is correct because it allows invoking the broader set of Azure AI Services (Cognitive Services) endpoints for inference while excluding resource-management actions. Both roles satisfy the least-privilege requirement of invoking AI models without managing underlying infrastructure.

Option A, Owner, is incorrect because it grants full control including managing resources and assigning roles, far exceeding inference-only needs. Option C, Contributor, is incorrect because it allows creating and managing resources (though not role assignment), which is more than invoking models requires. Option E, Storage Blob Data Reader, is incorrect because it only permits reading blob data and has no relevance to invoking AI model endpoints.

Exam trap

AI-103 often tests the distinction between control-plane roles (Owner, Contributor) and data-plane inference roles (Cognitive Services User, Cognitive Services OpenAI User), tempting candidates to pick Contributor as 'enough' when least privilege demands a data-plane role.

Practice this question →

MCQmedium

You need to export logs from your Azure AI service to an external SIEM (Security Information and Event Management) system. What is the best way to achieve this?

A.Copy the files manually from Blob Storage.

B.Configure a diagnostic setting to stream logs to an Event Hub.

C.Use an Azure Logic App to poll the REST API.

D.Enable public access on the log file store.

AnswerB

Diagnostic settings are the native mechanism for routing Azure AI service logs to external destinations. Streaming to an Event Hub provides a scalable ingestion endpoint that the SIEM consumes, satisfying the requirement without custom polling or storage intermediaries.

Why this answer

Configuring a diagnostic setting to stream logs to an Event Hub is the standard, scalable way to export Azure AI service logs to an external SIEM. Event Hubs acts as a high-throughput ingestion buffer that the SIEM (e.g., Splunk, Sentinel) consumes via its connector. This is the recommended integration pattern for near-real-time security monitoring.

Exam trap

AI-103 often tests the misconception that manual copying or API polling is a valid log-export method — the designed mechanism is diagnostic settings streaming to Event Hub, Log Analytics, or Storage.

How to eliminate wrong answers

Option A is wrong because manually copying files from Blob Storage is not automated, not real-time, and does not scale — it is an operational anti-pattern for SIEM ingestion. Option C is wrong because polling a REST API with a Logic App is inefficient, introduces latency, and is not how Azure diagnostic logs are designed to be exported. Option D is wrong because enabling public access on the log store exposes logs to unauthorized access and is a security risk, not an export mechanism.

Practice this question →

Multi-Selectmedium

Which TWO monitoring strategies are effective for detecting 'data drift' in a deployed AI model?

Select 2 answers

A.Tracking changes in input data distribution.

B.Analyzing model prediction accuracy against ground truth.

C.Checking the physical temperature of the CPU.

D.Monitoring total API request volume.

E.Restarting the endpoint every hour.

AnswersA, B

Tracking changes in input data distribution directly detects covariate shift, the statistical divergence between live inference inputs and the training baseline. Monitoring feature-level distributions, such as population stability index or KL divergence, satisfies the scenario's requirement to surface data drift before prediction quality degrades.

Why this answer

Option A is correct because data drift is fundamentally a shift in the statistical distribution of the model's input features relative to the training data, so tracking changes in input data distribution (e.g., via statistical tests like KL divergence or PSI on feature histograms) directly detects it. Option B is correct because monitoring prediction accuracy against ground truth labels reveals performance degradation that typically results from drift, providing a downstream signal that the input-output relationship has changed. Option C is not relevant since CPU temperature is a hardware health metric and has no bearing on statistical data drift.

Option D does not belong because total API request volume only measures traffic load, not changes in data characteristics or model behavior. Option E is incorrect because periodically restarting the endpoint is an operational action, not a monitoring strategy, and does nothing to detect drift.

Exam trap

AI-103 often tests the distinction between data drift (input distribution change) and operational metrics (latency, volume, CPU), so candidates pick traffic or infrastructure metrics that sound like monitoring but say nothing about drift.

Practice this question →

MCQhard

You are designing a high-throughput, low-latency architecture for an Azure OpenAI application. Clients are distributed globally across North America, Europe, and Asia. To ensure minimal latency and high availability, you decide to deploy multiple Azure OpenAI instances in different regions. How should you route incoming client requests to the nearest optimal region?

A.Azure ExpressRoute global reach

B.Azure Bastion global routing profile

C.Azure Local Traffic Manager (LTM)

D.Azure Front Door with latency-based routing

AnswerD

Azure Front Door performs latency-based routing at the global edge, directing each client to the Azure OpenAI instance with the lowest measured latency across North America, Europe and Asia. This satisfies the minimal-latency and high-availability constraints by combining anycast edge termination with health-probed regional back ends.

Why this answer

Azure Front Door is a global, scalable entry point that uses Microsoft's global edge network to route client requests based on latency. It continuously measures latency to the origin and directs traffic to the lowest-latency healthy backend, which is ideal for globally distributed Azure OpenAI instances. This ensures minimal latency and high availability.

Exam trap

AI-103 often tests the misconception that ExpressRoute or VPN solutions are used for global client routing, when in fact Azure Front Door or Traffic Manager are the correct services for latency-based routing.

How to eliminate wrong answers

Option A is wrong because ExpressRoute Global Reach is for connecting on-premises networks to Azure via private peering, not for routing client requests to the nearest Azure region. Option B is wrong because Azure Bastion is a managed jump server service for secure RDP/SSH access to VMs, not a global traffic router. Option C is wrong because Azure Local Traffic Manager (LTM) is not a real Azure service; it might be confused with F5's LTM, which is not a native Azure global routing solution.

Practice this question →

Multi-Selectmedium

When planning the deployment of an Azure AI Search service, which TWO sizing and capacity parameters must you configure during creation? Each correct answer presents part of the solution.

Select 2 answers

A.Virtual CPU core count per hypervisor

B.Replicas

C.Partitions

D.Linux kernel version

E.Active Directory domain controller IP

AnswersB, C

Replicas are copies of the index that provide query throughput and high availability. Azure AI Search requires replica count at creation because it sets concurrent query capacity and redundancy, satisfying the capacity parameter the stem asks for.

Why this answer

During creation of an Azure AI Search service, you must choose the number of replicas (Option B) and partitions (Option C) as part of the pricing tier and capacity configuration. Replicas determine high availability and query throughput by creating multiple copies of the index that also enable read replicas for query load balancing. Partitions determine storage capacity and write throughput by splitting the index across multiple shards, and together replicas and partitions define the service's scaling units (SUs).

Options A, D, and E are not Azure AI Search creation parameters: virtual CPU core count per hypervisor, Linux kernel version, and Active Directory domain controller IP are infrastructure or OS-level settings that Azure manages and are not exposed when provisioning an Azure AI Search service.

Exam trap

AI-103 often tests the specific parameters required for Azure AI Search creation, and candidates may confuse them with VM or database sizing parameters, leading to incorrect selections.

Practice this question →

MCQeasy

You are deploying an Azure AI Document Intelligence resource. You need to ensure that only client requests coming from your corporate public IP address range can access the endpoint. Which networking configuration should you apply?

A.Configure Azure Bastion access restriction rules.

B.Attach an Azure Application Gateway with a WAF policy.

C.Enable Microsoft Entra conditional access policies on the API keys.

D.Configure firewall virtual networks and IP address ranges in the Azure AI resource networking settings.

AnswerD

Selecting firewall virtual networks and IP address ranges restricts inbound access to specified public IP ranges, satisfying the corporate-range constraint. This network-level control blocks other clients before requests reach the Document Intelligence endpoint, unlike key-based authentication alone.

Why this answer

Azure AI resources, including Document Intelligence, provide networking settings where you can configure firewall rules to allow access only from specific virtual networks and public IP address ranges. This directly restricts endpoint access to your corporate IP range, satisfying the requirement. It is the native, intended mechanism for IP-based access control on Azure AI services.

Exam trap

AI-103 often tests the difference between network-level access control (firewall IP rules, private endpoints) and identity-based control (conditional access, API keys)—candidates may pick conditional access when the requirement is source IP restriction.

How to eliminate wrong answers

Option A is wrong because Azure Bastion is a service for secure RDP/SSH access to VMs, not for restricting access to AI service endpoints; it has no role in API endpoint firewalling. Option B is wrong because Application Gateway with WAF protects web applications from attacks but does not restrict access based on source IP for an AI service endpoint; it would require additional configuration and is not the direct method. Option C is wrong because Microsoft Entra conditional access policies apply to user authentication and cannot restrict access based on source IP for API key-based requests to an AI endpoint.

Practice this question →

MCQmedium

You are migrating an Azure AI service from one region to another. What is the most efficient way to migrate the configuration?

A.Restore a backup from a Recovery Services vault.

B.Use Azure Data Factory to copy the resource.

C.Manually recreate all resources in the new region.

D.Export the resource as an ARM template and deploy it to the new region.

AnswerD

ARM templates capture the resource's declarative configuration, so redeploying the exported template into the target region recreates settings without manual re-entry. This directly satisfies the stem's efficiency constraint, since every other migration route requires rebuilding or hand-copying configuration.

Why this answer

Exporting the resource as an ARM template captures its full configuration declaratively, and deploying that template to the new region recreates the resource with identical settings efficiently. This is the recommended infrastructure-as-code approach for regional migration of Azure AI services, avoiding manual error and preserving configuration fidelity. It is faster and more reliable than rebuilding resources by hand.

Exam trap

AI-103 often tests the misconception that backups or data-copy tools migrate resource configurations, when the correct approach for configuration migration is exporting and redeploying an ARM template.

How to eliminate wrong answers

Option A is wrong because Recovery Services vault backups are for VMs and certain workloads, not for Azure AI service configuration, and cannot restore a Cognitive Services resource. Option B is wrong because Azure Data Factory is a data integration service for moving data between stores, not for migrating resource configurations. Option C is wrong because manually recreating all resources is error-prone, slow, and defeats the purpose of efficient migration when a template export is available.

Practice this question →

MCQeasy

You need to view the latency of requests made to an Azure AI services endpoint. Where do you find this information?

A.The Subscription billing dashboard.

B.The 'Deployment' logs in the machine learning workspace.

C.Azure Advisor recommendations.

D.Azure Monitor metrics.

AnswerD

Azure Monitor metrics automatically capture request latency, call counts and error rates for Azure AI services endpoints, viewable in the metrics explorer or via diagnostic settings. This is the native telemetry surface for endpoint performance, requiring no custom instrumentation.

Why this answer

Azure Monitor metrics is the platform service that collects and displays numerical telemetry such as request latency, request count, and error rates for Azure AI services endpoints. You can view latency metrics in the Azure Portal under the resource's Metrics blade or via the Azure Monitor API. This is the standard place to observe performance data for Azure resources.

Exam trap

AI-103 often tests the difference between metrics (numerical performance data) and logs (detailed event records), so candidates who think latency requires log analysis pick the deployment logs option instead of Azure Monitor metrics.

How to eliminate wrong answers

Option A is wrong because the Subscription billing dashboard shows cost and usage charges, not request latency. Option B is wrong because 'Deployment' logs in a machine learning workspace relate to model deployments in Azure ML, not to Azure AI services endpoint latency telemetry. Option C is wrong because Azure Advisor provides best-practice recommendations and optimization suggestions, not real-time latency metrics.

Practice this question →

Multi-Selecteasy

Which THREE options are available for configuring network security in Azure?

Select 3 answers

A.Azure Private Link / Private Endpoints.

B.Azure Storage Account Keys.

C.Azure Active Directory Groups.

D.Azure Firewall.

E.Network Security Groups (NSG).

AnswersA, D, E

Private Endpoints map a service into your virtual network via a private IP, removing public internet exposure entirely. This satisfies the stem's network security requirement by enforcing private-only connectivity to Azure services, blocking exfiltration and unauthorised access at the network layer.

Why this answer

Azure Private Link / Private Endpoints (A) is correct because it provides private connectivity to Azure PaaS services over a private IP address within your virtual network, removing exposure to the public internet and thus directly configuring network-level security. Azure Firewall (D) is correct because it is a managed, cloud-based network security service that provides stateful firewall capabilities, FQDN filtering, and threat intelligence-based filtering at the network and application layers. Network Security Groups (E) are correct because they filter network traffic to and from Azure resources in a virtual network using inbound and outbound security rules based on source/destination IP, port, and protocol.

Azure Storage Account Keys (B) are access credentials for authenticating to storage, not a network security configuration mechanism. Azure Active Directory Groups (C) are used for identity and access management (authorization), not for configuring network security controls.

Exam trap

AI-103 often tests the distinction between network security controls (NSG, Azure Firewall, Private Link) and identity/access controls (storage keys, AAD groups); candidates pick identity mechanisms thinking they secure the network.

Practice this question →

Multi-Selecthard

Which THREE security principles should you follow when managing Azure AI resources?

Select 3 answers

A.Auditability and logging.

B.Maximum access for all administrators.

C.Defense in Depth.

D.Disable all security features to improve speed.

E.Principle of Least Privilege.

AnswersA, C, E

Auditability and logging record who accessed or modified Azure AI resources and when, producing an evidence trail. This supports detection of anomalous activity, forensic investigation after an incident, and compliance reporting, making it a core security principle for managing these resources.

Why this answer

Option A (Auditability and logging) is correct because managing Azure AI resources requires enabling diagnostic settings, Azure Monitor logs, and activity logs so that access to keys, models, and data can be traced and anomalous use detected. Option C (Defense in Depth) is correct because Azure AI workloads should be protected with layered controls such as network isolation (private endpoints, VNet integration), identity controls (Microsoft Entra ID, managed identities), encryption (Microsoft-managed or customer-managed keys), and monitoring, so no single failure exposes the resource. Option E (Principle of Least Privilege) is correct because you should grant only the minimum RBAC roles and scopes needed (for example, Cognitive Services User rather than Contributor/Owner) and use managed identities instead of embedding keys, limiting blast radius if credentials are compromised.

Option B is wrong because maximum access for all administrators violates least privilege and expands the attack surface. Option D is wrong because disabling security features to improve speed removes protections like encryption, authentication, and logging, which is never an acceptable trade-off for Azure AI resources.

Exam trap

AI-103 often tests whether candidates can reject obviously bad security options, so the trap is overthinking and selecting a plausible-sounding but wrong principle instead of the three canonical ones (defense in depth, least privilege, auditability).

Practice this question →

MCQhard

You are managing an enterprise Azure OpenAI resource that experiences bursty traffic patterns. To optimize cost without sacrificing availability during sudden workload spikes, you decide to implement a caching layer for frequent prompts and responses. Which Azure service should you integrate in front of Azure OpenAI?

A.Azure Traffic Manager routing profile

B.Azure Cache for Redis

C.Azure ExpressRoute local gateway

D.Azure Content Delivery Network (CDN)

AnswerB

Azure Cache for Redis sits in front of Azure OpenAI and stores frequent prompt-response pairs in memory, so repeated requests are served from cache rather than consuming token-based capacity. This absorbs bursty spikes without provisioning extra throughput, directly satisfying the cost-optimisation and availability constraints in the stem.

Why this answer

Azure Cache for Redis provides a low-latency, in-memory caching layer that can store frequent prompt-response pairs, reducing the number of calls to Azure OpenAI during bursty traffic. This optimizes cost by serving cached responses and maintains availability by offloading repeated requests from the OpenAI resource. It is the standard Azure service for application-level caching in front of AI endpoints.

Exam trap

AI-103 often tests the confusion between caching services (Redis) and routing/networking services (Traffic Manager, CDN, ExpressRoute)—candidates may pick CDN thinking it caches API responses, but CDN is for static content.

How to eliminate wrong answers

Option A is wrong because Azure Traffic Manager is a DNS-based global load balancer that routes traffic to different endpoints; it does not cache responses and would not reduce OpenAI calls. Option C is wrong because ExpressRoute is a private network connection between on-premises and Azure, not a caching service, and a local gateway is for routing, not caching. Option D is wrong because Azure CDN caches static content at edge locations, but it is not designed for dynamic API responses like OpenAI prompts, and it does not support the POST requests typically used for completions.

Practice this question →

MCQmedium

You are deploying an Azure AI multi-service account in the West US region. The finance department requires that all resource deployment costs be tracked by department code using Azure Resource Manager tags. Which Azure feature should you use to enforce the mandatory application of the department tag across all future Azure AI resource deployments?

A.Azure Cost Management budgets

B.Azure role-based access control (RBAC)

C.Azure Blueprints

D.Azure Policy

AnswerD

Azure Policy evaluates resource deployments against rules and can deny or auto-remediate non-compliant ones, so a policy with a deny effect and tag requirement forces the department tag onto every future Azure AI resource regardless of who deploys it.

Why this answer

Azure Policy is the governance service that enforces organizational standards by evaluating resources against rules and taking effects such as deny, audit, or append. A policy with an 'append' or 'deny' effect on the tag requirement enforces mandatory department tags across all future deployments.

Exam trap

AI-103 often tests the difference between cost visibility tools (budgets, Cost Management) and enforcement tools (Azure Policy) — the trap is choosing budgets because the question mentions cost tracking, when the requirement is enforcement of tags.

How to eliminate wrong answers

Option A is wrong because Azure Cost Management budgets only monitor and alert on spending; they cannot enforce tag application on deployments. Option B is wrong because RBAC controls who can perform actions on resources, not what metadata (tags) resources must carry. Option C is wrong because Azure Blueprints packages artifacts (including policies) for repeatable environments, but the enforcement mechanism itself is Azure Policy; Blueprints alone do not enforce tag compliance on arbitrary future deployments.

Practice this question →

MCQhard

You are setting up diagnostic logging for an Azure OpenAI resource. Your security team mandates that all log streams must be exported in real-time to a security information and event management (SIEM) platform outside Azure, such as Splunk. Which destination should you configure in the Azure Monitor diagnostic setting?

A.Send to a Microsoft Sentinel workbook

B.Configure an Azure Automation runbook webhook

C.Stream to an Azure Event Hub

D.Archive to an Azure Storage account container

AnswerC

Streaming to an Azure Event Hub forwards diagnostic logs in near real-time to an external consumer, letting Splunk ingest them outside Azure. Storage accounts and Log Analytics would not meet the real-time external SIEM requirement.

Why this answer

Azure Event Hub is the supported real-time streaming destination for Azure Monitor diagnostic settings and integrates natively with external SIEM platforms like Splunk via the Splunk add-on for Event Hub. It provides low-latency, high-throughput egress of logs outside Azure.

Exam trap

AI-103 often tests whether candidates confuse batch archival (Storage) or visualization (Sentinel workbooks) with real-time external streaming, so they pick a destination that cannot deliver low-latency logs to a third-party SIEM.

How to eliminate wrong answers

Option A is wrong because a Sentinel workbook is a visualization/reporting artifact, not a log export destination. Option B is wrong because an Automation runbook webhook is for triggering automation, not streaming diagnostic logs. Option D is wrong because archiving to Storage is batch/durable storage, not real-time streaming to an external SIEM.

Practice this question →

Multi-Selecthard

Your enterprise architecture team is reviewing the security posture of an Azure AI deployment that handles sensitive financial documents. Which TWO actions should you implement to secure data in transit and at rest? (Choose two.)

Select 2 answers

A.Enforce a minimum TLS version of 1.2 or higher for all API requests to secure data in transit.

B.Configure customer-managed keys (CMK) using Azure Key Vault for encryption at rest.

C.Grant 'Contributor' permissions to all developer accounts to simplify key rotation.

D.Disable diagnostic logging to prevent sensitive document text from being stored in Log Analytics.

E.Use Microsoft-managed keys exclusively without integrating Azure Key Vault.

AnswersA, B

Enforcing TLS 1.2 or higher encrypts API traffic between clients and the Azure AI service, satisfying the in-transit requirement. Older versions such as TLS 1.0 and 1.1 have known weaknesses, so mandating the minimum version protects sensitive financial documents during transmission.

Why this answer

Option A is correct because enforcing a minimum TLS version of 1.2 (or higher) on all API requests protects sensitive financial documents while they travel over the network, preventing downgrade attacks and use of deprecated protocols such as TLS 1.0/1.1. Option B is correct because configuring customer-managed keys (CMK) through Azure Key Vault gives the organization control over the encryption keys used for data at rest, satisfying compliance and key-ownership requirements for sensitive financial data. Option C is not appropriate because granting 'Contributor' to all developer accounts violates least privilege and does not itself secure data in transit or at rest; key rotation should be handled through Key Vault access policies or RBAC scoped narrowly.

Option D is wrong because disabling diagnostic logging reduces auditability and incident response rather than protecting data, and logging can be configured to avoid storing sensitive content. Option E is wrong because relying exclusively on Microsoft-managed keys removes customer control over key lifecycle and does not meet the requirement to integrate Azure Key Vault for encryption at rest.

Exam trap

AI-103 often tests whether candidates pick 'more access' or 'less logging' as security measures, when the correct answers are encryption controls (TLS for transit, CMK for rest) that map directly to the stated requirement.

Practice this question →

MCQhard

You are managing an Azure OpenAI model deployment in an active-passive multi-region disaster recovery architecture. A regional outage occurs, and you failover traffic to the secondary region. However, clients report receiving authentication errors. What is the most likely cause?

A.Azure automatically deletes API keys during a regional failover.

B.The client application's managed identity has not been granted the required RBAC roles on the secondary Azure OpenAI resource.

C.Azure OpenAI models require re-training after any regional failover event.

D.The primary region's DNS zone must be manually deleted for failover to work.

AnswerB

Managed identities are tenant-level principals, but their RBAC role assignments are scoped per resource. Failing over to the secondary Azure OpenAI resource leaves the identity without a role assignment there, so token authorisation fails even though authentication succeeds.

Why this answer

When using managed identity for authentication, the identity must be granted the appropriate RBAC role (such as Cognitive Services OpenAI User) on each Azure OpenAI resource it accesses. During failover to a secondary resource in another region, that resource is a distinct Azure resource with its own scope, so role assignments from the primary do not automatically carry over. The authentication error is therefore caused by missing RBAC role assignments on the secondary resource.

Exam trap

AI-103 often tests the misconception that identity and RBAC configurations automatically replicate across regions or resources, when in fact each Azure resource has its own authorization scope requiring explicit role assignments.

How to eliminate wrong answers

Option A is wrong because Azure does not delete API keys during regional failover; keys persist on the resource and failover does not alter key material. Option C is wrong because Azure OpenAI models are pre-trained and deployed as-is; they do not require retraining after a failover, and retraining is not even a supported operation for base models. Option D is wrong because DNS zones are not manually deleted for failover; Azure Traffic Manager or Front Door handles routing, and DNS records are managed automatically, not by manual deletion.

Practice this question →

MCQeasy

Which authentication method is recommended to prevent 'key leakage' in Azure AI Services?

A.Storing keys in a plaintext file.

B.Creating custom headers for API requests.

C.Regenerating keys every 30 days.

D.Using Microsoft Entra ID authentication.

AnswerD

Microsoft Entra ID authentication issues short-lived, role-scoped tokens, so no long-lived service keys are stored in code or configuration. That removes the static credential an attacker could exfiltrate, directly satisfying the requirement to prevent key leakage in Azure AI Services.

Why this answer

Microsoft Entra ID authentication replaces static API keys with short-lived OAuth 2.0 tokens issued to an identity, so there is no long-lived secret to leak. Access is governed by RBAC roles on the AI resource, and tokens expire automatically. This is the recommended passwordless pattern for preventing key leakage in Azure AI Services.

Exam trap

AI-103 often tests whether candidates equate key rotation with key-leak prevention, so the trap is picking 'regenerate keys' when the truly secure answer is eliminating keys via Entra ID.

How to eliminate wrong answers

Option A is wrong because storing keys in a plaintext file is the exact anti-pattern that causes key leakage — anyone with file access or a misconfigured repo exposes the key. Option B is wrong because custom headers are just a transport mechanism; they do not remove the need for a credential and can still carry a leakable key. Option C is wrong because regenerating keys every 30 days reduces the window of exposure but does not prevent leakage — the key still exists, can be copied, and rotation can break dependent apps.

Practice this question →

MCQmedium

Your development team has created a custom model using Azure Machine Learning. You need to deploy this model as a real-time web service endpoint with auto-scaling capabilities. Which deployment target should you select?

A.Azure Functions consumption plan

B.Azure Container Registry webhook

C.Azure Batch cluster

D.Azure Managed Online Endpoint

AnswerD

Managed online endpoints provide real-time scoring with integrated autoscaling, scaling rules based on metrics or schedules, and no infrastructure management. This directly satisfies the stem's requirement for a real-time web service endpoint with auto-scaling, unlike batch endpoints or AKS-based deployments.

Why this answer

Azure Managed Online Endpoints are designed for real-time inference with built-in autoscaling, authentication, and monitoring, making them the correct deployment target for a custom Azure Machine Learning model exposed as a web service. They support scale-to-zero or rule-based scaling based on metrics like CPU utilization or request rate.

Exam trap

AI-103 often tests whether candidates confuse batch-oriented or event-driven compute (Batch, Functions) with real-time managed online endpoints, which are the only option offering native autoscaling for ML web services.

How to eliminate wrong answers

Option A is wrong because Azure Functions consumption plan is a serverless event-driven compute model not designed for hosting ML model inference with GPU or model-specific scaling semantics. Option B is wrong because Azure Container Registry webhooks trigger actions on image push events; they are not a deployment target for serving models. Option C is wrong because Azure Batch is for large-scale parallel batch processing jobs, not low-latency real-time web service endpoints.

Practice this question →

MCQhard

You are deploying a custom AI model using a container image stored in Azure Container Registry (ACR). How do you ensure the deployment can pull the image securely?

A.Use the ACR 'admin' password in the configuration.

B.Assign the 'AcrPull' role to the endpoint's managed identity.

C.Deploy the model from a local machine.

D.Make the ACR public.

AnswerB

Assigning the AcrPull role to the endpoint's managed identity grants the deployment a token-based pull permission scoped to the registry, so no credentials are stored in configuration. This satisfies the secure-pull constraint by authenticating through Microsoft Entra ID rather than registry admin keys.

Why this answer

The secure, secretless way to let a deployment pull from ACR is to give the consuming resource a managed identity and assign that identity the AcrPull role scoped to the registry. The platform then authenticates to ACR using the identity's token, so no credentials are stored in configuration. This follows the Azure best practice of eliminating long-lived secrets from deployment pipelines.

Exam trap

AI-103 often tests whether candidates default to the ACR admin account (the 'easy' answer) instead of the managed identity + AcrPull pattern, which is the secure, least-privilege approach the exam expects.

How to eliminate wrong answers

Option A is wrong because the ACR admin account is a single shared credential with full registry access, cannot be scoped, and is disabled by default — using it violates least privilege and secret-management guidance. Option C is wrong because deploying from a local machine does not solve how the remote endpoint authenticates to ACR; the endpoint still needs credentials or an identity to pull the image. Option D is wrong because making ACR public exposes all images to anonymous pulls and is a severe data-exposure risk, not a secure deployment method.

Practice this question →

MCQhard

You are configuring rate limiting and request throttling for multiple client applications consuming an Azure OpenAI endpoint. Different clients have different tier agreements (Bronze, Silver, Gold). Where should you implement these tiered rate-limiting policies?

A.Azure API Management (APIM)

B.Azure Application Gateway custom WAF rules

C.Azure OpenAI service built-in tier settings

D.Network Security Group (NSG) outbound rules

AnswerA

APIM applies subscription-scoped rate-limit and quota policies, so each Bronze, Silver or Gold client key gets its own tier thresholds. The Azure OpenAI endpoint itself exposes only uniform token-per-minute limits, which cannot differentiate clients, so tiered throttling must sit in the gateway layer.

Why this answer

Azure API Management (APIM) is the correct place to implement tiered rate-limiting and throttling policies because it sits in front of the Azure OpenAI endpoint as a gateway and supports per-subscription, per-product, and per-key rate-limit policies. You can create Bronze, Silver, and Gold products/subscriptions in APIM and apply rate-limit or rate-limit-by-key policies with different quotas (calls per minute, tokens per minute) to each tier. Azure OpenAI itself does not expose customer-configurable tiered throttling policies per client.

Exam trap

AI-103 often tests the misconception that Azure OpenAI has built-in per-customer tier settings — in reality, tiered rate limiting for multiple clients is a gateway (APIM) responsibility, not a model-service feature.

How to eliminate wrong answers

Option B is wrong because Application Gateway WAF rules inspect and block HTTP traffic based on OWASP-style signatures and custom match conditions, not consumption quotas per client tier — it has no native rate-limit-by-subscription construct. Option C is wrong because Azure OpenAI's built-in quotas (TPM/RPM) are assigned per deployment/subscription by Microsoft and cannot be partitioned into arbitrary Bronze/Silver/Gold client tiers. Option D is wrong because NSGs operate at L3/L4 and filter by IP/port/protocol; they cannot inspect HTTP requests or enforce per-client request-rate policies.

Practice this question →

MCQeasy

You are deploying an Azure AI Speech resource using an ARM template. Which parameter defines the name of the resource instance?

A.sku

B.name

C.location

D.kind

AnswerB

The `name` parameter in the ARM template's resource block sets the resource instance name, satisfying the stem's requirement to define the Azure AI Speech resource's name. Other parameters configure location, SKU, or kind, but only `name` supplies the unique identifier used during deployment.

Why this answer

In an ARM template, the 'name' property within the resource block specifies the name of the resource instance being deployed, such as the Azure AI Speech account name. This is a required property for every ARM resource and determines the unique identifier of the deployed resource. The other properties configure SKU, region, and resource type but do not set the instance name.

Exam trap

AI-103 often tests confusion between ARM template properties, expecting candidates to know that 'name' sets the resource instance identifier while 'sku', 'location', and 'kind' configure other attributes.

How to eliminate wrong answers

Option A is wrong because 'sku' defines the pricing tier and capabilities (e.g., S0, F0) of the Speech resource, not its name. Option C is wrong because 'location' specifies the Azure region where the resource is deployed, not its name. Option D is wrong because 'kind' identifies the type or variant of the Cognitive Services resource (e.g., SpeechServices), not the instance name.

Practice this question →

MCQmedium

Your development team requires secure, passwordless authentication from an Azure Function to an Azure AI Vision resource. Which authentication mechanism should you implement to adhere to security best practices?

A.Shared Access Signature (SAS) tokens with read-only permissions

B.Basic authentication using service administrator username and password

C.Primary API Key passed in the Ocp-Apim-Subscription-Key header

D.Microsoft Entra managed identity

AnswerD

A managed identity gives the Function an automatically rotated credential issued by Microsoft Entra ID, so no secrets or passwords are stored in code or configuration. This satisfies the passwordless, secure-access constraint for reaching Azure AI Vision.

Why this answer

Microsoft Entra managed identity lets the Azure Function authenticate to the Azure AI Vision resource without storing any secret — the platform issues and rotates the token automatically, and you grant the function's identity the appropriate RBAC role (e.g., Cognitive Services User) on the target resource. This is the passwordless, least-privilege pattern Microsoft recommends for service-to-service auth. Keys and SAS tokens are shared secrets that can leak; managed identity eliminates that class of risk entirely.

Exam trap

AI-103 often tests whether candidates recognize that API keys and SAS tokens are still secrets, so the 'most secure' answer is always the passwordless managed identity option, not a key-based one.

How to eliminate wrong answers

Option A is wrong because SAS tokens are still bearer credentials that must be stored, transmitted, and rotated — they can be leaked or over-scoped, so they are not passwordless. Option B is wrong because basic authentication with an administrator username and password is the weakest possible pattern: credentials are long-lived, broadly privileged, and trivially exposed in config or logs. Option C is wrong because the Ocp-Apim-Subscription-Key header carries the primary API key, a static shared secret that, if leaked, grants full access until manually regenerated — exactly the key-leakage risk managed identity avoids.

Practice this question →

MCQeasy

What is the purpose of 'Azure Advisor' in an AI solution?

A.To manage user identities.

B.To automatically patch the AI models.

C.To provide best practice recommendations for resources.

D.To host the web frontend for the AI application.

AnswerC

Azure Advisor analyses deployed resources and surfaces best-practice recommendations across cost, security, reliability, operational excellence and performance. For an AI solution, it satisfies the stem's requirement by continuously evaluating configuration telemetry against Microsoft's recommended practices, flagging concrete improvements rather than merely reporting raw metrics or enforcing policy.

Why this answer

Azure Advisor is a personalized cloud consultant that analyzes your deployed resources and telemetry to surface best-practice recommendations across five categories: Cost, Security, Reliability, Operational Excellence, and Performance. In an AI solution, it reviews resources such as Azure OpenAI, Cognitive Services, and supporting compute/storage and flags misconfigurations like missing redundancy or underutilized capacity. It is advisory only — it never modifies resources on your behalf, so it cannot patch or manage anything.

Exam trap

AI-103 often tests whether candidates confuse Azure Advisor (advisory recommendations only) with services that actually enforce or remediate configuration, such as Azure Policy or Microsoft Defender for Cloud.

How to eliminate wrong answers

Option A is wrong because identity management is the role of Microsoft Entra ID (formerly Azure AD), not Azure Advisor, which has no authentication or directory function. Option B is wrong because Azure Advisor is a read-only recommendation engine — it does not deploy updates, patch models, or perform any remediation; model/OS patching is handled by update management tools or the service platform itself. Option D is wrong because hosting a web frontend is a compute/App Service or Static Web Apps responsibility; Advisor only analyzes existing resources and offers guidance.

Practice this question →

MCQeasy

Which Azure feature allows you to control which users can modify or delete your Azure AI resources?

A.Azure RBAC.

B.Conditional Access policies.

C.Azure Firewall.

D.Resource Locks.

AnswerA

Azure role-based access control assigns roles scoped to Azure AI resources, determining which users may modify or delete them. This directly satisfies the stem's access-control requirement, unlike keys or network rules, which govern authentication and connectivity rather than user permissions.

Why this answer

Azure RBAC (Role-Based Access Control) is the mechanism that governs who can perform management-plane actions such as modifying or deleting Azure AI resources. You assign roles like Contributor, Owner, or Cognitive Services Contributor to users, groups, or service principals at a scope (management group, subscription, resource group, or resource), and those assignments determine whether modify/delete operations are permitted.

Exam trap

AI-103 often tests the distinction between RBAC (who can do what), Conditional Access (under what conditions they can sign in), and Resource Locks (what actions are blocked for everyone) — candidates frequently pick Resource Locks when the question asks about controlling user permissions.

How to eliminate wrong answers

Option B is wrong because Conditional Access policies govern the conditions under which authentication succeeds (device compliance, location, MFA), not what actions an authenticated user can perform on a resource. Option C is wrong because Azure Firewall is a network security service that filters traffic, not an authorization system for resource management operations. Option D is wrong because Resource Locks (CanNotDelete, ReadOnly) prevent deletion or modification regardless of RBAC, but they are a guardrail, not a user-permission mechanism — they do not control which users can modify resources, they block the action for everyone.

Practice this question →

MCQeasy

You are provisioning an Azure AI services account and need to select the kind of resource. Which kind parameter value should you select for an Azure OpenAI deployment?

A.CognitiveSearch

B.MachineLearning

C.OpenAI

D.BotService

AnswerC

The kind parameter value OpenAI provisions an Azure OpenAI resource, exposing the OpenAI model deployments and completions API rather than the general multi-service cognitive endpoints. Selecting this kind is what enables GPT and embedding model deployments within the Azure AI services account.

Why this answer

For an Azure OpenAI deployment, the resource kind must be 'OpenAI'. This kind provisions an Azure OpenAI resource that provides access to OpenAI models like GPT-4, GPT-3.5, DALL-E, and Whisper through Azure's infrastructure. The 'OpenAI' kind is specifically designed for Azure OpenAI Service, enabling features such as model deployment, fine-tuning, and content filtering.

Other kinds correspond to different Azure AI services and do not support OpenAI model deployments.

Exam trap

AI-103 often tests the confusion between different Azure AI resource kinds, especially when candidates assume that any AI-related service can host OpenAI models, leading them to select 'MachineLearning' or 'CognitiveSearch' incorrectly.

How to eliminate wrong answers

Option A is wrong because 'CognitiveSearch' is the kind for Azure Cognitive Search, which provides search capabilities over content, not OpenAI model hosting. Option B is wrong because 'MachineLearning' is the kind for Azure Machine Learning workspaces, used for building, training, and deploying custom machine learning models, not for accessing OpenAI's pre-trained models. Option D is wrong because 'BotService' is the kind for Azure Bot Service, which is used to develop conversational AI bots, not for deploying OpenAI models.

Practice this question →

MCQmedium

Your organization has deployed an Azure AI Custom Vision model. You need to automate the retraining pipeline whenever new training images are uploaded to an Azure Blob Storage container. Which Azure service should you use to trigger the retraining pipeline?

A.Azure ExpressRoute monitor

B.Azure Backup service

C.Azure Event Grid

D.Azure Monitor alert rules

AnswerC

Azure Event Grid delivers blob-created events from the storage account to a subscriber, so an upload immediately triggers the retraining pipeline. It provides native, near-real-time event-driven invocation, unlike polling or scheduled triggers, satisfying the automation requirement.

Why this answer

Azure Event Grid is a fully managed event-routing service that natively integrates with Blob Storage. When a blob is created in a container, Event Grid publishes a BlobCreated event that can trigger an Azure Function, Logic App, or webhook to invoke the Custom Vision retraining pipeline.

Exam trap

AI-103 often tests the confusion between Azure Monitor alerts (metric/log-based, not per-object) and Event Grid (event-driven, per-blob), luring candidates toward Monitor for storage-triggered automation.

How to eliminate wrong answers

Option A is wrong because ExpressRoute Monitor is a network-monitoring feature for ExpressRoute circuits and has no event-triggering capability for storage. Option B is wrong because Azure Backup is a data-protection service for backing up VMs, files, and databases — it does not emit blob-creation events or trigger pipelines. Option D is wrong because Azure Monitor alert rules react to metrics and logs (e.g., CPU thresholds) and are not designed for near-real-time, per-object event routing; they also lack native Blob Storage event subscriptions.

Practice this question →

MCQeasy

You are planning to deploy an Azure AI solution that includes multiple Azure Cognitive Services resources. You need to ensure that the resources can be managed together and that costs are consolidated. What should you use?

A.Deploy each resource in a separate subscription and use Azure Cost Management to aggregate costs.

B.Use an Azure Cognitive Services multi-service resource.

C.Configure each resource to send diagnostic logs to a central Log Analytics workspace.

D.Create each resource in the same resource group and subscription.

AnswerB

A multi-service resource allows you to access multiple Azure Cognitive Services APIs (such as Vision, Language, Speech) with a single key and endpoint. It consolidates billing and management, and you can use one resource to call several services. This simplifies deployment and cost tracking for solutions that use multiple AI services.

Why this answer

An Azure Cognitive Services multi-service resource provides a single Azure resource that can be used to access multiple cognitive services, such as Computer Vision, Text Analytics, and Speech. It simplifies management, offers a single key and endpoint, and consolidates billing for those services. This is the recommended approach when you need to use several AI services together.

Exam trap

The trap here is thinking that resource group or subscription placement alone achieves consolidated management, when a multi-service resource is specifically designed for that purpose.

Practice this question →

MCQhard

You are deploying a custom text classification model using Azure AI Language. The model undergoes frequent retraining as new business data arrives. You need to establish a model versioning strategy that allows zero-downtime client updates while ensuring seamless rollback capability if regression occurs. What is the recommended architectural approach?

A.Delete the original resource before deploying the updated model version.

B.Overwrite the existing model artifact in place with the new training run using the exact same name.

C.Create a completely new Azure AI resource in a different subscription for every single model iteration.

D.Deploy each model version with a unique deployment name and update the application client configuration or routing rules to shift traffic progressively.

AnswerD

Unique deployment names let each model version run concurrently behind a stable endpoint, so clients switch by updating routing rather than redeploying. Progressive traffic shifting gives zero-downtime cutover, and reverting the routing rule restores the prior version instantly if regression appears.

Why this answer

Azure AI Language custom models are consumed through deployments, and each deployment has a unique name that maps to a specific model version. By deploying each new version under a unique deployment name and updating client configuration or routing rules, you can shift traffic progressively and roll back instantly by pointing clients back to the previous deployment. This achieves zero-downtime updates and seamless rollback.

Exam trap

AI-103 often tests whether candidates think retraining overwrites a model in place, missing that Azure AI Language uses named deployments to enable versioning, progressive rollout, and rollback.

How to eliminate wrong answers

Option A is wrong because deleting the original resource destroys the existing model and causes downtime with no rollback path. Option B is wrong because overwriting the model artifact in place removes the previous version, eliminating rollback capability and risking regression. Option C is wrong because creating a new Azure AI resource per iteration is operationally heavy, costly, and unnecessary when deployments within the same resource support versioning.

Practice this question →

MCQhard

You are implementing a multi-region disaster recovery strategy for an Azure OpenAI deployment. If the primary region goes down, how should you configure traffic redirection to the secondary region using Azure Front Door?

A.Use geographic routing based on the client IP location.

B.Use weighted routing with a 50/50 split between regions.

C.Use priority routing with the primary region set to priority 1 and the secondary region set to priority 2.

D.Use performance-based routing to the lowest latency node.

AnswerC

Priority routing directs all traffic to the priority 1 primary region and only fails over to priority 2 when the primary becomes unhealthy, satisfying the disaster recovery requirement for automatic redirection during a regional outage.

Why this answer

Azure Front Door priority routing assigns a priority number to each origin, and traffic is sent to the lowest-numbered (highest-priority) healthy origin first. Setting the primary region to priority 1 and the secondary to priority 2 ensures all traffic goes to the primary during normal operation and automatically fails over to the secondary only when the primary becomes unhealthy. This is the standard active-passive DR pattern.

Exam trap

AI-103 often tests whether candidates confuse weighted or performance-based routing with failover, when only priority routing provides deterministic active-passive redirection.

How to eliminate wrong answers

Option A is wrong because geographic routing directs users based on their IP location, which is used for latency or compliance routing, not for active-passive failover — it would send some users to the secondary even when the primary is healthy. Option B is wrong because weighted routing with a 50/50 split is active-active load distribution, not DR failover; it does not prioritize the primary region. Option D is wrong because performance-based routing selects the lowest-latency origin, which may route to the secondary even when the primary is healthy, and it does not provide deterministic failover semantics.

Practice this question →

MCQeasy

You are planning to deploy an Azure AI solution that requires a dedicated endpoint for a custom model. You need to choose a deployment option that provides a static endpoint and supports autoscaling. What should you use?

A.Azure Functions with an HTTP trigger.

B.Azure Machine Learning managed online endpoint.

C.Azure Kubernetes Service (AKS) with a custom inference server.

D.Azure Container Instances with a public IP address.

AnswerB

Azure Machine Learning managed online endpoints provide a static scoring URI, support autoscaling, and handle infrastructure management. They are designed for deploying models with dedicated endpoints and can integrate with Azure AI services. This meets the requirement for a static endpoint and autoscaling.

Why this answer

Azure Machine Learning managed online endpoints offer a static endpoint and autoscaling, making them ideal for deploying custom models. They abstract infrastructure management and integrate with Azure AI services. Other options lack either static endpoints or autoscaling capabilities.

Exam trap

The trap here is assuming that Azure Functions or AKS provide the same managed endpoint experience as Azure Machine Learning managed online endpoints.

Practice this question →

MCQeasy

You are planning the disaster recovery strategy for an Azure AI Translator resource. In the event of a regional outage in East US, you want to ensure minimal downtime and continuity of service. Which deployment model should you select?

A.Deploy a primary resource in East US and a secondary resource in the paired region (West US), then implement client-side failover logic.

B.Configure an Azure Backup vault to snapshot the AI model weights daily.

C.Store all translation requests in Azure Blob Storage and replay them when the region recovers.

D.Rely on Azure's native synchronous cross-region database replication for cognitive services.

AnswerA

Azure AI Translator is a regional service, so pairing East US with its paired region West US and adding client-side failover logic achieves continuity during a regional outage. The paired-region topology satisfies the minimal-downtime constraint without a global endpoint.

Why this answer

Azure AI Translator does not provide automatic cross-region failover or built-in geo-replication for the translation endpoint. The recommended disaster recovery pattern is to deploy the resource in two regions (ideally a paired region such as East US / West US) and implement client-side failover logic that switches the endpoint and key when the primary region is unavailable. This achieves minimal downtime without relying on features the service does not offer.

Exam trap

AI-103 often tests the assumption that Azure provides automatic geo-failover for all services — the trap is that Cognitive Services like Translator require customer-implemented failover, unlike services with built-in geo-replication such as Azure SQL or Cosmos DB.

How to eliminate wrong answers

Option B is wrong because Azure Backup vaults back up data and VMs, not AI model weights — Cognitive Services models are Microsoft-managed and not exposed as backup-able artifacts. Option C is wrong because queuing requests in Blob Storage and replaying them later is a batch-recovery pattern, not a continuity strategy; it does not provide real-time translation during the outage. Option D is wrong because Azure Cognitive Services do not expose a synchronous cross-region database replication feature — there is no customer-visible database to replicate, and the service's internal replication is not a customer-configurable DR mechanism.

Practice this question →

Multi-Selecthard

Which THREE features are critical for managing the lifecycle of an AI model in a production environment?

Select 3 answers

A.Model registry for version control.

B.Hardcoding all environment settings.

C.CI/CD integration for automated deployments.

D.Manual file copying via FTP.

E.Real-time monitoring of inference metrics.

AnswersA, C, E

A model registry stores versioned artefacts with lineage and metadata, enabling rollback, audit and promotion between environments. It satisfies the lifecycle requirement by tracking which model version is deployed where, supporting reproducibility and governance across training, staging and production stages.

Why this answer

Option A (Model registry for version control) is correct because a model registry tracks model artifacts, versions, lineage, and stage transitions (e.g., staging to production), which is essential for reproducibility, rollback, and governance across the model lifecycle. Option C (CI/CD integration for automated deployments) is correct because CI/CD pipelines automate testing, packaging, and deployment of models and their dependencies, enabling consistent, repeatable releases and reducing manual error during lifecycle transitions. Option E (Real-time monitoring of inference metrics) is correct because production models require continuous observation of latency, throughput, drift, and accuracy degradation so teams can trigger retraining or rollback before business impact occurs.

Option B (Hardcoding all environment settings) is not appropriate because it prevents portability across environments and breaks configuration management best practices. Option D (Manual file copying via FTP) is not appropriate because it lacks versioning, auditability, and automation, making deployments error-prone and non-reproducible.

Exam trap

The trap is selecting options that seem convenient but are anti-patterns in production, such as hardcoding settings or manual file transfers, instead of recognizing the need for automation and monitoring.

Practice this question →

Multi-Selecthard

You are optimizing the cost of your Azure AI infrastructure. You notice several resources are underutilized or incorrectly provisioned. Which THREE actions should you take to reduce unnecessary spending? Each correct answer presents part of the solution.

Select 3 answers

A.Downgrade development and test resources from high-tier production SKUs to free or lower standard tiers where appropriate.

B.Provision dedicated Azure OpenAI PTUs for idle development sandboxes.

C.Identify and delete abandoned or unused Azure AI resource accounts.

D.Implement Azure Cost Management budgets and anomaly detection alerts.

E.Scale out search service partitions and replicas to maximum capacity permanently.

AnswersA, C, D

Downgrading non-production workloads to free or standard tiers directly addresses the stem's underutilised and over-provisioned resources, since development and test environments rarely need production-grade throughput or SLA guarantees. Matching SKU tier to actual workload demand eliminates the premium capacity charges that high-tier SKUs impose regardless of consumption.

Why this answer

Option A is correct because non-production dev/test workloads rarely need high-tier production SKUs, so moving them to free or lower standard tiers (e.g., Azure AI Search Basic/Standard, Cognitive Services standard pricing tiers) directly cuts recurring compute and feature charges without affecting production SLAs. Option C is correct because abandoned or unused Azure AI resource accounts (e.g., orphaned Cognitive Services, Azure OpenAI, or Azure AI Search resources) still incur charges for provisioned capacity and stored data, so identifying and deleting them eliminates pure waste. Option D is correct because Azure Cost Management budgets and cost anomaly alerts provide proactive visibility and governance, letting you detect and remediate unexpected spend before it accumulates.

Option B is not appropriate because Provisioned Throughput Units (PTUs) reserve dedicated Azure OpenAI capacity at a fixed hourly rate and are cost-effective only for steady, high-volume production workloads, not idle development sandboxes. Option E is not appropriate because permanently scaling Azure AI Search partitions and replicas to maximum capacity increases cost and is only justified by sustained indexing/query load or high-availability requirements, not cost reduction.

Exam trap

AI-103 often tests whether candidates confuse 'more capacity' with 'better performance' — options that scale up resources or add PTUs sound like optimization but actually increase cost, so read for the direction of the spend impact.

Practice this question →

MCQhard

You are managing an enterprise Azure AI Search deployment. During an audit, you notice that index data is encrypted at rest using Microsoft-managed keys. Management mandates that you switch to customer-managed keys (CMK) stored in Azure Key Vault immediately without losing index data or rebuilding the service. How should you implement this?

A.Delete the search service and provision a brand new one with CMK enabled from inception.

B.Modify the DNS records to point to a new CMK-encrypted endpoint.

C.Configure encryption with customer-managed keys in the Azure portal on the existing search service instance and assign necessary Key Vault access permissions.

D.Run an Azure Automation runbook that exports indices to blob storage, deletes the service, and restores it.

AnswerC

Configuring customer-managed keys directly on the existing search service satisfies the mandate to avoid data loss or a rebuild, since CMK encryption is applied at the service level rather than requiring index recreation. Granting the search service's managed identity Key Vault access permissions enables it to wrap and unwrap the key, switching encryption from Microsoft-managed to customer-managed in place.

Why this answer

Azure AI Search supports enabling customer-managed key (CMK) encryption on an existing service without data loss or service recreation. You configure CMK in the Azure portal (or via ARM/Bicep) under the Encryption blade, then grant the search service's managed identity the necessary Key Vault permissions (get, wrapKey, unwrapKey). The service re-encrypts the index encryption key with your CMK, and no reindexing or rebuild is required.

Exam trap

AI-103 often tests whether candidates assume CMK requires rebuilding the service or migrating data, when in fact Azure AI Search supports in-place CMK enablement on existing services via the portal with Key Vault permissions.

How to eliminate wrong answers

Option A is wrong because deleting and recreating the service causes downtime, loses all indexes and data, and is completely unnecessary — CMK can be enabled in place. Option B is wrong because DNS records have nothing to do with encryption key management; changing DNS does not switch the encryption key source. Option D is wrong because exporting/deleting/restoring is a destructive, high-risk migration approach that is not required and would cause data loss and extended downtime.

Practice this question →

MCQeasy

You are setting up cost alerts for your Azure subscription, which contains several Azure AI services resources. You want to receive an email notification when your month-to-date spending reaches 80% of your $5,000 budget. Which feature should you configure?

A.Azure Cost Management budgets and alerts

B.Microsoft Defender for Cloud security alerts

C.Azure Monitor activity log alerts

D.Azure Advisor cost recommendations

AnswerA

Azure Cost Management budgets track actual or forecast spend against a defined amount and trigger alert thresholds, such as 80% of a $5,000 monthly budget, notifying specified recipients by email. This directly satisfies the requirement to be alerted before the subscription budget is fully consumed.

Why this answer

Azure Cost Management budgets and alerts allow you to set a budget and configure alerts based on actual or forecasted spending thresholds, such as 80% of a $5,000 budget. This is the correct feature for cost monitoring and notifications.

Exam trap

AI-103 often tests the confusion between cost management and security or monitoring features, leading candidates to choose Azure Monitor or Defender for cost alerts.

How to eliminate wrong answers

Option B is wrong because Microsoft Defender for Cloud security alerts are for security threats, not cost management. Option C is wrong because Azure Monitor activity log alerts track control-plane operations, not spending. Option D is wrong because Azure Advisor cost recommendations provide suggestions to optimize costs but do not send alerts based on budget thresholds.

Practice this question →

MCQhard

You are managing costs for a multi-tenant Azure AI project. You need to attribute usage costs specifically to the 'Research' department. What is the most effective approach?

A.Implement Azure Policy to enforce mandatory tags on all new resources.

B.Disable diagnostic logging for the research resources to reduce billing.

C.Create a separate resource group for each department.

D.Change the pricing tier of the resource to 'Free'.

AnswerA

Azure Policy enforces mandatory tag requirements at resource creation, ensuring every resource carries a department tag such as Research. Cost Management can then filter and attribute spend by that tag, giving the required per-department cost visibility.

Why this answer

Azure Policy can enforce mandatory tags (such as Department=Research) on resource creation, ensuring consistent cost attribution across the multi-tenant project. Once tags are enforced, Azure Cost Management can group and filter costs by the Department tag, giving accurate per-department chargeback. This is the most effective and scalable approach because it prevents untagged resources from being created in the first place.

Exam trap

AI-103 often tests whether candidates confuse resource groups (a scoping/organizational construct) with tags (the actual cost-attribution mechanism), leading them to pick 'separate resource groups' when the question asks about attributing costs to a department.

How to eliminate wrong answers

Option B is wrong because disabling diagnostic logging does not reduce compute or inference billing — it only removes telemetry, harming observability while leaving costs essentially unchanged. Option C is wrong because separate resource groups alone do not provide cost attribution unless combined with tags or subscription-level separation; resource groups are a scoping mechanism, not a billing attribution mechanism, and multi-tenant resources may span groups. Option D is wrong because changing the pricing tier to Free is not a cost-attribution strategy, and Free tiers have severe quota limits that would break a production multi-tenant workload.

Practice this question →

MCQhard

Your enterprise organization provisions multiple Azure AI Services accounts across different subscriptions. Security mandates that all API keys must be automatically rotated every 30 days without human intervention. Which Azure service configuration should you implement?

A.Microsoft Defender for Cloud JIT access policies

B.Azure Key Vault automated secret rotation using an Azure Function

C.Azure AI Services built-in automatic key rotation policy

D.Azure Monitor alert rules tied to Microsoft Entra ID

AnswerB

Azure Key Vault automated rotation uses an Azure Function to regenerate and update secrets on a schedule, eliminating manual intervention. This satisfies the mandate that all API keys rotate every 30 days automatically across the provisioned Azure AI Services accounts.

Why this answer

Azure Key Vault automated secret rotation using an Azure Function is correct because Key Vault supports rotation policies that can trigger an Azure Function to generate new keys and update the AI Services account automatically. This enables fully automated, scheduled rotation without human intervention. The Azure Function can call the Azure AI Services management API to regenerate keys and store the new keys back in Key Vault.

Exam trap

AI-103 often tests the misconception that Azure AI Services includes built-in automatic key rotation, when in fact rotation must be orchestrated externally via Key Vault and Azure Functions.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender for Cloud JIT access policies manage just-in-time VM access, not API key rotation. Option C is wrong because Azure AI Services does not have a built-in automatic key rotation policy; key regeneration must be triggered externally. Option D is wrong because Azure Monitor alert rules tied to Microsoft Entra ID are for monitoring and alerting, not for rotating keys.

Practice this question →

MCQmedium

Your organization has strict compliance policies requiring all Azure AI Services endpoints to reject connections that do not use Transport Layer Security (TLS) version 1.3. Where can you enforce this minimum TLS version setting?

A.Within the Data residency tab of the Overview blade

B.In the Access control (IAM) settings under role assignments

C.In the Configuration blade of the Azure AI resource in the Azure Portal

D.In Application Insights under the Availability blade

AnswerC

The Azure AI resource's Configuration blade exposes the minimum TLS version setting, where selecting TLS 1.3 rejects connections using earlier versions. This enforces the compliance policy at the endpoint itself rather than at a client or gateway.

Why this answer

The minimum TLS version for an Azure AI Services resource is configured in the Configuration blade of the resource in the Azure Portal, where you can set the minimum inbound TLS version (e.g., 1.2 or 1.3). This setting enforces that connections using older TLS versions are rejected. It is a resource-level network security control, not an IAM or monitoring setting.

Exam trap

AI-103 often tests where security settings live across Azure blades, so candidates who associate 'access' or 'compliance' with IAM or Data residency pick A or B instead of the Configuration blade.

How to eliminate wrong answers

Option A is wrong because the Data residency tab shows where data is stored and processed, not transport security settings. Option B is wrong because Access control (IAM) manages role assignments and identity permissions, not TLS protocol enforcement. Option D is wrong because Application Insights Availability tests monitor endpoint uptime and responsiveness, not TLS version enforcement.

Practice this question →

MCQeasy

You are deploying an Azure AI service resource in the Azure portal. Which option specifies the geographic location where your data will be processed and stored?

A.Tenant

B.Domain

C.Region

D.Zone

AnswerC

The Region parameter determines the Azure datacentre geography where the AI service resource is deployed, and therefore where processing occurs and data is stored at rest. Selecting it satisfies the requirement to control the geographic location of data processing and storage.

Why this answer

In Azure, the region specifies the geographic location where your resource's data is processed and stored. When you create an Azure AI service resource, you select a region (e.g., East US, West Europe), and that choice determines data residency, latency, and which features are available. This is a core compliance and architecture decision.

Exam trap

AI-103 often tests the confusion between region (data residency), availability zone (redundancy), and tenant (identity boundary), with candidates incorrectly selecting zone for data location.

How to eliminate wrong answers

Option A is wrong because a tenant is a logical identity container in Microsoft Entra ID that holds users, groups, and subscriptions; it does not define data processing location. Option B is wrong because 'domain' is not an Azure resource placement concept—it may refer to a DNS domain or an Entra ID domain name, neither of which controls data residency. Option D is wrong because a zone (availability zone) is a physically separate datacenter within a region used for redundancy, not the geographic location for data processing and storage.

Practice this question →

Multi-Selecteasy

Which THREE of the following are common Azure cost management tools that you should use to manage your AI solution budget?

Select 3 answers

A.Azure Budgets.

B.Azure Advisor cost recommendations.

C.Azure Cost Analysis.

D.Azure Active Directory.

E.Azure Container Registry.

AnswersA, B, C

Budgets allow you to set spending limits and receive notifications.

Why this answer

Azure Budgets (A) is correct because it lets you set spending thresholds on a scope such as a subscription, resource group, or resource and trigger alerts or actions when actual or forecasted costs approach or exceed the limit, which is essential for controlling an AI solution budget. Azure Advisor cost recommendations (B) is correct because it analyzes your resource usage and configuration and surfaces specific, actionable suggestions — such as right-sizing underutilized VMs or removing idle resources — that directly reduce AI workload spend. Azure Cost Analysis (C) is correct because it provides the reporting and visualization layer for cost management, allowing you to break down and filter actual costs by service, resource, tag, and time period so you can understand where AI-related spending is going.

Azure Active Directory (D) is an identity and access management service, not a cost management tool, and Azure Container Registry (E) is a private Docker/OCI image registry for storing and managing container images, so neither addresses budget monitoring or optimization.

Exam trap

AI-103 often tests whether candidates can distinguish cost governance tools (Budgets, Advisor, Cost Analysis) from unrelated services like identity (Entra ID) or container registries that appear plausible in an AI context.

Practice this question →

Multi-Selectmedium

Which TWO techniques are effective for improving the performance of an Azure AI application?

Select 2 answers

A.Increasing the number of subscription keys.

B.Disabling all logging to reduce overhead.

C.Switching to the 'Free' tier.

D.Implementing caching for common query results.

E.Deploying the AI resource in a region closer to the end-users.

AnswersD, E

Caching common query results reduces repeated calls to the underlying AI model, cutting latency and token consumption for identical requests. This directly satisfies the performance constraint by serving frequent responses from memory rather than recomputing them, improving throughput and responsiveness under load.

Why this answer

Option D is correct because implementing caching for common query results reduces the number of calls made to the Azure AI service, lowering latency and throttling risk while returning frequently requested data faster from a local or distributed cache such as Azure Cache for Redis. Option E is correct because deploying the AI resource in a region closer to end-users reduces network round-trip time (RTT) and thus improves perceived response latency for the application. Option A is not correct because adding subscription keys does not increase throughput or performance; keys are for authentication, and quota/rate limits are tied to the resource and pricing tier, not the number of keys.

Option B is not correct because disabling logging does not meaningfully improve AI inference performance and removes valuable diagnostics and monitoring. Option C is not correct because the Free tier has lower rate limits and quotas than paid tiers, so switching to it would degrade rather than improve performance.

Exam trap

AI-103 often tests the misconception that adding subscription keys or changing tiers increases throughput, when in fact Azure AI quotas are enforced per resource and per region, and only caching plus regional proximity genuinely reduce latency and load.

Practice this question →

MCQmedium

You are developing a Python application that uses the Azure OpenAI SDK. You need to programmatically retrieve the endpoint and key for your Azure OpenAI resource so the application can authenticate. The application must not store secrets in code. What should you use?

A.Use Azure Key Vault to store the key, and retrieve it at runtime using the Azure Identity SDK.

B.Use the Azure OpenAI REST API with the key passed as a query string parameter in each request.

C.Store the key in an environment variable on the development machine and read it using os.getenv().

D.Embed the key in the application source code and obfuscate it with a simple encoding.

AnswerA

Azure Key Vault securely stores the key, and the Azure Identity SDK (e.g., DefaultAzureCredential) retrieves it at runtime without hardcoding secrets. This follows security best practices for secret management and is the recommended approach for production applications.

Why this answer

Storing secrets in Azure Key Vault and retrieving them at runtime with Azure Identity is the secure, recommended pattern. It avoids hardcoding secrets and provides centralized management and auditing. Environment variables, code embedding, and query string parameters are insecure and do not meet the requirement.

Exam trap

The trap here is assuming that environment variables are secure enough for production secrets, when they can be exposed and lack centralized management.

Practice this question →

MCQeasy

You are creating an Azure AI Services resource using Azure CLI. Which command parameter specifies the pricing tier of the resource?

A.--sku

B.--tier

C.--pricing

D.--kind

AnswerA

The --sku parameter sets the pricing tier when creating an Azure AI Services resource via Azure CLI, accepting values such as F0, S0, or Standard. It directly controls the billing and feature tier assigned to the resource.

Why this answer

The Azure CLI command 'az cognitiveservices account create' uses the --sku parameter to specify the pricing tier (e.g., S0, F0) of the Azure AI Services resource. This is the standard parameter name across Azure CLI resource creation commands for specifying the SKU.

Exam trap

The trap is confusing --kind (service type) with --sku (pricing tier), or assuming a --tier or --pricing parameter exists when the CLI standardizes on --sku.

How to eliminate wrong answers

Option B is wrong because --tier is not the parameter used by az cognitiveservices account create; the CLI uses --sku for pricing tier selection. Option C is wrong because --pricing is not a valid Azure CLI parameter for this command. Option D is wrong because --kind specifies the type of cognitive services account (e.g., OpenAI, ComputerVision, TextAnalytics), not the pricing tier.

Practice this question →

MCQeasy

Your company is provisioning a new Azure AI Services multi-service resource. The security team mandates that all network traffic between the client applications and the Azure AI endpoint must remain entirely within the Microsoft backbone network without traversing the public internet. Which feature should you configure?

A.Cross-Origin Resource Sharing (CORS)

B.Service Principal Authentication

C.Azure Private Endpoint

D.Azure AI Custom Subdomain

AnswerC

Azure Private Endpoint assigns a private IP from your virtual network to the Azure AI resource, so client-to-endpoint traffic stays on the Microsoft backbone and never traverses the public internet. This directly satisfies the mandate that all network traffic remain internal, unlike service endpoints or firewall rules.

Why this answer

Azure Private Endpoint creates a private IP address for the Azure AI Services resource inside your virtual network, so traffic between clients and the endpoint stays on the Microsoft backbone and never traverses the public internet. This is the standard feature for meeting private-connectivity mandates.

Exam trap

AI-103 often tests whether candidates confuse identity features (service principals, custom subdomains) with network isolation features, tempting them to pick authentication options when the requirement is about traffic path.

How to eliminate wrong answers

Option A is wrong because CORS is a browser security mechanism controlling cross-origin HTTP requests, not a network isolation feature. Option B is wrong because service principal authentication is an identity mechanism for API access, not a way to keep traffic off the public internet. Option D is wrong because a custom subdomain changes the endpoint URL format (e.g., myresource.cognitiveservices.azure.com) but does not provide private network connectivity.

Practice this question →

Multi-Selectmedium

You are managing cost allocation for multiple Azure AI services across different departments. Which TWO Azure tools or features can help you analyze and attribute these costs accurately? Each correct answer presents part of the solution.

Select 2 answers

A.Azure Bastion session logs

B.Azure Active Directory enterprise user group memberships

C.Microsoft Defender for Cloud security recommendations

D.Azure resource tags combined with Cost Management cost analysis grouping

E.Azure Cost Management budgets and exported CSV cost reports

AnswersD, E

Resource tags attach department metadata to each Azure AI service, and Cost Management grouping aggregates spend by those tag values. This directly satisfies the cost attribution constraint, since grouping by tag produces per-department breakdowns rather than undifferentiated subscription totals.

Why this answer

Option D is correct because Azure resource tags let you attach department or cost-center metadata to each Azure AI service resource, and Cost Management cost analysis can then group and filter costs by those tag keys, directly attributing spend to the right department. Option E is correct because Azure Cost Management budgets track spend against thresholds and its exported CSV cost reports provide the raw, granular usage and charge data needed for accurate offline analysis and chargeback. Option A is wrong because Azure Bastion session logs record RDP/SSH connectivity activity, not billing or cost data.

Option B is wrong because Entra ID (Azure AD) enterprise group memberships govern identity and access, not cost attribution. Option C is wrong because Microsoft Defender for Cloud security recommendations address security posture, not cost analysis or allocation.

Exam trap

AI-103 often tests whether candidates confuse governance/security tools (Defender for Cloud, Bastion, Entra groups) with FinOps tools, so picking anything that sounds like 'management' rather than 'cost' is the trap.

Practice this question →

Multi-Selectmedium

You are troubleshooting a scenario where client applications are unable to connect to an Azure AI Language resource secured by a Private Endpoint. Which TWO troubleshooting steps should you perform? Each correct answer presents part of the solution.

Select 2 answers

A.Check that the client subnet can route to the private IP address assigned to the Private Endpoint.

B.Verify that the client application has been assigned the Storage Blob Data Contributor role.

C.Ensure that the Azure OpenAI model weights have been retrained.

D.Verify that the Private DNS zone is correctly linked to the client virtual network.

E.Check that public network access is set to enabled and unrestricted.

AnswersA, D

A Private Endpoint maps the service to a private IP inside the virtual network, so the client subnet must have a valid route to that address. Missing or misconfigured routing, such as an overriding UDR or peering gap, blocks connectivity regardless of DNS.

Why this answer

Option A is correct because a Private Endpoint exposes the Azure AI Language resource through a private IP address in the client's virtual network, so the client subnet must have valid routing (for example, via the default VNet routing or a configured route table) to reach that private IP; if routing is broken, connections fail even if DNS resolves correctly. Option D is correct because name resolution must map the Azure AI Language endpoint FQDN to the Private Endpoint's private IP, which requires the corresponding Private DNS zone (for example, privatelink.cognitiveservices.azure.com) to be linked to the client virtual network; without that link, clients resolve the public IP and cannot connect privately. Option B is not relevant because Storage Blob Data Contributor is an Azure Storage RBAC role and has no bearing on connecting to an Azure AI Language resource.

Option C is not relevant because retraining Azure OpenAI model weights is unrelated to Private Endpoint connectivity for Azure AI Language. Option E is incorrect because enabling unrestricted public network access would bypass the private-only access model rather than troubleshoot the Private Endpoint connection, and it may violate the intended security configuration.

Exam trap

AI-103 often tests Private Endpoint troubleshooting by presenting RBAC or public-access options as distractors, when the real issues are subnet routing and Private DNS zone linkage.

Practice this question →

MCQeasy

You are reviewing the Azure Cost Management dashboard to analyze spending on Azure AI services. Which grouping option allows you to see costs broken down by specific resource names?

A.Resource type

B.Meter category

C.Resource

D.Location

AnswerC

Grouping by Resource breaks costs down to individual resource names, exactly matching the stem's requirement to see spending per specific resource. Other groupings, such as service or resource group, aggregate at coarser levels and cannot isolate named Azure AI resources.

Why this answer

In Azure Cost Management, the 'Resource' grouping dimension breaks down costs by individual resource name (e.g., a specific Azure OpenAI account, a specific AI Search service). This is the only grouping that surfaces per-resource granularity, which is what the question asks for. Resource type groups by category (e.g., 'Microsoft.CognitiveServices/accounts'), not by name.

Exam trap

AI-103 often tests whether candidates confuse 'Resource' (individual resource name) with 'Resource type' (category of resource) — the two sound similar but produce very different cost breakdowns.

How to eliminate wrong answers

Option A is wrong because 'Resource type' groups costs by the Azure resource provider/type category (e.g., all Cognitive Services accounts together), not by individual resource names. Option B is wrong because 'Meter category' groups by billing meter classification (e.g., 'Cognitive Services' or 'Storage'), which is a billing taxonomy, not a resource identifier. Option D is wrong because 'Location' groups by Azure region (e.g., East US, West Europe), which tells you where costs are incurred but not which specific resource.

Practice this question →

MCQhard

You are troubleshooting a performance issue where requests to an Azure OpenAI model deployment experience intermittent HTTP 429 errors. You examine Azure Monitor metrics and see that the 'Processed Tokens' metric is well below your provisioned limit, but the 'Requests' metric spikes. What is the root cause of the error?

A.The model weights have become corrupted and require redeployment.

B.The request rate (Transactions Per Second) has exceeded the provisioned limit, even though token volume is within bounds.

C.The Azure subscription has run out of monthly financial budget.

D.The Private Endpoint DNS resolution has failed.

AnswerB

Azure OpenAI applies separate quotas for tokens and requests. A spike in the Requests metric with tokens below the provisioned limit indicates the requests-per-minute or transactions-per-second ceiling was breached, which returns HTTP 429 regardless of token headroom.

Why this answer

HTTP 429 (Too Many Requests) from Azure OpenAI is triggered when the request rate — measured in Transactions Per Second (TPS) or Requests Per Minute (RPM) — exceeds the deployment's provisioned throughput, independent of token consumption. Since the Processed Tokens metric is below the limit but Requests is spiking, the rate limit on call count is the cause.

Exam trap

The trap is assuming 429 errors only occur when token quotas are exhausted — candidates overlook that request-rate (RPM/TPS) limits are enforced independently of token consumption.

How to eliminate wrong answers

Option A is wrong because corrupted model weights would produce errors or degraded output quality, not intermittent 429 rate-limit responses. Option C is wrong because running out of budget would typically result in billing alerts or service suspension, not HTTP 429 errors. Option D is wrong because Private Endpoint DNS failures manifest as connection timeouts or name resolution errors, not 429 responses.

Practice this question →

MCQmedium

Your company uses Azure Policy to enforce governance across all subscriptions. A developer attempts to deploy an Azure OpenAI resource in a region that is prohibited by corporate policy. What happens during the deployment?

A.Azure automatically moves the resource to an allowed region.

B.The resource is deployed successfully, but an email alert is sent to the administrator.

C.The deployment succeeds and automatically applies a remediation task.

D.The deployment is blocked and returns an error explaining the policy violation.

AnswerD

Azure Policy uses a deny effect that evaluates at resource-provider request time, so the deployment fails validation before any resource is created. The error names the violated policy assignment, giving the developer immediate feedback rather than allowing an out-of-region Azure OpenAI resource to provision.

Why this answer

Azure Policy operates as a guardrail at the control plane: when a deployment violates a Deny-effect policy, the Resource Manager blocks the request and returns an error describing the policy violation. The resource is never created, and the developer must remediate the request to comply.

Exam trap

The trap is assuming Azure Policy auto-remediates or auto-relocates non-compliant deployments; in reality, Deny policies hard-block the request and return an error.

How to eliminate wrong answers

Option A is wrong because Azure Policy does not silently relocate resources to allowed regions; it blocks non-compliant deployments rather than auto-correcting them. Option B is wrong because a Deny policy prevents deployment entirely — it does not allow the resource and merely send an alert. Option C is wrong because remediation tasks apply to existing non-compliant resources under DeployIfNotExists or Modify effects, not to a Deny-blocked deployment.

Practice this question →

Multi-Selecthard

Your company's compliance mandate requires that all data processed by Azure AI Speech and Document Intelligence services remain encrypted using keys managed entirely by your organization. Which THREE configuration steps are required? Each correct answer presents part of the solution.

Select 3 answers

A.Assign appropriate permissions for the AI service managed identity to access the Key Vault key.

B.Store the private key as plain text in the application source code.

C.Create an Azure Key Vault and enable soft-delete and purge protection.

D.Configure the customer-managed key (CMK) identifier on the Azure AI services account properties.

E.Disable all diagnostic logging across all Azure subscriptions.

AnswersA, C, D

The AI service's managed identity must hold Key Vault permissions (such as get, wrapKey, unwrapKey) so the service can reach the customer-managed key. Without this role assignment, encryption with your own key fails authorisation, breaking the compliance mandate.

Why this answer

Option A is correct because when using customer-managed keys (CMK) with Azure AI services, the AI service's managed identity must be granted access to the Key Vault key via an access policy or RBAC role (e.g., Key Vault Crypto Service Encryption User) so the service can wrap/unwrap the data encryption key. Option C is correct because you must provision an Azure Key Vault to hold the CMK, and enabling soft-delete and purge protection is mandatory for CMK scenarios to prevent accidental or malicious key deletion that would render encrypted data unrecoverable. Option D is correct because the CMK must be bound to the Azure AI services account by setting the customer-managed key identifier (the Key Vault key URI) in the account's encryption properties, which is what actually switches encryption from Microsoft-managed keys to your organization's keys.

Option B is wrong because storing private keys in plain text in source code is a severe security anti-pattern and is never a valid configuration step. Option E is wrong because disabling diagnostic logging has no bearing on encryption key management and would actually undermine compliance and auditing requirements.

Exam trap

AI-103 often tests whether candidates know that CMK requires all three components — Key Vault with soft-delete/purge protection, managed identity permissions, and the CMK identifier on the resource — and baits them with security-theater options like hardcoding keys or disabling logging.

Practice this question →

Multi-Selectmedium

Which TWO strategies are recommended for handling high-volume traffic to an Azure AI endpoint?

Select 2 answers

A.Enabling autoscaling on the endpoint.

B.Limiting access to a single user.

C.Hardcoding the IP address of the compute node.

D.Using only the 'Free' pricing tier.

E.Implementing a global load balancer (e.g., Front Door).

AnswersA, E

Autoscaling adjusts the endpoint's provisioned capacity dynamically as request volume rises, adding instances to absorb load and removing them when demand falls. This directly satisfies the high-volume traffic requirement while controlling cost during quiet periods.

Why this answer

Option A is correct because enabling autoscaling on the Azure AI endpoint dynamically adjusts the number of compute instances based on metrics such as CPU utilization, request rate, or token throughput, allowing the deployment to absorb high-volume traffic without manual intervention. Option E is correct because implementing a global load balancer such as Azure Front Door distributes incoming requests across multiple regional endpoints, provides layer-7 routing, TLS offload, caching, and failover, which collectively improve throughput and resilience under heavy load. Option B is incorrect because limiting access to a single user artificially restricts concurrency and does nothing to increase capacity for high-volume traffic.

Option C is incorrect because hardcoding the IP address of a compute node bypasses DNS-based load balancing and creates a single point of failure, preventing traffic from being spread across instances. Option D is incorrect because the Free pricing tier enforces strict rate and quota limits, making it unsuitable for high-volume production traffic.

Exam trap

AI-103 often tests the misconception that scaling can be achieved by limiting access or using free tiers, but high-volume traffic requires autoscaling and load balancing; candidates may also overlook the need for global distribution.

Practice this question →

Multi-Selecthard

You are designing a disaster recovery and high availability strategy for an enterprise Azure OpenAI deployment. Which THREE architectural components or practices should you include? Each correct answer presents part of the solution.

Select 3 answers

A.Configure Azure Monitor metric alerts to detect latency spikes or availability drops.

B.Implement client-side retry and failover logic to handle transient errors and regional failovers.

C.Rely exclusively on Azure Backup to snapshot live model memory states.

D.Deploy secondary Azure OpenAI resources in a paired Azure region.

E.Store all model weights locally on client laptops for offline execution.

AnswersA, B, D

Azure Monitor metric alerts on latency spikes and availability drops give the detection layer a DR strategy requires, exposing regional degradation before users are affected. Without this telemetry, failover decisions lack the trigger data needed to act promptly.

Why this answer

Option A is correct because Azure Monitor metric alerts on latency and availability metrics provide the observability needed to detect degradation of an Azure OpenAI resource and trigger operational or automated responses before users are severely impacted. Option B is correct because Azure OpenAI returns transient errors such as HTTP 429 (rate limiting) and 5xx responses, so client-side retry with exponential backoff and failover to a secondary endpoint/region is essential for resilience and continuity. Option D is correct because deploying secondary Azure OpenAI resources in a paired Azure region enables regional redundancy and supports failover if the primary region becomes unavailable, which is a core HA/DR pattern.

Option C is not correct because Azure Backup does not snapshot live model memory states or the internal runtime state of an Azure OpenAI model; it is for supported Azure resource data, not model inference memory. Option E is not correct because Azure OpenAI models run as a managed cloud service and cannot be executed offline on client laptops, and storing model weights locally is neither supported nor part of an Azure HA/DR design.

Exam trap

AI-103 often tests the misconception that Azure Backup can protect PaaS model state — the exam expects you to recognize that Azure OpenAI DR is about regional redundancy, client failover logic, and monitoring, not VM-style backups.

Practice this question →

MCQhard

You need to implement token-based authentication using Azure AD (Microsoft Entra ID) for a Python application consuming an Azure OpenAI resource. Which authorization header format must your application use to authenticate successfully?

A.Authorization: API-Key <api_key_value>

B.X-MS-Token: <access_token>

C.Authorization: Bearer <access_token>

D.Ocp-Apim-Subscription-Key: <access_token>

AnswerC

Microsoft Entra ID issues OAuth 2.0 access tokens that are presented as bearer credentials; the Azure OpenAI data plane expects the token in the Authorization header prefixed with the literal scheme name Bearer, followed by a space and the raw token string, satisfying the stem's token-based authentication requirement.

Why this answer

Azure OpenAI and most Azure AD-protected REST APIs expect OAuth 2.0 bearer tokens in the `Authorization: Bearer <access_token>` header. When using Microsoft Entra ID (Azure AD) token-based authentication, the application acquires an access token via MSAL or the Azure Identity SDK and passes it in this standard header format. This is the RFC 6750-compliant way to present a bearer token.

Exam trap

AI-103 often tests header format confusion, tricking candidates who pick `api-key` or API Management headers instead of the RFC 6750 bearer token format for Entra ID auth.

How to eliminate wrong answers

Option A is wrong because `Authorization: API-Key <api_key_value>` is not a valid scheme — API key authentication for Azure OpenAI uses the `api-key` header (not Authorization), and it is not token-based Entra ID auth. Option B is wrong because `X-MS-Token` is not a recognized authentication header for Azure OpenAI or Entra ID-protected resources. Option D is wrong because `Ocp-Apim-Subscription-Key` is used by Azure API Management to identify a subscription, not for Entra ID bearer token authentication, and it expects a subscription key, not an access token.

Practice this question →

MCQeasy

You are provisioning a multi-service Azure AI resource using an Azure Resource Manager (ARM) template. Which resource type should you specify in the template for a generic multi-service cognitive services account?

A.Microsoft.AI/cognitiveServices

B.Microsoft.CognitiveServices/projects

C.Microsoft.MachineLearningServices/workspaces

D.Microsoft.CognitiveServices/accounts

AnswerD

Microsoft.CognitiveServices/accounts is the ARM resource type that provisions a multi-service Azure AI account, letting one key and endpoint serve Vision, Language and other services. It directly satisfies the stem's requirement for a generic multi-service cognitive services account rather than a single-service resource type.

Why this answer

In Azure Resource Manager templates, a multi-service Azure AI (Cognitive Services) account is declared with the resource type 'Microsoft.CognitiveServices/accounts'. This resource type provisions a single account that exposes multiple AI service endpoints (such as Vision, Language, and Speech) under one key and endpoint, which is exactly what a generic multi-service resource requires.

Exam trap

AI-103 often tests the exact ARM resource type string, so candidates who guess 'Microsoft.AI/cognitiveServices' or confuse it with Machine Learning workspaces pick an invalid or wrong provider.

How to eliminate wrong answers

Option A is wrong because 'Microsoft.AI/cognitiveServices' is not a valid ARM resource provider namespace; the correct provider is 'Microsoft.CognitiveServices'. Option B is wrong because 'Microsoft.CognitiveServices/projects' is a child resource used for AI Foundry projects, not the top-level multi-service account. Option C is wrong because 'Microsoft.MachineLearningServices/workspaces' provisions an Azure Machine Learning workspace, which is a different service for ML model training and deployment, not a multi-service cognitive account.

Practice this question →

MCQeasy

What is the purpose of a 'Resource Group' in the context of Azure AI solutions?

A.To act as a logical container for managing related resources.

B.To provide high availability for the service.

C.To enforce network firewall rules.

D.To store the model weights.

AnswerA

A resource group is a logical container that groups related Azure resources so they share lifecycle, access control and deployment management. This satisfies the stem's requirement by providing that organisational boundary for Azure AI solution components.

Why this answer

A Resource Group in Azure is a logical container that holds related resources for an Azure solution, allowing you to manage, deploy, monitor, and track billing for resources as a group. It provides a way to organize resources by lifecycle, department, or project, and acts as the scope for RBAC and Azure Policy assignments. It does not inherently provide high availability, network security, or storage for model artifacts.

Exam trap

AI-103 often tests the misconception that a Resource Group provides operational features like high availability or security, when it is purely a logical management and governance boundary.

How to eliminate wrong answers

Option B is wrong because high availability is achieved through redundancy features like availability zones, paired regions, or load balancing, not through a Resource Group. Option C is wrong because network firewall rules are enforced by Azure Firewall, NSGs, or the resource's own firewall settings, not by the Resource Group. Option D is wrong because model weights are stored in storage accounts, container registries, or model registries, not in a Resource Group.

Practice this question →

MCQeasy

You are provisioning an Azure AI Language resource and want to ensure that all telemetry and activity logs are retained for compliance auditing over a 365-day period. Where should you configure this retention policy?

A.In the resource's Diagnostic settings by specifying a retention period on a storage account destination.

B.In the Microsoft Defender for Cloud security policy blade.

C.In the Azure AI Language service Studio configuration panel.

D.In the Azure Cost Management budget alert settings.

AnswerA

Diagnostic settings route resource logs to a storage account, where the retention period is set per log category. Specifying 365 days satisfies the compliance requirement, since Azure AI Language telemetry is only retained long-term through a diagnostic settings destination, not the resource's own transient logging.

Why this answer

Diagnostic settings in Azure allow you to configure the collection and retention of telemetry and activity logs. By specifying a retention period (e.g., 365 days) on a storage account destination, you ensure logs are retained for compliance auditing. This is the correct place to set retention policies for Azure AI Language resource logs.

Exam trap

AI-103 often tests the confusion between diagnostic settings and other security or cost features, where candidates might incorrectly choose Defender for Cloud or Cost Management for log retention instead of Diagnostic settings.

How to eliminate wrong answers

Option B is wrong because Microsoft Defender for Cloud security policy blade is for security posture management and threat protection, not for configuring log retention. Option C is wrong because the Azure AI Language service Studio configuration panel is for managing model training and deployment, not for telemetry retention. Option D is wrong because Azure Cost Management budget alert settings are for monitoring spending, not for log retention.

Practice this question →

Multi-Selectmedium

You are troubleshooting a deployment failure where an ARM template fails to provision an Azure OpenAI account. Which TWO potential causes should you investigate? Each correct answer presents part of the solution.

Select 2 answers

A.The subscription has exceeded its regional quota or model deployment quota limit.

B.The local workstation IP address is not whitelisted in Azure DevOps.

C.The client web browser cache is corrupted.

D.The requested region does not support Azure OpenAI model deployments.

E.The local git repository has uncommitted changes.

AnswersA, D

ARM provisioning fails when the subscription lacks available capacity, because Azure OpenAI model deployments consume regional quota for the chosen model and SKU. Exceeding that limit returns a quota error during template deployment, so quota must be checked first.

Why this answer

Option A is correct because Azure OpenAI provisioning fails when the target subscription has hit its regional quota or per-model deployment quota limit, so you must verify available quota in the chosen region before redeploying. Option D is correct because Azure OpenAI model deployments are only offered in specific regions, and requesting a region that does not support the model causes the ARM template to fail. Options B, C, and E do not belong: Azure DevOps IP whitelisting, browser cache corruption, and uncommitted local git changes affect pipeline connectivity, client rendering, and source control state respectively, none of which block ARM template provisioning of an Azure OpenAI account.

Exam trap

AI-103 often tests whether candidates can distinguish ARM deployment failures caused by Azure-side constraints (quota, region availability, RBAC) from local developer environment issues (git state, browser cache, IP allowlists) — the latter are planted as plausible-but-irrelevant distractors.

Practice this question →

Multi-Selecthard

You are conducting a security review of an Azure AI Search service and Azure OpenAI integration. You discover potential security misconfigurations. Which THREE remediation actions should you take to align with Azure security benchmarks? Each correct answer presents part of the solution.

Select 3 answers

A.Grant Contributor permissions to anonymous external users.

B.Enable diagnostic logging and configure alerts for unauthorized access attempts and HTTP 401/403 errors.

C.Disable public network access on services where private endpoints are fully implemented.

D.Expose admin API keys in client-side single-page applications for direct access.

E.Rotate all static API keys regularly and transition client applications to Microsoft Entra ID managed identities.

AnswersB, C, E

Diagnostic logging captures control-plane and data-plane operations, letting alerts fire on HTTP 401 and 403 responses that signal unauthorised access attempts. This satisfies the benchmark requirement for detecting and auditing authentication failures against the search and OpenAI resources.

Why this answer

Option B is correct because enabling diagnostic logging and configuring alerts for unauthorized access attempts and HTTP 401/403 errors provides the audit trail and detection capability required by Azure security benchmarks to identify and respond to authentication and authorization failures against Azure AI Search and Azure OpenAI. Option C is correct because disabling public network access once private endpoints are fully implemented enforces network isolation, ensuring traffic reaches the services only through the private endpoint (private link) rather than the public internet, which is a core Azure security benchmark recommendation. Option E is correct because rotating static API keys regularly limits the blast radius of leaked keys, and transitioning clients to Microsoft Entra ID managed identities eliminates long-lived shared secrets entirely by using token-based, identity-driven authentication.

Option A does not belong because granting Contributor to anonymous external users violates least privilege and exposes the services to unauthorized modification. Option D does not belong because embedding admin API keys in client-side single-page applications exposes full administrative credentials to anyone inspecting the browser, which is a critical secret-management anti-pattern.

Exam trap

AI-103 often tests whether candidates can distinguish security remediations from insecure anti-patterns disguised as convenience features — options like 'expose keys to SPAs' or 'grant anonymous Contributor' are deliberately planted as obvious-but-wrong distractors.

Practice this question →

MCQmedium

Your development team wants to deploy a new version of an Azure OpenAI model while ensuring zero downtime for client applications currently calling the existing model deployment. What is the recommended deployment strategy?

A.Overwrite the existing model deployment name with the new model version.

B.Delete the Azure OpenAI resource and provision a new one in the same region.

C.Create a new deployment with a distinct deployment name for the new model version, then update application configuration to point to the new deployment.

D.Downgrade the pricing tier to pause traffic while updating the model version.

AnswerC

Creating a separate deployment with a distinct name leaves the existing deployment serving live traffic untouched. Applications then switch their configuration to the new deployment once validated, giving zero downtime because both model versions coexist during the transition.

Why this answer

Azure OpenAI supports multiple simultaneous deployments of the same or different models under distinct deployment names within a single resource. By creating a new deployment for the updated model version and then switching application configuration to the new deployment name, traffic continues to be served by the old deployment until the cutover, achieving zero downtime. This also enables easy rollback by reverting the configuration.

Exam trap

AI-103 often tests the misconception that you must overwrite or recreate a deployment to change model versions; the correct pattern is side-by-side deployments with a configuration cutover.

How to eliminate wrong answers

Option A is wrong because overwriting the existing deployment name with a new model version causes an immediate switch, potentially breaking clients that depend on the prior model behavior and offering no rollback path. Option B is wrong because deleting and recreating the Azure OpenAI resource causes downtime, loses quota assignments, and requires reconfiguring keys, endpoints, and networking. Option D is wrong because pricing tiers cannot be used to pause traffic, and downgrading does not preserve availability or provide a controlled version transition.

Practice this question →

Multi-Selectmedium

Which TWO actions should you take to ensure that your Azure AI deployment is secure?

Select 2 answers

A.Keep the public IP exposed at all times.

B.Use Managed Identities for service-to-service communication.

C.Store all keys in a public GitHub repository.

D.Always use the latest TLS version for all communication.

E.Use the default 'Owner' role for all users.

AnswersB, D

Managed identities give Azure AI resources a Microsoft Entra ID-issued identity, eliminating embedded credentials or keys in code and configuration. This satisfies the stem's security requirement by removing secret sprawl and enabling auditable, least-privilege service-to-service access.

Why this answer

Option B is correct because Managed Identities let Azure AI services authenticate to other Azure resources (such as Key Vault, Storage, or Cognitive Services) through Microsoft Entra ID, eliminating the need to embed credentials or API keys in code and thus reducing the risk of secret leakage. Option D is correct because enforcing the latest TLS version (TLS 1.2 or 1.3) for all communication encrypts data in transit and protects against known protocol downgrade and cipher-suite vulnerabilities. Option A is wrong because leaving a public IP exposed at all times unnecessarily widens the attack surface; access should be restricted via private endpoints, VNet integration, or firewall rules.

Option C is wrong because storing keys in a public GitHub repository exposes secrets to anyone, leading to credential compromise. Option E is wrong because assigning the default 'Owner' role to all users violates least privilege and grants excessive control over the Azure AI deployment.

Exam trap

AI-103 often tests the misconception that exposing public IPs or using default owner roles is acceptable for convenience, but the exam expects recognition that least privilege and encrypted communication are non-negotiable for secure AI deployments.

Practice this question →

MCQmedium

Your company's security policy requires that all Azure AI Services accounts disable public network access completely. However, internal applications hosted inside a specific Azure Virtual Network must still communicate with the AI services. How should you configure network access?

A.Configure an inbound Network Security Group (NSG) rule on the AI resource subnet.

B.Disable public network access and configure a Private Endpoint for the resource.

C.Keep public network access enabled and rely on API keys for security.

D.Deploy a VPN gateway inside the Azure AI resource group.

AnswerB

A Private Endpoint assigns a private IP from the virtual network to the Azure AI Services resource, so traffic stays on the Microsoft backbone. Disabling public network access then blocks internet reachability while internal applications retain connectivity, meeting the security policy.

Why this answer

To disable public network access while allowing internal applications in a specific Azure Virtual Network to communicate with Azure AI Services, you should disable public network access and configure a Private Endpoint. This creates a private IP address in the VNet for the service, enabling secure private connectivity.

Exam trap

AI-103 often tests the confusion between network security groups and private endpoints, leading candidates to choose NSG rules when private connectivity to PaaS services is required.

How to eliminate wrong answers

Option A is wrong because an NSG rule on the AI resource subnet does not apply to the AI service itself; NSGs filter traffic to subnets, but the AI service is a PaaS offering, not a VM in your subnet. Option C is wrong because keeping public network access enabled violates the security policy. Option D is wrong because deploying a VPN gateway inside the resource group does not provide private connectivity to the AI service; a VPN gateway connects on-premises networks to Azure, but private access to PaaS services requires Private Endpoint or Service Endpoints.

Practice this question →

MCQeasy

You are provisioning a new Azure AI Vision resource in the Azure Portal. You need to choose between a 'F0' free pricing tier and an 'S0' standard pricing tier. What is a key limitation of selecting the F0 pricing tier?

A.It does not support regional data residency guarantees.

B.It disables diagnostic log streaming to Azure Monitor.

C.It restricts the total number of calls allowed per month and limits transaction rates.

D.It prohibits the use of managed identities for authentication.

AnswerC

F0 caps both the monthly transaction volume and the per-second call rate, so production workloads exhaust the quota quickly. S0 removes those caps and bills per call, making F0 suitable only for trials and evaluation.

Why this answer

The F0 (free) tier for Azure AI Vision is designed for evaluation and small-scale testing, and it enforces both a monthly call quota (e.g., 5,000 transactions per month for many Vision APIs) and a low transactions-per-second (TPS) rate limit. Exceeding either causes 429 throttling or 403 quota-exceeded errors, which is why F0 is unsuitable for production workloads.

Exam trap

AI-103 often tests the assumption that F0 disables security or compliance features (managed identity, data residency) — the trap is that F0's only real limitation is quota and rate, not feature availability.

How to eliminate wrong answers

Option A is wrong because regional data residency is a property of the resource's deployment region, not the pricing tier — F0 resources still reside in the chosen region and honor the same data residency commitments. Option B is wrong because diagnostic settings and log streaming to Azure Monitor are configured at the resource level and are available on F0, though the volume of logs is naturally lower due to lower traffic. Option D is wrong because managed identity support is a control-plane feature of the resource and is available on both F0 and S0 — authentication method is not gated by pricing tier.

Practice this question →

Multi-Selectmedium

You are preparing an ARM template to deploy an Azure AI multi-service account. Which TWO properties are mandatory within the ARM template resource definition? Each correct answer presents part of the solution.

Select 2 answers

A.VirtualMachineSize

B.sku

C.OperatingSystemType

D.KernelVersion

E.location

AnswersB, E

The sku property defines the pricing tier and feature set of the Azure AI multi-service account, and ARM requires it during resource creation because the platform must allocate the correct capacity and billing model before provisioning can succeed.

Why this answer

Option B (sku) is mandatory because an Azure AI multi-service (Cognitive Services) account resource requires a pricing/tier definition, e.g. "sku": {"name": "S0"}, to specify the billing tier and feature set of the account. Option E (location) is mandatory because every Azure resource, including a Cognitive Services multi-service account, must declare the Azure region where it is deployed, e.g. "location": "eastus". Options A (VirtualMachineSize), C (OperatingSystemType), and D (KernelVersion) do not belong because they are compute/VM-related properties relevant to virtual machines or VM scale sets, not to a Cognitive Services multi-service account, which is a PaaS resource with no OS or VM sizing attributes.

Exam trap

AI-103 often tests confusion between IaaS VM properties (VirtualMachineSize, OperatingSystemType) and PaaS Cognitive Services properties, tricking candidates into selecting VM-centric fields for an AI account resource.

Practice this question →

Multi-Selecthard

You are designing a high-availability architecture for an Azure AI Speech service solution. Which THREE practices should you incorporate into your design? (Choose three.)

Select 3 answers

A.Hardcode the primary region IP address in all client applications without using a routing DNS layer.

B.Configure Azure Front Door or Traffic Manager with health probes to route traffic away from unhealthy regions.

C.Set up Azure Monitor alert rules to notify operations teams of sudden spikes in server error rates or latency.

D.Deploy Speech resources in multiple Azure regions for active-passive or active-active failover.

E.Rely exclusively on a single-region deployment without backups to minimize operational complexity.

AnswersB, C, D

Azure Front Door or Traffic Manager health probes continuously test regional endpoints, automatically routing traffic away from unhealthy regions. This satisfies the stem's high-availability constraint by removing failed Speech endpoints from rotation, maintaining service continuity during regional outages.

Why this answer

Option B is correct because Azure Front Door or Traffic Manager with health probes provides DNS-based global load balancing and automatically routes clients away from an unhealthy Speech region, which is essential for high availability. Option C is correct because Azure Monitor alert rules on metrics such as server error rates and latency enable operations teams to detect degradation quickly and trigger failover or remediation before users are broadly impacted. Option D is correct because deploying Speech resources in multiple Azure regions supports active-passive or active-active failover, ensuring service continuity if one region becomes unavailable.

Option A is incorrect because hardcoding a primary region IP bypasses DNS-based failover and creates a single point of failure. Option E is incorrect because a single-region deployment without backups offers no redundancy and cannot meet high-availability requirements.

Exam trap

AI-103 often tests the misconception that simply deploying a resource in the cloud provides high availability, when in fact multi-region deployment plus health-probe-based routing and monitoring are required.

Practice this question →

MCQhard

You are designing a multi-tenant SaaS application on Azure. Each tenant requires isolation of their Azure OpenAI token usage and cost tracking. What is the recommended provisioning strategy to achieve strict cost and quota isolation per tenant?

A.Use a single Azure OpenAI resource for all tenants and track usage using custom HTTP headers.

B.Deploy all tenants in the F0 free pricing tier.

C.Provision a separate Azure OpenAI resource for each tenant.

D.Rely on Azure Cost Management resource group tags alone without resource separation.

AnswerC

A separate Azure OpenAI resource per tenant provides independent quota, rate limits and billing, giving strict cost and token isolation. Shared resources with tags or per-tenant keys cannot enforce hard quota separation, so dedicated resources meet the isolation requirement.

Why this answer

Provisioning a separate Azure OpenAI resource per tenant provides independent quota limits, separate keys, and distinct billing meters, which together deliver strict cost and quota isolation. This is the recommended multi-tenant pattern when isolation is a hard requirement.

Exam trap

AI-103 often tests whether candidates believe tags or headers can substitute for resource-level isolation — the trap is choosing tag-based tracking when the requirement is strict quota and cost isolation, which requires separate resources.

How to eliminate wrong answers

Option A is wrong because a single resource shares quota and billing across tenants; custom HTTP headers are not a native Azure OpenAI cost-tracking mechanism and cannot enforce per-tenant quota. Option B is wrong because the F0 free tier has severe rate and quota limits and is intended for evaluation, not production multi-tenant workloads. Option D is wrong because resource group tags alone provide reporting granularity but do not isolate quota or prevent one tenant from consuming another's capacity.

Practice this question →