CCNA Plan And Manage AN Azure AI Solution Questions

You need to ensure that an Azure AI services resource is accessible only from a specific virtual network. Which configuration should you update in the Azure portal?

Your organization is preparing for an annual external security audit. The auditor requests proof that all Azure AI resources comply with ISO 27001 standards. Where can you download the official compliance audit reports for Azure AI services?

Your development team needs to test a new Azure AI Language service feature without incurring ongoing charges when the service is idle. Which billing model is appropriate for initial prototyping?

Your organization is planning to deploy multiple Azure AI services and needs to implement robust cost management and governance practices. Which TWO actions should you take? (Choose two.)

You need to ensure that an AI model deployment is resilient to regional outages. What should you implement?

You are deploying an Azure OpenAI resource and want to authenticate client applications using Microsoft Entra ID instead of static API keys. Which role must be assigned to the application's managed identity to permit it to invoke model deployments?

You are deploying an Azure AI Document Intelligence container in an on-premises disconnected environment. The container requires periodic license validation against Azure. What is the maximum duration the container can operate offline before requiring reconnection to Azure for billing and metering validation?

You are deploying a model that requires significant GPU resources. You want to ensure the deployment only scales when the average CPU load exceeds 70%. Which feature of Azure AI managed endpoints do you configure?

You are setting up budget alerts for your Azure AI services to prevent unexpected overspending. Which Azure tool should you use to create these alerts and automatically trigger an action group when the budget threshold reaches 90%?

Your organization is establishing a governance framework for Azure AI resources. You need to ensure cost control, tagging compliance, and security posture management across all subscriptions. Which THREE Azure services or features should you deploy? Each correct answer presents part of the solution.

Your company requires that all Azure AI service endpoints are accessible only from within a specific Azure Virtual Network (VNet) and that public internet access is completely disabled. How should you configure the Azure AI resource networking settings?

Your enterprise organization operates under strict data residency and sovereignty requirements. You are deploying Azure OpenAI and Azure AI Language services. Which THREE architectural decisions ensure compliance with data residency mandates? Each correct answer presents part of the solution.

You are deploying an Azure AI resource and want to organize it logically within your Azure hierarchy. Which scope is the highest level at which you can assign Azure RBAC roles for your AI resource?

Which THREE authentication/authorization mechanisms are supported for accessing Azure AI services securely?

Your development team needs to deploy an Azure AI Search service and connect it to an Azure SQL Database containing source documents. Security requirements state that credentials must not be stored in application code. Which authentication method should you use between Azure AI Search and Azure SQL Database?

When configuring role-based access control (RBAC) for an Azure AI Services account, which TWO built-in roles are appropriate for assigning to users who only need to invoke AI models without managing the underlying resource infrastructure? Each correct answer presents part of the solution.

You need to export logs from your Azure AI service to an external SIEM (Security Information and Event Management) system. What is the best way to achieve this?

Which TWO monitoring strategies are effective for detecting 'data drift' in a deployed AI model?

You are designing a high-throughput, low-latency architecture for an Azure OpenAI application. Clients are distributed globally across North America, Europe, and Asia. To ensure minimal latency and high availability, you decide to deploy multiple Azure OpenAI instances in different regions. How should you route incoming client requests to the nearest optimal region?

When planning the deployment of an Azure AI Search service, which TWO sizing and capacity parameters must you configure during creation? Each correct answer presents part of the solution.

You are deploying an Azure AI Document Intelligence resource. You need to ensure that only client requests coming from your corporate public IP address range can access the endpoint. Which networking configuration should you apply?

You are migrating an Azure AI service from one region to another. What is the most efficient way to migrate the configuration?

You need to view the latency of requests made to an Azure AI services endpoint. Where do you find this information?

Which THREE options are available for configuring network security in Azure?

Which THREE security principles should you follow when managing Azure AI resources?

You are managing an enterprise Azure OpenAI resource that experiences bursty traffic patterns. To optimize cost without sacrificing availability during sudden workload spikes, you decide to implement a caching layer for frequent prompts and responses. Which Azure service should you integrate in front of Azure OpenAI?

You are deploying an Azure AI multi-service account in the West US region. The finance department requires that all resource deployment costs be tracked by department code using Azure Resource Manager tags. Which Azure feature should you use to enforce the mandatory application of the department tag across all future Azure AI resource deployments?

You are setting up diagnostic logging for an Azure OpenAI resource. Your security team mandates that all log streams must be exported in real-time to a security information and event management (SIEM) platform outside Azure, such as Splunk. Which destination should you configure in the Azure Monitor diagnostic setting?

Your enterprise architecture team is reviewing the security posture of an Azure AI deployment that handles sensitive financial documents. Which TWO actions should you implement to secure data in transit and at rest? (Choose two.)

You are managing an Azure OpenAI model deployment in an active-passive multi-region disaster recovery architecture. A regional outage occurs, and you failover traffic to the secondary region. However, clients report receiving authentication errors. What is the most likely cause?

Which authentication method is recommended to prevent 'key leakage' in Azure AI Services?

Your development team has created a custom model using Azure Machine Learning. You need to deploy this model as a real-time web service endpoint with auto-scaling capabilities. Which deployment target should you select?

You are designing an automated pipeline to deploy Azure AI Custom Vision projects using Infrastructure as Code (IaC) with Bicep. You need to reference an existing Custom Vision training resource in your deployment script without hardcoding its endpoint URL or primary key. Which Bicep construct should you use to retrieve these properties dynamically?

You are designing a secure hybrid network architecture for an Azure OpenAI resource. Virtual machines inside a spoke virtual network must access the OpenAI service via a Private Endpoint. Additionally, domain name resolution must rely on an enterprise private DNS server hosted on-premises connected via ExpressRoute. Which DNS zone must you configure in Azure?

You are deploying a custom AI model using a container image stored in Azure Container Registry (ACR). How do you ensure the deployment can pull the image securely?

You are configuring rate limiting and request throttling for multiple client applications consuming an Azure OpenAI endpoint. Different clients have different tier agreements (Bronze, Silver, Gold). Where should you implement these tiered rate-limiting policies?

You are deploying an Azure AI Speech resource using an ARM template. Which parameter defines the name of the resource instance?

Your development team requires secure, passwordless authentication from an Azure Function to an Azure AI Vision resource. Which authentication mechanism should you implement to adhere to security best practices?

What is the purpose of 'Azure Advisor' in an AI solution?

Which Azure feature allows you to control which users can modify or delete your Azure AI resources?

You are provisioning an Azure AI services account and need to select the kind of resource. Which kind parameter value should you select for an Azure OpenAI deployment?

Your organization has deployed an Azure AI Custom Vision model. You need to automate the retraining pipeline whenever new training images are uploaded to an Azure Blob Storage container. Which Azure service should you use to trigger the retraining pipeline?

You are deploying a custom text classification model using Azure AI Language. The model undergoes frequent retraining as new business data arrives. You need to establish a model versioning strategy that allows zero-downtime client updates while ensuring seamless rollback capability if regression occurs. What is the recommended architectural approach?

You are planning the deployment of Azure AI containers in an on-premises disconnected environment. Which THREE prerequisites and operational considerations must you address? Each correct answer presents part of the solution.

You are implementing a multi-region disaster recovery strategy for an Azure OpenAI deployment. If the primary region goes down, how should you configure traffic redirection to the secondary region using Azure Front Door?

You are managing an enterprise Azure OpenAI deployment with high traffic volumes. To prevent unexpected bill increases due to sudden usage spikes, you need to implement a cost-control mechanism that halts requests once a specific financial limit is reached. What is the native approach to achieve this?

You are planning the disaster recovery strategy for an Azure AI Translator resource. In the event of a regional outage in East US, you want to ensure minimal downtime and continuity of service. Which deployment model should you select?

Which THREE features are critical for managing the lifecycle of an AI model in a production environment?

You are optimizing the cost of your Azure AI infrastructure. You notice several resources are underutilized or incorrectly provisioned. Which THREE actions should you take to reduce unnecessary spending? Each correct answer presents part of the solution.

You are managing an enterprise Azure AI Search deployment. During an audit, you notice that index data is encrypted at rest using Microsoft-managed keys. Management mandates that you switch to customer-managed keys (CMK) stored in Azure Key Vault immediately without losing index data or rebuilding the service. How should you implement this?

Your organization requires that all Azure AI resources maintain rigorous logging and diagnostic tracking. Which TWO data categories can you collect using Azure Monitor diagnostic settings for Azure AI services? Each correct answer presents part of the solution.

You are setting up cost alerts for your Azure subscription, which contains several Azure AI services resources. You want to receive an email notification when your month-to-date spending reaches 80% of your $5,000 budget. Which feature should you configure?

You are managing costs for a multi-tenant Azure AI project. You need to attribute usage costs specifically to the 'Research' department. What is the most effective approach?

Your enterprise organization provisions multiple Azure AI Services accounts across different subscriptions. Security mandates that all API keys must be automatically rotated every 30 days without human intervention. Which Azure service configuration should you implement?

Your organization has strict compliance policies requiring all Azure AI Services endpoints to reject connections that do not use Transport Layer Security (TLS) version 1.3. Where can you enforce this minimum TLS version setting?

You are deploying an Azure AI service resource in the Azure portal. Which option specifies the geographic location where your data will be processed and stored?

Which THREE of the following are common Azure cost management tools that you should use to manage your AI solution budget?

Your company is deploying an Azure OpenAI gpt-4 model. You need to implement model versioning so that when Microsoft releases a newer model version, you can test it on a small subset of user traffic before rolling it out to all users. Which feature should you configure?

You are designing a disaster recovery strategy for an Azure AI Document Intelligence resource. The business requirement is a Recovery Point Objective (RPO) of zero and Recovery Time Objective (RTO) of less than 15 minutes. Which deployment strategy should you select?

Which TWO techniques are effective for improving the performance of an Azure AI application?

You are creating an Azure AI Services resource using Azure CLI. Which command parameter specifies the pricing tier of the resource?

Your company is provisioning a new Azure AI Services multi-service resource. The security team mandates that all network traffic between the client applications and the Azure AI endpoint must remain entirely within the Microsoft backbone network without traversing the public internet. Which feature should you configure?

You are managing cost allocation for multiple Azure AI services across different departments. Which TWO Azure tools or features can help you analyze and attribute these costs accurately? Each correct answer presents part of the solution.

You are troubleshooting a scenario where client applications are unable to connect to an Azure AI Language resource secured by a Private Endpoint. Which TWO troubleshooting steps should you perform? Each correct answer presents part of the solution.

You have an Azure AI Search service. You need to monitor the number of failed queries to identify potential indexing issues. Which tool should you use?

You are reviewing the Azure Cost Management dashboard to analyze spending on Azure AI services. Which grouping option allows you to see costs broken down by specific resource names?

You are troubleshooting a performance issue where requests to an Azure OpenAI model deployment experience intermittent HTTP 429 errors. You examine Azure Monitor metrics and see that the 'Processed Tokens' metric is well below your provisioned limit, but the 'Requests' metric spikes. What is the root cause of the error?

Your company uses Azure Policy to enforce governance across all subscriptions. A developer attempts to deploy an Azure OpenAI resource in a region that is prohibited by corporate policy. What happens during the deployment?

Your company's compliance mandate requires that all data processed by Azure AI Speech and Document Intelligence services remain encrypted using keys managed entirely by your organization. Which THREE configuration steps are required? Each correct answer presents part of the solution.

Which TWO strategies are recommended for handling high-volume traffic to an Azure AI endpoint?

You are designing a disaster recovery and high availability strategy for an enterprise Azure OpenAI deployment. Which THREE architectural components or practices should you include? Each correct answer presents part of the solution.

You need to implement token-based authentication using Azure AD (Microsoft Entra ID) for a Python application consuming an Azure OpenAI resource. Which authorization header format must your application use to authenticate successfully?

You are provisioning a multi-service Azure AI resource using an Azure Resource Manager (ARM) template. Which resource type should you specify in the template for a generic multi-service cognitive services account?

What is the purpose of a 'Resource Group' in the context of Azure AI solutions?

You are provisioning an Azure AI Language resource and want to ensure that all telemetry and activity logs are retained for compliance auditing over a 365-day period. Where should you configure this retention policy?