CCNA Plan And Manage An Azure Ai Solution Questions — Page 2 of 2

MCQmedium

Your organization has multiple Azure AI services deployed across different resource groups. Your security officer requests a centralized dashboard to monitor security recommendations, vulnerability assessments, and compliance posture for all AI resources. Which Azure service should you open?

A.Azure Advisor

B.Microsoft Entra ID protection portal

C.Azure Policy compliance blade

D.Microsoft Defender for Cloud

AnswerD

Microsoft Defender for Cloud provides a centralised secure score, security recommendations, vulnerability assessment and regulatory compliance dashboard spanning subscriptions and resource groups. It satisfies the requirement to aggregate AI resource posture centrally, unlike per-service metrics or Log Analytics, which lack built-in recommendation and compliance engines.

Why this answer

Microsoft Defender for Cloud provides a centralized security posture management dashboard that aggregates security recommendations, vulnerability assessments, regulatory compliance, and threat protection across Azure resources, including Azure AI services. It is the correct service to open when a security officer requests a unified view of security recommendations and compliance posture across multiple resource groups.

Exam trap

AI-103 often tests the confusion between Azure Policy (compliance rules) and Defender for Cloud (security posture + threat protection), so candidates who see 'compliance posture' and pick Azure Policy miss the broader security dashboard requirement.

How to eliminate wrong answers

Option A is wrong because Azure Advisor provides cost, performance, reliability, and operational recommendations, not security vulnerability assessments or compliance posture. Option B is wrong because Microsoft Entra ID Protection focuses on identity risk (sign-in risk, compromised credentials), not resource-level security posture for AI services. Option C is wrong because Azure Policy compliance shows which policies are compliant or non-compliant, but it does not include vulnerability assessments or the broader security recommendations that Defender for Cloud aggregates.

Practice this question →

Multi-Selecthard

You are designing a deployment strategy for an Azure AI Custom Vision project in an enterprise pipeline. Which THREE practices should you follow to ensure secure and repeatable deployments? Each correct answer presents part of the solution.

Select 3 answers

A.Store API keys and connection strings securely in Azure Key Vault rather than hardcoding them.

B.Manually create and configure all production resources directly in the Azure portal without documentation.

C.Use Infrastructure as Code (ARM or Bicep) to provision Azure resources consistently.

D.Implement automated integration and validation tests in CI/CD pipelines before production release.

E.Store production API keys as plaintext comments in Bicep template files.

AnswersA, C, D

Hardcoded credentials in pipeline definitions or source control leak secrets and cannot be rotated safely. Azure Key Vault centralises storage with access policies and auditing, so Custom Vision training and prediction keys are retrieved at runtime, satisfying the secure-deployment half of the scenario.

Why this answer

Option A is correct because storing API keys and connection strings in Azure Key Vault keeps secrets out of source code and pipeline logs, and Custom Vision training/prediction keys can be referenced at runtime via Key Vault references or managed identities, supporting secure deployments. Option C is correct because Infrastructure as Code with ARM templates or Bicep provisions Azure resources (Custom Vision accounts, storage, compute) idempotently and consistently across environments, which is essential for repeatable deployments. Option D is correct because automated integration and validation tests in CI/CD pipelines verify that the deployed Custom Vision endpoint, keys, and model behavior work before production release, catching regressions and misconfigurations early.

Option B is incorrect because manual portal configuration is error-prone, undocumented, and not repeatable, undermining both security and consistency. Option E is incorrect because embedding production API keys as plaintext comments in Bicep files exposes secrets in source control and violates secure secret-management practices.

Exam trap

AI-103 often tests secure DevOps habits, so the trap is selecting manual portal configuration or plaintext secrets because they seem faster than implementing Key Vault and IaC.

Practice this question →

MCQhard

You are auditing your Azure AI services for cost optimization. You discover an Azure AI Search service that has been over-provisioned with too many search units and replica nodes. How can you right-size the service without losing your existing indexes?

A.Switch the pricing tier from Standard to Free.

B.Export all index definitions, delete the service, and re-import the indexes into a new Basic tier service.

C.Modify the scale settings in the Azure portal to reduce the number of replicas and partitions.

D.Delete the search service and recreate it with fewer replicas and partitions.

AnswerC

Scaling down via the scale blade adjusts resource allocation while preserving index data.

Why this answer

Azure AI Search lets you change scale settings — the number of replicas and partitions — directly in the portal without deleting the service, and existing indexes are preserved. Reducing replicas lowers query throughput capacity while reducing partitions lowers storage and indexing capacity, so you can right-size to match actual load. This is the non-destructive way to optimize cost.

Exam trap

AI-103 often tests whether candidates know that scaling is non-destructive — the trap is choosing delete-and-recreate options (B or D) or an unsupported tier downgrade (A) when the portal scale settings (C) achieve the goal without data loss.

How to eliminate wrong answers

Option A is wrong because you cannot switch a Standard tier search service to Free — tier changes to Free are not supported, and Free has hard limits (1 replica, 1 partition, 50 MB) that would not accommodate existing indexes. Option B is wrong because exporting, deleting, and re-importing into a Basic tier is destructive and unnecessary; Basic also has a 2 GB per-partition limit that may not fit existing data. Option D is wrong because deleting and recreating the service destroys all indexes and requires rebuilding them, which is exactly what the question says to avoid.

Practice this question →

MCQmedium

You are deploying a custom text classification model using Azure AI Language. You need to implement cost management controls and track exact expenditures by tagging the Azure AI resource with the internal project cost center 'CC-409'. Where should you configure these tags in the Azure Portal?

A.Within the Networking blade under Private endpoint connections

B.Under the Resource management > Tags section of the Azure AI Services resource blade

C.In the Access control (IAM) settings as a custom role assignment

D.In the Diagnostic settings by creating a new metric alert rule

AnswerB

Tags applied at the Azure AI Services resource blade propagate to the underlying resource for cost reporting. Configuring them under Resource management > Tags attaches the CC-409 cost centre directly to the billable resource, enabling expenditure tracking in Cost Management.

Why this answer

Tags in Azure are configured under the Resource management > Tags section of the Azure AI Services resource blade. This allows you to assign metadata such as cost center 'CC-409' to the resource, which is then used for cost tracking and management. Tags are key-value pairs that can be applied to resources, resource groups, and subscriptions for organizational and billing purposes.

Exam trap

AI-103 often tests the confusion between resource tagging and other management features like IAM or diagnostic settings, where candidates might incorrectly choose IAM for cost tracking instead of the Tags section.

How to eliminate wrong answers

Option A is wrong because the Networking blade under Private endpoint connections is for configuring private endpoints and network isolation, not for tagging resources. Option C is wrong because Access control (IAM) settings manage role assignments and permissions, not resource metadata or cost tracking. Option D is wrong because Diagnostic settings are used to configure logging and metrics export, not for tagging or cost allocation.

Practice this question →

MCQeasy

Your organization requires that all data sent to Azure OpenAI Service remains encrypted using a key that your security team fully controls and rotates. Which feature should you configure during resource creation?

A.Azure Information Protection client-side encryption

B.Customer-managed keys (CMK) with Azure Key Vault

C.Service-managed keys (Default encryption)

D.Transparent Data Encryption with a SQL Managed Instance

AnswerB

Customer-managed keys with Azure Key Vault satisfy the requirement for full key control and rotation, since your security team owns the key material rather than Microsoft. Data at rest in Azure OpenAI Service is encrypted with your Key Vault key, and rotating that key re-wraps the data encryption key without redeployment.

Why this answer

Customer-managed keys (CMK) with Azure Key Vault allow an organization to supply and control the encryption keys used to protect data at rest in Azure OpenAI Service. This satisfies the requirement for full key control and rotation by the security team, as opposed to Microsoft-managed keys.

Exam trap

The trap is confusing client-side encryption tools (Azure Information Protection) or database-specific encryption (TDE) with the platform-level CMK feature that governs Azure OpenAI data-at-rest encryption.

How to eliminate wrong answers

Option A is wrong because Azure Information Protection is a client-side data classification and encryption tool for documents, not a mechanism for encrypting Azure OpenAI service data at rest. Option C is wrong because service-managed (default) keys are controlled by Microsoft, not the customer, so they fail the 'fully controls and rotates' requirement. Option D is wrong because Transparent Data Encryption applies to Azure SQL Database, not Azure OpenAI Service.

Practice this question →

MCQhard

You are configuring diagnostic settings for an Azure AI Search service to audit administrative actions and query logs. Which destination should you choose if you want to stream these logs into a SIEM tool like Microsoft Sentinel for real-time security analysis?

A.Send to an Azure DevOps pipeline

B.Export to a local CSV file via Azure CLI

C.Send to an Event Hub

D.Archive to a storage account

AnswerC

Event Hubs provides the streaming ingestion endpoint that Microsoft Sentinel consumes natively, so diagnostic logs flow into the SIEM in near real time. Log Analytics and Storage would require extra connectors or polling, failing the real-time security analysis constraint.

Why this answer

Azure AI Search diagnostic settings support three export destinations: Log Analytics workspace, Azure Storage account, and Azure Event Hubs. Event Hubs is the correct choice for streaming telemetry in near real-time to external SIEM platforms such as Microsoft Sentinel, Splunk, or QRadar, because Sentinel natively ingests from Event Hubs via its data connectors. This enables continuous, low-latency forwarding of administrative and query logs for correlation and alerting.

Exam trap

AI-103 often tests the confusion between storage accounts (for archival/retention) and Event Hubs (for real-time streaming to SIEM), so candidates who see 'audit logs' and reflexively pick storage miss the 'real-time' keyword.

How to eliminate wrong answers

Option A is wrong because Azure DevOps pipelines are CI/CD orchestration tools, not log ingestion endpoints, and cannot receive diagnostic settings streams. Option B is wrong because exporting to a local CSV via Azure CLI is a manual, pull-based operation with no real-time streaming capability and no native SIEM integration. Option D is wrong because archiving to a storage account is designed for long-term retention and compliance, not for real-time streaming; storage is a batch/query destination, not a push-based event pipeline.

Practice this question →

MCQhard

You have an Azure AI application that is hitting rate limits (429 errors). You need to determine which specific client application is causing the issue. How do you identify this?

A.Check the 'Activity Log'.

B.Increase the resource quota in the 'Quotas' blade.

C.Enable diagnostic logging to Log Analytics and run a KQL query.

D.Restart the AI service.

AnswerC

Diagnostic logging streams per-request records into Log Analytics, where KQL can filter and aggregate 429 responses by caller identity, such as the client application ID. This satisfies the stem's requirement to pinpoint which specific client application triggers the rate limiting, rather than merely confirming that throttling occurs.

Why this answer

Diagnostic logging to Log Analytics captures per-request telemetry including the caller identity, subscription, resource, operation name, and HTTP status code, so a KQL query filtering on ResponseCode == 429 and summarizing by CallerIpAddress or identity reveals which client is exhausting the quota. The Activity Log only records control-plane operations (resource create/update/delete), not data-plane inference calls, so it cannot show which app is making the requests.

Exam trap

AI-103 often tests whether candidates confuse the Activity Log (control plane) with diagnostic logs (data plane), so the trap is picking Activity Log because it sounds like the place to 'see what happened' when only diagnostic logs contain per-request caller data.

How to eliminate wrong answers

Option A is wrong because the Activity Log records ARM control-plane events such as deployments and role assignments, not individual inference requests, so it has no visibility into which client triggered 429s. Option B is wrong because raising the quota masks the symptom rather than identifying the offending client, and it may not even be permitted if the subscription is already at the regional ceiling. Option D is wrong because restarting the AI service does not diagnose anything; it briefly clears state and may even worsen throttling if clients retry aggressively.

Practice this question →

Multi-Selecthard

You are configuring network isolation and security for an Azure AI Search service that connects to an Azure SQL Database backend. Which THREE features can you utilize to secure this data flow? (Choose three.)

Select 3 answers

A.IP firewall rules restricting Azure SQL Database access to the Azure AI Search service outbound IPs.

B.Azure Private Endpoint for Azure AI Search and Azure SQL Database

C.Managed identities and secure connection strings with Entra authentication where supported.

D.Disabling all transport layer security (TLS) requirements to speed up query execution.

E.Storing plain-text database admin credentials in the search index configuration file.

AnswersA, B, C

IP firewall rules on Azure SQL Database whitelist the Azure AI Search service's outbound IP addresses, permitting indexer connections while blocking other internet sources. This satisfies the restriction requirement at the database server level, though it operates over the public endpoint rather than a private one.

Why this answer

Option A is correct because Azure SQL Database supports server-level and database-level IP firewall rules, and you can allow the specific outbound IP addresses of the Azure AI Search service (its public egress IPs) so only that traffic reaches the SQL server. Option B is correct because Azure Private Endpoint creates a private IP address in your VNet for both Azure AI Search and Azure SQL Database, so the data flow stays on the Microsoft backbone/private network instead of traversing the public internet, and it can be combined with disabling public access. Option C is correct because Azure AI Search indexers can use a managed identity (system-assigned or user-assigned) to authenticate to Azure SQL Database with Microsoft Entra ID, and secure connection strings avoid embedding credentials in code or configuration.

Option D is wrong because disabling TLS would remove encryption in transit and weaken security, not legitimately secure the data flow, and TLS does not meaningfully slow query execution in this context. Option E is wrong because storing plain-text admin credentials in a search index configuration file exposes secrets and is a security anti-pattern, not a supported or recommended way to secure the connection.

Exam trap

AI-103 often tests the misconception that disabling TLS or embedding credentials improves performance or simplicity — both are security failures, not valid isolation features.

Practice this question →

MCQhard

You are managing an Azure AI Search service with multiple replicas and partitions. During peak query hours, latency increases significantly, and CPU utilization on the search service hits 95%. You need to scale the service to improve query throughput without altering the index data schema. Which scaling action should you take?

A.Increase the number of search partitions.

B.Disable semantic ranking to reduce compute overhead.

C.Increase the number of search replicas in the Azure portal or via CLI.

D.Migrate the service to the Free pricing tier.

AnswerC

Adding replicas distributes query load across more instances, directly relieving the 95% CPU saturation during peak hours and raising query throughput. Replicas serve queries only; partitions store and index data, so adding replicas leaves the index schema untouched, satisfying the stem's constraint.

Why this answer

Adding replicas increases the number of copies of the index that can serve queries, directly improving query throughput and distributing CPU load across more nodes. Since the issue is high query CPU utilization and latency during peak hours, scaling replicas is the correct horizontal scale-out for read/query performance.

Exam trap

AI-103 often tests the replica-vs-partition distinction, so candidates pick partitions for a query-throughput problem when partitions actually address storage and indexing scale, not query concurrency.

How to eliminate wrong answers

Option A is wrong because partitions scale storage and write/indexing throughput, not query concurrency; adding partitions can even increase query fan-out cost. Option B is wrong because disabling semantic ranking reduces functionality rather than scaling capacity, and it does not address the underlying CPU saturation. Option D is wrong because the Free tier has severe limits (no scaling, low storage) and would worsen the problem.

Practice this question →

MCQhard

You are deploying an Azure AI Speech container on an Azure Kubernetes Service (AKS) cluster. Your security policy dictates that pod-to-pod communication within the cluster must be encrypted in transit using mTLS, and egress traffic to Azure must flow through a strict outbound firewall. Which Kubernetes feature should you implement?

A.Azure Container Registry vulnerability scanning

B.Kubernetes Network Policies combined with a service mesh for mTLS

C.Azure Bastion deployed inside the AKS worker node subnet

D.AKS cluster auto-scaler configuration

AnswerB

Network policies govern IP-level pod isolation, while a service mesh enforces mTLS encryption for pod-to-pod communication.

Why this answer

Kubernetes Network Policies enforce pod-level traffic rules (including egress restrictions to a firewall), while a service mesh (e.g., Istio, Linkerd, or Open Service Mesh) provides automatic mTLS for pod-to-pod communication. Together they satisfy both requirements: encrypted in-transit pod traffic and strict egress control. This is the standard AKS pattern for zero-trust pod networking.

Exam trap

AI-103 often tests whether candidates conflate cluster-level security features (image scanning, auto-scaler, Bastion) with pod-level networking controls (Network Policies, service mesh), tricking them into picking a tangential AKS feature.

How to eliminate wrong answers

Option A is wrong because Azure Container Registry vulnerability scanning inspects image layers for CVEs; it has nothing to do with runtime pod-to-pod encryption or egress firewalling. Option C is wrong because Azure Bastion provides secure RDP/SSH access to VMs from the Azure portal — it does not encrypt pod-to-pod traffic or control egress. Option D is wrong because the AKS cluster auto-scaler adjusts node pool size based on demand; it does not address mTLS or egress firewall requirements.

Practice this question →

MCQeasy

You are provisioning an Azure AI services account and want to view your current API key. Where can you retrieve the API key in the Azure portal?

A.Resource graph explorer

B.Azure Advisor cost optimization pane

C.Azure Active Directory overview page

D.Keys and Endpoint blade of the resource

AnswerD

The Keys and Endpoint blade exposes both Key1 and Key2 for the Azure AI services resource, letting you copy a key directly without regenerating it. This satisfies the stem's requirement to view the current API key in the Azure portal, since the blade displays existing key values rather than only offering rotation.

Why this answer

In the Azure portal, the API key and endpoint for an Azure AI services (Cognitive Services) resource are found on the 'Keys and Endpoint' blade of that resource. This blade displays Key1 and Key2, the endpoint URL, and the region, and allows regenerating the keys. It is the standard location for retrieving credentials used by SDKs and REST calls.

Exam trap

AI-103 often tests portal navigation knowledge — candidates may overthink and pick a governance or monitoring blade, but the API key is always on the resource's own Keys and Endpoint blade, not in directory or advisor views.

How to eliminate wrong answers

Option A is wrong because Resource Graph Explorer is a tool for querying and exploring Azure resources via Kusto queries — it does not expose service keys. Option B is wrong because Azure Advisor's cost optimization pane provides recommendations to reduce spend, not credentials. Option C is wrong because the Azure Active Directory (Entra ID) overview page manages identities, tenants, and directory settings, not AI service API keys.

Practice this question →

Multi-Selectmedium

You are planning the security architecture for an enterprise Azure AI multi-service account. Management requires that access to the resource be strictly controlled and audited. Which TWO security features or configurations should you implement? Each correct answer presents part of the solution.

Select 2 answers

A.Disable local authentication (API key access) and require Microsoft Entra ID authentication.

B.Store all admin API keys permanently in an unencrypted Azure Blob Storage container.

C.Configure an Azure Private Endpoint to restrict data access to the virtual network.

D.Grant the Contributor role to all end-user client applications.

E.Enable anonymous public access across all subnets.

AnswersA, C

Disabling local authentication removes API-key access, forcing every request to authenticate through Microsoft Entra ID. This satisfies the stem's requirement for strictly controlled, auditable access, since Entra ID issues tokens tied to identities that can be logged and governed.

Why this answer

Option A is correct because disabling local authentication on the Azure AI multi-service account removes API-key-based access, forcing all callers to authenticate through Microsoft Entra ID (formerly Azure AD), which enables identity-based access control, conditional access, and full audit logging of who accessed the resource. Option C is correct because configuring an Azure Private Endpoint assigns a private IP address from your virtual network to the Azure AI service, so data-plane traffic stays on the Microsoft backbone and the resource can be restricted from public network access, satisfying strict network-level control and auditability. Option B is wrong because storing admin API keys permanently in an unencrypted Blob container exposes credentials and directly contradicts the requirement for strictly controlled, audited access.

Option D is wrong because granting the Contributor role to all end-user client applications violates least privilege and gives broad management-plane rights rather than scoped data access. Option E is wrong because enabling anonymous public access across all subnets removes authentication and network restrictions entirely, which is the opposite of the required security posture.

Exam trap

The trap is selecting options that sound convenient (storing keys, broad roles) instead of least-privilege and network isolation — candidates must recognize that 'strictly controlled and audited' implies Entra ID auth and Private Endpoint.

Practice this question →

MCQmedium

Your organization is deploying an Azure OpenAI resource. Your security policy requires that all network traffic destined for the OpenAI service must traverse a secure hub-and-spoke virtual network topology and pass through an Azure Firewall instance. How should you route outbound traffic from your application subnet to Azure OpenAI?

A.Configure Azure Traffic Manager dns routing.

B.Attach an Azure Bastion subnet to the firewall.

C.Rely on automatic default system routing without route tables.

D.Configure User Defined Routes (UDR) on the application subnet with a next hop pointing to the Azure Firewall.

AnswerD

User Defined Routes override Azure's default system routes, forcing the application subnet's outbound traffic to the firewall's private IP as next hop. This satisfies the policy that all traffic to Azure OpenAI traverses the hub-and-spoke topology and the Azure Firewall instance.

Why this answer

User Defined Routes (UDR) let you override Azure's default system routes by associating a custom route table with the application subnet. By setting the next hop type to 'Virtual appliance' and pointing to the Azure Firewall's private IP, all egress traffic (including to the Azure OpenAI endpoint) is forced through the firewall for inspection and policy enforcement. This is the standard hub-and-spoke pattern for centralized network security.

Exam trap

AI-103 often tests whether candidates confuse DNS-based traffic steering (Traffic Manager) or access services (Bastion) with actual packet-path control, which only UDRs and a virtual appliance next hop provide.

How to eliminate wrong answers

Option A is wrong because Azure Traffic Manager is a DNS-based global load balancer and cannot force traffic through a firewall or alter the data path. Option B is wrong because Azure Bastion provides RDP/SSH access to VMs over TLS and has nothing to do with routing application subnet traffic. Option C is wrong because default system routes send internet-bound traffic directly out via Azure's backbone, bypassing the firewall entirely, which violates the security policy.

Practice this question →

MCQeasy

Which command line tool is primarily used for managing Azure resources, including AI services, from a terminal?

A.Azure PowerShell.

B.Azure CLI.

C.Docker.

D.Kubectl.

AnswerB

Azure CLI provides cross-platform terminal commands that directly manage Azure resources, including AI services, satisfying the stem's requirement for a command line tool. Unlike portal-based or SDK approaches, it exposes resource provisioning and configuration through scriptable `az` commands, enabling automation of AI service deployment and management from any shell.

Why this answer

Azure CLI is the cross-platform command-line tool designed to create, manage, and automate Azure resources, including Azure AI services, from a terminal. It provides commands such as 'az cognitiveservices account create' and 'az ml' for AI workloads, making it the primary terminal-based management tool.

Exam trap

The trap here is conflating Azure PowerShell with Azure CLI; both manage Azure, but the question asks for the primary terminal tool, and Azure CLI is the cross-platform, shell-agnostic answer.

How to eliminate wrong answers

Option A is wrong because Azure PowerShell is a PowerShell module for managing Azure, not the primary cross-platform CLI tool referenced by the question's 'command line tool' phrasing; it is also shell-specific. Option C is wrong because Docker is a containerization platform, not an Azure resource management tool. Option D is wrong because Kubectl manages Kubernetes clusters, not general Azure resources or AI services.

Practice this question →

Multi-Selectmedium

When planning the model selection and versioning lifecycle for Azure OpenAI deployments in an enterprise environment, which TWO practices should you follow? (Choose two.)

Select 2 answers

A.Use deprecated model versions indefinitely to maintain identical outputs.

B.Monitor Microsoft documentation and deprecation notices for model version lifecycles.

C.Automatically upgrade all production model deployments to the latest preview version the moment it is released.

D.Test new model versions in a staging or development environment before promoting them to production.

E.Never update model versions once deployed to avoid any future validation work.

AnswersB, D

Monitoring Microsoft documentation and deprecation notices satisfies the lifecycle-planning constraint by surfacing retirement dates and successor model versions before Azure OpenAI retires a deployment. This lets you schedule migrations and pin versions deliberately, avoiding unexpected service disruption when a model version reaches end of life.

Why this answer

Option B is correct because Azure OpenAI model versions have defined lifecycles and Microsoft publishes deprecation and retirement notices; monitoring official documentation lets you plan migrations before a version is retired and avoid unexpected service disruption. Option D is correct because new model versions can change output quality, latency, and behavior, so validating them in a staging or development environment with representative workloads before promoting to production is the standard safe deployment practice. Option A is wrong because deprecated model versions are eventually retired and cannot be used indefinitely, and pinning to them does not guarantee identical outputs across the service.

Option C is wrong because automatically upgrading production to the latest preview version bypasses testing and exposes production workloads to unvalidated, non-GA behavior. Option E is wrong because refusing to ever update model versions leads to forced migrations when retirement occurs and accumulates unmanaged technical debt.

Exam trap

AI-103 often tests the tension between 'always use the latest' and 'validate before promoting', tricking candidates into picking auto-upgrade or never-update extremes instead of the balanced staging-plus-monitoring approach.

Practice this question →

MCQhard

You need to secure communications between an Azure App Service hosting your web app and an Azure AI Computer Vision service. The web app must authenticate to Computer Vision without storing API keys in application settings. Which feature should you enable?

A.Managed Identity on the App Service and RBAC role assignment on the Computer Vision resource.

B.API Management subscription keys

C.Cross-Origin Resource Sharing (CORS)

D.Storage account shared access signatures (SAS)

AnswerA

Managed Identity gives the App Service an automatically rotated identity in Microsoft Entra ID, and an RBAC role assignment on the Computer Vision resource authorises it. This removes the need to store API keys in application settings, satisfying the stem's constraint.

Why this answer

Enabling a managed identity on the App Service and assigning an appropriate RBAC role on the Computer Vision resource lets the app obtain Azure AD tokens automatically, eliminating the need to store API keys in application settings. The managed identity is trusted by Azure AD, and the RBAC role grants access to the Computer Vision resource. This is the recommended keyless authentication pattern for service-to-service communication in Azure.

Exam trap

AI-103 often tests keyless authentication, and the trap is choosing API Management subscription keys because they sound like a secure API access mechanism, when they are still static secrets that violate the no-stored-keys requirement.

How to eliminate wrong answers

Option B (API Management subscription keys) is wrong because subscription keys are still static secrets that must be stored and rotated, which does not meet the requirement of avoiding stored credentials. Option C (Cross-Origin Resource Sharing) is wrong because CORS is a browser security mechanism controlling cross-origin requests, not an authentication or authorization mechanism between services. Option D (Storage account shared access signatures) is wrong because SAS tokens apply to Azure Storage, not Computer Vision, and they are still time-limited secrets that must be managed.

Practice this question →

MCQmedium

You are deploying an Azure OpenAI GPT-4 model in a region experiencing high demand, and you need to guarantee a dedicated throughput level without contending with other tenants. Which deployment type should you select?

A.Serverless deployment

B.Standard deployment

C.Provisioned (PTU) deployment

D.Batch deployment

AnswerC

Provisioned throughput units reserve dedicated model capacity for your deployment, guaranteeing a fixed throughput level that is not shared with other tenants. This removes the contention and variable latency inherent in standard pay-as-you-go deployments during periods of high regional demand.

Why this answer

Provisioned Throughput Units (PTU) deployments reserve dedicated model capacity for your subscription, guaranteeing consistent throughput and latency without contending with other tenants. This is the only deployment type that provides the dedicated capacity and isolation the scenario requires. Standard and serverless deployments share pooled capacity and can be throttled under high regional demand.

Exam trap

AI-103 often tests the distinction between shared-capacity deployments (Standard/Serverless) and dedicated-capacity deployments (PTU), so candidates focused on cost pick Standard and miss the 'guaranteed dedicated throughput' requirement.

How to eliminate wrong answers

Option A is wrong because serverless (pay-as-you-go) deployments draw from shared regional capacity and offer no throughput guarantee, making them unsuitable when demand is high. Option B is wrong because Standard deployments also use shared capacity with token-based billing and can experience throttling or variable latency under load. Option D is wrong because Batch deployments are designed for asynchronous, large-volume jobs with relaxed latency requirements, not for guaranteed interactive throughput.

Practice this question →

MCQmedium

Your development team needs to deploy an Azure AI Language resource that can be accessed from an on-premises datacenter via an ExpressRoute circuit without traversing the public internet. Which Azure feature should you configure?

A.Azure Bastion host subnet

B.Azure Private Endpoint

C.NAT gateway resource attachment

D.Azure Front Door with Web Application Firewall

AnswerB

Azure Private Endpoint assigns a private IP from your VNet to the Azure AI Language resource, so traffic from on-premises over ExpressRoute reaches it via private peering and never traverses the public internet, satisfying the stated no-public-internet constraint.

Why this answer

Azure Private Endpoint assigns a private IP from your VNet to the Azure AI Language resource, so traffic from on-premises over ExpressRoute reaches the service via private IP without traversing the public internet. This is the standard Private Link pattern for PaaS services.

Exam trap

AI-103 often tests whether candidates confuse outbound internet connectivity (NAT gateway) or public ingress (Front Door) with private inbound connectivity (Private Endpoint), so they pick a service that actually routes traffic over the public internet.

How to eliminate wrong answers

Option A is wrong because Azure Bastion provides secure RDP/SSH to VMs, not private connectivity to PaaS AI services. Option C is wrong because a NAT gateway provides outbound internet SNAT for subnets, which is the opposite of avoiding the public internet. Option D is wrong because Front Door with WAF is a public-facing global entry point and does not provide private on-premises connectivity.

Practice this question →

Multi-Selecthard

Your organization is implementing strict network isolation for Azure OpenAI. Direct internet access from worker nodes is prohibited. Which THREE mechanisms must be correctly configured to allow secure communication? Each correct answer presents part of the solution.

Select 3 answers

A.Public network access disabled on the Azure OpenAI resource

B.Public IP addresses assigned directly to the AI service endpoint

C.Azure Bastion host attached to the OpenAI backend storage

D.Private DNS zone integration for openai.azure.com resolution

E.Azure Private Endpoint connected to the application virtual network subnet

AnswersA, D, E

Disabling public network access removes the Azure OpenAI resource's internet-facing endpoint, forcing all traffic through private paths. This satisfies the stem's prohibition on direct internet access from worker nodes, since clients must then reach the service via a private endpoint inside the virtual network rather than the public FQDN.

Why this answer

Option A is correct because disabling public network access on the Azure OpenAI resource ensures that the service is not reachable over the public internet, forcing all traffic through approved private paths. Option D is correct because a Private DNS zone (privatelink.openai.azure.com) must be integrated with the virtual network so that the FQDN <resource>.openai.azure.com resolves to the private endpoint's private IP instead of the public IP. Option E is correct because an Azure Private Endpoint placed in the application virtual network subnet provides the private IP interface that worker nodes use to reach the Azure OpenAI service over the Microsoft backbone.

Option B is wrong because assigning public IP addresses to the AI service endpoint contradicts the strict isolation requirement and would expose the service publicly. Option C is wrong because Azure Bastion is a jump-host service for RDP/SSH access to VMs and has no role in connecting to Azure OpenAI backend storage.

Exam trap

AI-103 often tests whether candidates include irrelevant services like Azure Bastion or public IPs, confusing network isolation with jump-host access — the key is recognizing that Private Endpoint, Private DNS, and disabling public access are the three required pillars.

Practice this question →

Multi-Selecthard

When establishing a governance strategy for Azure AI resources across multiple cloud teams, which THREE administrative tasks should an administrator perform? (Choose three.)

Select 3 answers

A.Apply Role-Based Access Control (RBAC) following the principle of least privilege.

B.Enforce naming conventions and allowed regions using Azure Policy.

C.Organize subscriptions under Azure Management Groups for hierarchical governance and policy inheritance.

D.Disable Azure Activity Logs to prevent administrative audit trails.

E.Assign the Owner role to all developers to streamline resource creation.

AnswersA, B, C

Assigning RBAC roles at the appropriate scope with least privilege limits each team to the AI resources and operations it needs, preventing over-permissioned access across subscriptions. This is a core governance control for multi-team Azure AI environments.

Why this answer

Option A is correct because applying Role-Based Access Control (RBAC) with least privilege ensures each cloud team member receives only the permissions needed for their role, such as Reader, Contributor, or specific custom roles, reducing the blast radius of misconfiguration or compromise across Azure AI resources. Option B is correct because Azure Policy can enforce organizational standards such as naming conventions and allowed regions by evaluating resource properties during creation and updates, and it can deny noncompliant deployments or flag them for remediation, which is essential for consistent multi-team governance. Option C is correct because organizing subscriptions under Azure Management Groups creates a hierarchy where policies and RBAC assignments inherit down to child subscriptions, giving administrators a single governance control plane across multiple cloud teams without configuring each subscription individually.

Option D is incorrect because disabling Azure Activity Logs would remove the administrative audit trail needed for compliance, security monitoring, and incident investigation, directly undermining governance. Option E is incorrect because assigning the Owner role to all developers violates least privilege and grants excessive control over access and billing, increasing risk rather than establishing sound governance.

Exam trap

AI-103 often tests whether candidates recognize that governance requires least privilege and auditability, tricking those who equate 'streamlining' with granting broad Owner roles or disabling logs.

Practice this question →

MCQmedium

Your team needs to receive an email alert if the error rate for your AI endpoint exceeds 5% for more than 15 minutes. What should you create?

A.An Azure Service Health notification.

B.An Azure Monitor Alert rule with an Action Group.

C.A scheduled Azure Function that polls the API.

D.A Log Analytics query saved as a report.

AnswerB

An Azure Monitor alert rule evaluates the endpoint's error-rate metric against a 5% threshold sustained over a 15-minute window, satisfying both conditions in the stem. Its action group then delivers the email notification. Metric alerts natively support this sustained-window evaluation, unlike log-based queries or diagnostic settings.

Why this answer

Azure Monitor Alert rules evaluate metrics or log queries against thresholds and trigger Action Groups, which can send emails, SMS, webhooks, or invoke Logic Apps and Functions. To alert when error rate exceeds 5% for over 15 minutes, you create a metric or log-search alert rule with the appropriate threshold and evaluation window, then attach an Action Group configured with an email receiver. This is the native, supported mechanism for metric-based alerting in Azure.

Exam trap

AI-103 often tests whether candidates confuse Service Health (platform incidents) with Azure Monitor alerts (resource metrics/logs), or mistakenly believe a saved Log Analytics query alone can send notifications without an alert rule and Action Group.

How to eliminate wrong answers

Option A is wrong because Azure Service Health notifications report platform-wide incidents, planned maintenance, and advisories affecting Azure services — they do not monitor your application's error rate metric. Option C is wrong because a scheduled Azure Function polling the API is a custom, brittle solution that duplicates what Azure Monitor already does natively, adds latency, and requires maintaining code. Option D is wrong because a saved Log Analytics query is only a report — it does not evaluate thresholds or send notifications on its own; it must be wrapped in a scheduled alert rule to trigger actions.

Practice this question →

Multi-Selectmedium

Your company wants to track and allocate Azure AI service costs by department. Which TWO mechanisms can assist with this requirement? (Choose two.)

Select 2 answers

A.Using Azure Cost Management filters and cost allocation rules to generate chargeback reports.

B.Sharing a single Azure subscription across all departments without using tags or resource groups.

C.Deactivating Azure Cost Management to reduce management overhead.

D.Provisioning all AI resources in the Free (F0) tier.

E.Applying department-specific cost tracking tags (e.g., Department: Marketing) to Azure AI resources.

AnswersA, E

Azure Cost Management applies filters and cost allocation rules to split shared Azure AI service spend across departments, producing chargeback reports. This directly satisfies the requirement to track and allocate costs by department, since allocation rules redistribute tagged or untagged usage to the correct cost centres.

Why this answer

Option A is correct because Azure Cost Management supports filters (by resource group, tag, service, subscription, etc.) and cost allocation rules that let you split shared costs across departments, enabling accurate chargeback/showback reports for Azure AI services. Option E is correct because applying department-specific tags such as Department: Marketing to Azure AI resources lets Cost Management group and filter spend by tag, which is the standard way to attribute AI service costs to each department. Option B is incorrect because a single untagged, unsegmented subscription provides no dimension to separate or allocate costs by department.

Option C is incorrect because deactivating Azure Cost Management removes the very reporting and allocation capability needed for cost tracking. Option D is incorrect because the Free (F0) tier only affects pricing/limits of certain AI services and does not provide any cost tracking or allocation mechanism.

Exam trap

AI-103 often tests the misconception that simply using a single subscription or free tier solves cost tracking, when tags and Cost Management allocation rules are the actual mechanisms required.

Practice this question →

MCQhard

You are using an Azure AI model that supports versioning. You want to perform an A/B test by routing 10% of traffic to a new version. Where do you configure this?

A.Azure App Service routing rules.

B.Azure Load Balancer backend pools.

C.Azure Traffic Manager DNS settings.

D.The 'Traffic' configuration in the Azure AI endpoint.

AnswerD

The Traffic configuration on an Azure AI endpoint supports weighted routing, letting you split requests across model versions by percentage. Setting the new version to 10% satisfies the A/B test constraint, while the remaining 90% continues to the existing deployment without code changes.

Why this answer

Azure AI endpoints expose a 'Traffic' configuration where you assign percentage weights to deployed model versions, enabling A/B testing by routing a fraction of requests to a new version. Setting 10% to the new version and 90% to the current one achieves the desired split. This is native to the endpoint and requires no external load balancer.

Exam trap

AI-103 often tests whether candidates know that traffic splitting for model versions lives in the AI endpoint configuration, so the trap is choosing a generic Azure load-balancing service that cannot split by model version.

How to eliminate wrong answers

Option A is wrong because Azure App Service routing rules apply to web app slots and hostnames, not to AI model version traffic splits. Option B is wrong because Azure Load Balancer backend pools distribute Layer 4 traffic across VMs or instances, with no concept of model versions or percentage-based A/B splits. Option C is wrong because Azure Traffic Manager performs DNS-based global routing across endpoints by geography or priority — it cannot split traffic by model version percentage within a single AI endpoint.

Practice this question →

MCQeasy

You are provisioning an Azure AI services account and want to ensure that all telemetry and monitoring metrics are collected. Which built-in monitoring feature is automatically enabled on Azure AI resources without requiring additional agent installation?

A.Azure Monitor platform metrics

B.Log Analytics Windows security agent

C.Application Insights SDK code instrumentation

D.Azure Diagnostics extension for Linux

AnswerA

Platform metrics are emitted automatically by Azure AI resources into Azure Monitor with no diagnostic setting or agent required, satisfying the stem's no-installation constraint. Guest OS metrics and log-based telemetry need the Azure Monitor agent, so they cannot meet that requirement.

Why this answer

Azure Monitor platform metrics are collected automatically for Azure AI services (Cognitive Services, Azure OpenAI, AI Search, etc.) with no agent, SDK, or diagnostic extension required. They appear in the resource's Metrics blade within seconds to minutes and cover request counts, latency, errors, and token usage. This makes them the only truly zero-configuration monitoring feature among the choices.

Exam trap

AI-103 often tests the distinction between 'automatic' platform metrics and 'opt-in' features like diagnostic settings, Application Insights, and VM agents — candidates frequently pick Application Insights because it is the most familiar monitoring tool.

How to eliminate wrong answers

Option B is wrong because the Log Analytics Windows security agent is an optional VM extension for Windows machines, not an automatic feature of Azure AI PaaS resources. Option C is wrong because Application Insights requires explicit SDK instrumentation in application code or auto-instrumentation via a supported agent — it is not enabled by default on AI resources. Option D is wrong because the Azure Diagnostics extension for Linux is a VM-level agent that must be installed and configured, and it does not apply to PaaS AI services.

Practice this question →

100

Multi-Selecthard

You are designing a secure, production-grade architecture for an Azure AI Search service integrated with Azure OpenAI. Which THREE security and operational best practices should you implement? Each correct answer presents part of the solution.

Select 3 answers

A.Publish administrative API keys publicly in GitHub repositories for easy developer access.

B.Configure Azure Monitor diagnostic settings to stream query performance and error logs to a Log Analytics workspace.

C.Use managed identities for secure authentication between Azure AI Search and Azure OpenAI without hardcoded keys.

D.Use the Free pricing tier for high-throughput production workloads.

E.Deploy Private Endpoints for both Azure AI Search and Azure OpenAI to keep data traffic within internal virtual networks.

AnswersB, C, E

Streaming query performance and error logs to a Log Analytics workspace satisfies the operational-visibility requirement of a production-grade design. Azure Monitor diagnostic settings capture Azure AI Search resource logs, enabling query latency analysis, throttling detection and alerting, which supports the monitoring and troubleshooting demands the scenario's production constraint imposes.

Why this answer

Option B is correct because Azure Monitor diagnostic settings let you route Azure AI Search query and operation logs, plus metrics, into a Log Analytics workspace, enabling KQL-based alerting, auditing, and performance troubleshooting required for production operations. Option C is correct because managed identities (system- or user-assigned) allow Azure AI Search to authenticate to Azure OpenAI and other resources via Microsoft Entra ID tokens, eliminating hardcoded API keys and enabling RBAC-scoped, credential-rotation-free access. Option E is correct because Private Endpoints create Azure Private Link connections that assign private IP addresses from your VNet to both services, so index/query traffic and Azure OpenAI calls traverse the Microsoft backbone rather than the public internet, and public network access can be disabled.

Option A is wrong because publishing admin API keys in public repositories exposes full control-plane access to the search service and is a severe credential leak. Option D is wrong because the Free tier caps storage, index count, and throughput (no SLA, limited partitions/replicas), so it cannot support high-throughput production workloads.

Exam trap

AI-103 often tests the misconception that API keys are acceptable for production if rotated, when the exam expects managed identity plus Private Endpoint as the keyless, network-isolated answer.

Practice this question →

101

MCQmedium

Your enterprise team is deploying multiple Azure AI Custom Vision resources across different development stages (Dev, Test, Prod). You need to ensure that billing costs for the Dev environment are billed to a specific cost center. Which Azure feature should you use to categorize these costs?

A.Azure role-based access control (RBAC)

B.Azure resource tags

C.Azure Service Health alerts

D.Azure Firewall rules

AnswerB

Azure resource tags apply key-value metadata directly to each Custom Vision resource, letting cost management group and filter spend by cost centre. Tagging the Dev resource satisfies the requirement to attribute its billing to a specific cost centre.

Why this answer

Azure resource tags are key-value pairs applied to resources and resource groups that flow into the Azure Cost Management and Billing data, enabling cost categorization, filtering, and chargeback/showback by dimensions like CostCenter, Environment, or Project. Tagging the Dev Custom Vision resources with a CostCenter tag lets finance attribute those costs to the correct cost center.

Exam trap

AI-103 often tests the confusion between governance/authorization features (RBAC, Policy) and cost-attribution features (tags) — candidates pick RBAC thinking it controls billing, missing that tags are the billing categorization mechanism.

How to eliminate wrong answers

Option A is wrong because Azure RBAC controls who can perform actions on resources (authorization), not how costs are categorized or reported — RBAC has no bearing on billing attribution. Option C is wrong because Azure Service Health alerts notify you about platform incidents, planned maintenance, and advisories; they do not categorize or attribute costs. Option D is wrong because Azure Firewall rules control network traffic (allow/deny, DNAT, application rules) and have nothing to do with cost management or billing categorization.

Practice this question →

102

MCQhard

You are monitoring the performance of a deployed Azure OpenAI model. You notice occasional HTTP 429 (Too Many Requests) errors occurring during peak traffic hours. Which monitoring and management action should you take to resolve this issue?

A.Configure Azure Monitor metric alerts for 'Token Generation Rate' and scale up your provisioned throughput deployment capacity.

B.Disable content safety filters to reduce processing latency and throughput overhead.

C.Rotate the primary API key immediately to clear the server-side connection cache.

D.Update the Network Security Group rules to increase the maximum allowed packet size for the API endpoint.

AnswerA

HTTP 429 errors signal rate-limit exhaustion, so raising provisioned throughput capacity directly removes the quota ceiling causing them. Azure Monitor alerts on Token Generation Rate surface the saturation trend early, letting you scale before peak traffic triggers throttling again.

Why this answer

HTTP 429 from Azure OpenAI indicates rate limiting — the deployment's tokens-per-minute (TPM) or requests-per-minute (RPM) quota is being exceeded. The correct response is to monitor token consumption metrics via Azure Monitor and either increase the provisioned throughput (PTU) capacity or raise the standard deployment's TPM quota, which directly addresses the throttling. Configuring metric alerts on token generation rate provides early warning before 429s spike during peak hours.

Exam trap

AI-103 often tests whether candidates recognize 429 as a quota/throttling signal rather than an auth or network issue — the trap is picking key rotation or NSG changes, which address 401/403 or connectivity problems, not rate limits.

How to eliminate wrong answers

Option B is wrong because content safety filters add a small processing step but are not the cause of 429s; disabling them reduces safety and does not increase quota. Option C is wrong because rotating API keys has no effect on rate limiting — 429 is a quota/throttling response, not an authentication failure (which would be 401/403). Option D is wrong because NSG rules govern network packet filtering, not API-level request quotas; packet size has no bearing on token-based throttling.

Practice this question →

103

Multi-Selectmedium

When planning an Azure AI solution deployment strategy, what are THREE key considerations for model versioning and lifecycle management? (Choose three.)

Select 3 answers

A.Implementing automated regression testing in CI/CD pipelines when upgrading model versions.

B.Reviewing the deprecation and retirement schedule published by Microsoft for specific model versions.

C.Deleting older model versions immediately upon release of a new version to save cloud storage costs.

D.Hardcoding the latest model version string into production code without version specifiers.

E.Establishing a rollback plan in case a newer model version exhibits unexpected behavior.

AnswersA, B, E

Automated regression testing catches accuracy or behavioural degradation introduced by a new model version before promotion, directly satisfying the lifecycle requirement to validate each upgrade against a known baseline rather than trusting vendor release notes.

Why this answer

Option A is correct because automated regression testing in CI/CD pipelines validates that a new model version meets quality, accuracy, and safety baselines before promotion, catching behavioral drift or breaking changes introduced by the upgrade. Option B is correct because Microsoft publishes deprecation and retirement schedules for specific model versions in Azure OpenAI and Azure AI services, and solutions must track these dates to migrate before a version is retired and API calls begin failing. Option E is correct because model upgrades can introduce unexpected behavior, so a documented rollback plan—such as pinning the previous version or using deployment slots to revert traffic—ensures continuity if the new version underperforms.

Option C is not appropriate because deleting older versions immediately removes the ability to roll back and may break pinned deployments still serving production traffic. Option D is not appropriate because hardcoding a 'latest' model string without explicit version specifiers makes behavior non-deterministic and can silently break when Microsoft updates or retires that alias.

Exam trap

AI-103 often tests lifecycle best practices by offering cost-saving or 'always latest' shortcuts that sound efficient but violate change-management and rollback principles.

Practice this question →

104

MCQhard

You have an Azure AI endpoint exposed to the internet. You want to ensure traffic is inspected for malicious patterns. What is the recommended service?

A.Network Security Group (NSG) rules.

B.Azure Web Application Firewall (WAF).

C.Azure Bastion.

D.Azure AI Content Safety.

AnswerB

Azure Web Application Firewall inspects inbound HTTP/S traffic at the application layer, detecting and blocking injection, cross-site scripting and other malicious patterns. Placing it in front of the internet-exposed Azure AI endpoint satisfies the requirement for traffic inspection.

Why this answer

Azure Web Application Firewall (WAF) inspects HTTP/HTTPS traffic at Layer 7 and applies OWASP rule sets to block SQL injection, cross-site scripting, and other malicious patterns before they reach the AI endpoint. It is the recommended service for inspecting internet-facing web traffic for attacks. NSGs operate at Layers 3/4 and cannot see payload content, so they cannot detect application-layer attacks.

Exam trap

AI-103 often tests the OSI-layer distinction — candidates pick NSG because it 'filters traffic', missing that only a Layer 7 WAF can inspect payloads for malicious patterns.

How to eliminate wrong answers

Option A is wrong because Network Security Group rules filter by IP, port, and protocol at Layers 3/4 — they have no visibility into HTTP payloads and cannot detect injection or XSS patterns. Option C is wrong because Azure Bastion provides secure RDP/SSH access to VMs over TLS; it is a jump-host service, not a traffic inspection or WAF service. Option D is wrong because Azure AI Content Safety moderates AI-generated or user-generated content for harm categories (violence, hate, etc.) — it is not a network-layer web attack firewall.

Practice this question →

105

MCQmedium

When setting up an Azure AI service, you choose the 'Standard' tier. What is the primary benefit of this compared to the 'Free' tier?

A.Lower latency for all requests.

B.Access to experimental AI models.

C.Higher rate limits and production-level SLAs.

D.Automatic data encryption.

AnswerC

The Standard tier removes the Free tier's per-minute and monthly transaction caps and provides financially backed availability SLAs, which production workloads require. Free tier suits evaluation only, lacking both throughput guarantees and contractual uptime commitments.

Why this answer

The Standard tier of Azure AI services provides higher rate limits (e.g., transactions per second) and production-level SLAs (e.g., 99.9% availability) compared to the Free tier, which has strict rate limits and no SLA. The Standard tier is intended for production workloads, while Free is for evaluation and small-scale testing.

Exam trap

AI-103 often tests the misconception that the Standard tier provides lower latency or exclusive features, when the primary differences are rate limits and SLAs.

How to eliminate wrong answers

Option A is wrong because lower latency is not a guaranteed benefit of the Standard tier; latency depends on factors like region, network, and service load, and both tiers may have similar latency under low load. Option B is wrong because access to experimental AI models is not tied to the tier; experimental models may be available in preview regardless of tier. Option D is wrong because automatic data encryption is enabled by default for all tiers, including Free.

Practice this question →

106

MCQmedium

Your organization wants to ensure that all Azure AI resources created in any subscription across the tenant adhere to a standardized naming convention (e.g., prefixing with 'ai-'). Which Azure governance tool should you use?

A.Microsoft Defender for Cloud

B.Azure Cost Management budgets

C.Azure Advisor

D.Azure Policy with custom naming convention rules

AnswerD

Azure Policy evaluates resource properties at creation and can deny or audit non-compliant names, applying across every subscription in the tenant through management group scope. Custom naming rules enforce the 'ai-' prefix consistently, which a single subscription-level convention cannot guarantee.

Why this answer

Azure Policy is the governance service designed to enforce organizational standards such as naming conventions across subscriptions and resources. A custom policy definition using a naming pattern rule (e.g., enforcing an 'ai-' prefix) can be assigned at the management group or subscription scope to audit or deny non-compliant resources tenant-wide.

Exam trap

AI-103 often tests the difference between advisory tools (Advisor, Defender for Cloud) and enforcement tools (Azure Policy) — candidates pick a security or cost tool when the requirement is governance enforcement.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender for Cloud provides security posture management and threat protection, not naming-convention enforcement. Option B is wrong because Azure Cost Management budgets track and alert on spending, not resource naming. Option C is wrong because Azure Advisor offers best-practice recommendations but does not enforce or deny resource creation based on naming.

Practice this question →

107

MCQhard

Your security team discovers that an application using Azure AI Services is intermittently failing with authentication errors due to expired client secrets. You need to refactor the application to use Microsoft Entra ID workﬂows with managed identities. Which authentication library should your application code use to acquire tokens securely without embedding secrets?

A.Azure Storage Data Movement Library

B.System.Net.Http WebRequestHandler

C.Azure SDK for .NET Management Client

D.Microsoft Authentication Library (MSAL)

AnswerD

MSAL acquires tokens from Microsoft Entra ID using managed identities, so no client secret is stored or rotated in code. It handles token caching and refresh against the identity platform, directly removing the expired-secret failures described in the scenario.

Why this answer

Microsoft Authentication Library (MSAL) is the recommended library for acquiring tokens from Microsoft Entra ID, including tokens for managed identities and service principals. MSAL handles token caching, refresh, and secure acquisition without embedding secrets in code. Using MSAL with managed identities lets the application authenticate without storing client secrets, directly addressing the expired-secret failures.

Exam trap

AI-103 often tests authentication library selection, and candidates confuse management-plane SDKs (Azure Management Client) with identity libraries (MSAL), or assume any Azure SDK can acquire tokens.

How to eliminate wrong answers

Option A is wrong because the Azure Storage Data Movement Library is for high-performance transfer of data to and from Azure Storage, not for acquiring Entra ID tokens. Option B is wrong because System.Net.Http WebRequestHandler is a low-level HTTP handler for configuring TLS and proxies, not an authentication library. Option C is wrong because the Azure SDK for .NET Management Client is used to manage Azure resources via ARM, not to acquire user or service tokens for application authentication.

Practice this question →

108

Multi-Selecthard

You are troubleshooting an intermittent connectivity issue between a client application and an Azure AI Speech service that sits behind an Azure Firewall and a Virtual Network. Which THREE diagnostic steps or tools should you utilize? (Choose three.)

Select 3 answers

A.Use Azure Network Watcher IP Flow Verify to check if traffic is being blocked by network security groups.

B.Run the Azure Advisor cost recommendation analyzer to optimize resource pricing tiers.

C.Enable Azure AI service diagnostic settings to send request logs and metrics to a Log Analytics workspace.

D.Inspect Network Security Group (NSG) flow logs to analyze inbound and outbound traffic metadata.

E.Use the Azure Resource Manager template visualizer to inspect regional resource dependencies.

AnswersA, C, D

IP Flow Verify tests a specific five-tuple against the effective NSG rules on a target VM, returning allow or deny plus the blocking rule name. That pinpoints whether a network security group, rather than the firewall, intermittently drops traffic between the client and the Azure AI Speech endpoint.

Why this answer

Option A is correct because Azure Network Watcher IP Flow Verify tests a specific 5-tuple (source/destination IP, port, protocol) against the effective NSG rules on a VM's NIC and reports whether traffic is allowed or denied, which directly isolates NSG-caused intermittent blocking. Option C is correct because enabling Azure AI service diagnostic settings routes request/response logs and metrics to a Log Analytics workspace, letting you correlate service-side failures and latency with client-side symptoms. Option D is correct because NSG flow logs capture inbound and outbound flow metadata (allowed/denied, source/destination, ports, bytes) that reveals intermittent drops and asymmetric traffic patterns over time.

Option B is wrong because Azure Advisor cost recommendations address pricing and utilization, not connectivity diagnostics. Option E is wrong because the ARM template visualizer only shows resource deployment dependencies and cannot trace live network traffic or firewall/NSG behavior.

Exam trap

AI-103 often tests whether candidates pick cost or template tools for a network troubleshooting scenario; the correct answers must be network-observability tools (IP Flow Verify, NSG flow logs, diagnostic settings), not Advisor or ARM visualizer.

Practice this question →

109

MCQmedium

Your organization is running an Azure AI Search service and needs to restrict management operations (such as index creation and deletion) to administrators while allowing standard client applications to perform search queries only. How should you configure access?

A.Use Admin API keys for management operations and Query API keys for client search queries.

B.Enable IP firewall rules to block index creation.

C.Configure CORS settings in the Azure portal.

D.Assign the Contributor role to client applications.

AnswerA

Azure AI Search issues two key types with distinct privileges: admin keys authorise management operations like index creation and deletion, while query keys permit only search and lookup against existing indexes. This separation enforces least privilege for client applications.

Why this answer

Azure AI Search issues two key types: admin keys (primary and secondary) that grant full control including index creation, deletion, and configuration, and query keys that only permit read operations against indexes. Assigning admin keys to administrators and query keys to client applications enforces least privilege at the data-plane level without needing Azure RBAC.

Exam trap

AI-103 often tests the confusion between control-plane RBAC roles (Contributor) and data-plane key types, tricking candidates into picking a role that grants far more privilege than query-only access.

How to eliminate wrong answers

Option B is wrong because IP firewall rules restrict which networks can reach the service but do not differentiate between management and query operations — an allowed IP can still call index-creation APIs. Option C is wrong because CORS only controls which browser origins may call the search endpoint; it has no bearing on authorization or operation scoping. Option D is wrong because the Contributor role is a control-plane Azure RBAC role that grants management of the resource itself (including key regeneration and service deletion), which is far broader than needed and does not scope clients to query-only data-plane access.

Practice this question →

110

MCQmedium

Your development team needs to monitor the latency and total call volume of an Azure AI Document Intelligence resource in near real-time. Where can you view these pre-aggregated metrics without writing custom log queries?

A.The Cost Management + Billing cost analysis dashboard

B.The Log Analytics workspace query editor using KQL

C.The Metrics blade of the Azure AI Document Intelligence resource in the Azure portal

D.The Azure Advisor recommendations blade

AnswerC

The Metrics blade exposes platform-level, pre-aggregated telemetry such as latency and call volume natively, with no Log Analytics workspace or KQL query required. This directly satisfies the near real-time monitoring constraint without custom log queries.

Why this answer

The Metrics blade of an Azure AI Document Intelligence resource provides pre-aggregated, near-real-time platform metrics such as latency, call volume, and error rates without requiring any KQL queries. These metrics are emitted automatically by the Azure Monitor platform and are viewable directly in the portal.

Exam trap

AI-103 often tests the distinction between pre-aggregated platform metrics (Metrics blade, no query needed) and diagnostic logs requiring KQL — candidates pick Log Analytics because they assume all monitoring requires queries.

How to eliminate wrong answers

Option A is wrong because Cost Management + Billing only shows financial spend data, not operational telemetry like latency or call volume. Option B is wrong because the Log Analytics KQL query editor requires writing custom queries against diagnostic logs, which the question explicitly excludes. Option D is wrong because Azure Advisor provides best-practice recommendations, not live performance metrics.

Practice this question →

111

Multi-Selecthard

You are hardening an Azure OpenAI service deployment for a financial application that handles sensitive customer data. Which THREE security configurations should you apply? (Choose three.)

Select 3 answers

A.Store API keys in plain text within the client application's source code repository for easy developer access.

B.Authenticate client applications using Microsoft Entra ID (Azure AD) tokens instead of static API keys.

C.Enable anonymous access on the Azure OpenAI endpoint to simplify client connection testing.

D.Disable public network access and configure Azure Private Link with private endpoints.

E.Configure customer-managed keys (CMK) using Azure Key Vault for data encryption.

AnswersB, D, E

Microsoft Entra ID tokens provide short-lived, scoped, identity-based credentials with conditional access and audit trails, unlike static API keys that never expire and are easily leaked. This satisfies the sensitive-data constraint by removing long-lived shared secrets from client applications.

Why this answer

Option B is correct because authenticating with Microsoft Entra ID (Azure AD) tokens enables role-based access control (RBAC), short-lived credentials, and conditional access policies, eliminating the risk of leaked long-lived static API keys. Option D is correct because disabling public network access and using Azure Private Link with private endpoints keeps all traffic to the Azure OpenAI resource on the Microsoft backbone/private IP space, preventing exposure to the public internet and data exfiltration. Option E is correct because customer-managed keys (CMK) stored in Azure Key Vault give the financial organization control over the encryption keys protecting data at rest, satisfying regulatory and key-rotation requirements.

Option A is wrong because storing API keys in plain text in source control exposes credentials to anyone with repository access and is a critical secret-management anti-pattern. Option C is wrong because enabling anonymous access removes authentication entirely, allowing unauthenticated clients to invoke the model and access sensitive data.

Exam trap

AI-103 often tests whether candidates can distinguish genuine hardening controls from convenience features disguised as security — plaintext keys and anonymous access look 'easy' but are the exact anti-patterns the exam wants you to reject.

Practice this question →

112

MCQeasy

You need to provision an Azure AI resource that allows developers to access multiple AI capabilities (such as Vision, Speech, and Language) using a single endpoint and a single API key. Which resource type should you create?

A.Azure Cognitive Search resource

B.Azure OpenAI resource

C.Azure AI Custom Vision resource

D.Azure AI multi-service account

AnswerD

Azure AI multi-service account bundles Vision, Speech, and Language under one endpoint and one API key, directly satisfying the single-endpoint, single-key constraint. Unlike individual Cognitive Services resources, which require separate endpoints and keys per capability, it consolidates billing and authentication, letting developers call multiple AI services without provisioning each separately.

Why this answer

An Azure AI multi-service account (Cognitive Services multi-service resource) bundles Vision, Speech, Language, Translator, and other services under one endpoint and one API key, simplifying provisioning and billing. It is the correct resource type when developers need multiple AI capabilities through a single credential. Single-service resources like Custom Vision or Azure OpenAI expose only their own capability.

Exam trap

AI-103 often tests whether candidates confuse single-service resources (Custom Vision, Azure OpenAI) with the multi-service account, so the trap is picking a resource that only covers one AI capability when the question demands several.

How to eliminate wrong answers

Option A is wrong because Azure Cognitive Search is a search-index service for full-text and vector search — it does not provide Vision, Speech, or Language AI capabilities. Option B is wrong because Azure OpenAI provides access to OpenAI models (GPT, DALL-E, embeddings) only, not the broader Cognitive Services suite. Option C is wrong because Azure AI Custom Vision is a single-service resource for image classification and object detection, exposing only that capability.

Practice this question →

113

MCQeasy

You are auditing your Azure subscription and find several unused Azure AI Content Safety resources that are incurring base charges. You want to remove the resources permanently. Which operation should you perform?

A.Delete the Azure AI Content Safety resource from the Azure portal.

B.Remove the role assignments from the resource.

C.Stop the Azure AI Content Safety resource state.

D.Disable the keys associated with the resource.

AnswerA

Deleting the resource removes it and its associated base charges permanently. Stopping or scaling down would not eliminate billing for a provisioned Content Safety resource, so deletion is the only operation that satisfies the requirement to remove it permanently.

Why this answer

Deleting the Azure AI Content Safety resource removes it permanently from the subscription, which stops all billing including any base or provisioned charges. Since the requirement is to remove unused resources permanently, deletion is the only operation that eliminates the resource and its associated costs.

Exam trap

AI-103 often tests the difference between disabling access (keys, roles) and deprovisioning a resource — candidates pick 'disable keys' thinking it stops billing, but only deletion removes the billing meter.

How to eliminate wrong answers

Option B is wrong because removing role assignments only revokes access permissions — the resource still exists and continues to incur charges. Option C is wrong because Azure AI Content Safety does not support a 'stop' state like a virtual machine; there is no pause operation that halts billing while retaining the resource. Option D is wrong because disabling keys only prevents authentication to the resource — the resource remains provisioned and billable, and keys can be re-enabled later.

Practice this question →

114

Multi-Selectmedium

You are managing Azure OpenAI deployments and need to monitor token consumption and error rates. Which TWO Azure Monitor features should you use to analyze this telemetry? Each correct answer presents part of the solution.

Select 2 answers

A.Azure Monitor Metrics Explorer to graph real-time metrics like Total Calls and Latency.

B.Azure DevOps commit history dashboard

C.Log Analytics workspace with Kusto Query Language (KQL) queries for deep request log analysis.

D.Microsoft 365 compliance center content search

E.Azure Bastion session monitor

AnswersA, C

Metrics Explorer plots platform metrics emitted by Azure OpenAI, including Total Calls, Latency and token usage, giving near real-time visualisation. It satisfies the monitoring requirement for spotting consumption trends and error-rate spikes without writing queries.

Why this answer

Option A is correct because Azure Monitor Metrics Explorer lets you plot near real-time platform metrics for Azure OpenAI, including Total Calls, Token Usage (prompt/completion tokens), and Latency, which directly addresses monitoring token consumption and error rates at a glance. Option C is correct because Azure OpenAI diagnostic settings can route request/response logs and metrics to a Log Analytics workspace, where Kusto Query Language (KQL) queries enable deep analysis of per-request token counts, status codes, and error patterns over time. Together, Metrics Explorer provides fast visual monitoring while Log Analytics with KQL provides granular, queryable telemetry.

Option B is incorrect because Azure DevOps commit history tracks source code changes, not Azure OpenAI runtime telemetry. Option D is incorrect because Microsoft 365 compliance center content search is for eDiscovery of Microsoft 365 content, not Azure Monitor telemetry. Option E is incorrect because Azure Bastion session monitoring relates to secure RDP/SSH access to VMs, not OpenAI token or error metrics.

Exam trap

AI-103 often tests whether candidates know that platform metrics are automatic and near-real-time while detailed per-request telemetry requires diagnostic settings routed to Log Analytics — mixing these up leads to picking only one of the two correct answers.

Practice this question →

115

MCQhard

You are designing an automated deployment pipeline for Azure AI Search using GitHub Actions. The pipeline must authenticate to Azure securely without storing credentials or long-lived secrets in GitHub repository settings. Which authentication mechanism should you implement?

A.Hardcoded administrator API keys stored in GitHub Action variables

B.OpenID Connect (OIDC) with Azure workload identity federation

C.A personal access token (PAT) with full subscription ownership

D.Anonymous access enabled during deployment time

AnswerB

OIDC with workload identity federation lets GitHub Actions exchange a short-lived token for an Azure access token, eliminating stored secrets. This satisfies the stem's constraint of authenticating without credentials or long-lived secrets in repository settings, unlike service principal secrets or PATs.

Why this answer

OpenID Connect (OIDC) with Azure workload identity federation allows GitHub Actions workflows to authenticate to Azure using short-lived tokens issued by GitHub's OIDC provider and exchanged for Azure AD tokens via a federated identity credential. This eliminates the need to store any secret in GitHub, satisfying the 'no long-lived credentials' requirement. It is the Microsoft-recommended pattern for CI/CD pipelines deploying Azure resources such as Azure AI Search.

Exam trap

AI-103 often tests the misconception that storing API keys in GitHub secrets is 'secure enough' — the exam requires recognizing that any stored credential, even encrypted, violates the passwordless/OIDC requirement.

How to eliminate wrong answers

Option A is wrong because hardcoded administrator API keys are long-lived secrets stored in GitHub, directly violating the requirement and exposing the search service to credential leakage. Option C is wrong because a PAT with full subscription ownership is both a long-lived secret and massively over-privileged, violating least privilege and the no-secrets rule. Option D is wrong because anonymous access during deployment would expose the Azure AI Search endpoint to unauthenticated users and is not a valid authentication mechanism for a deployment pipeline.

Practice this question →

116

MCQeasy

You are provisioning a new Azure AI Search service. You need to choose a pricing tier that supports semantic search capabilities. Which minimum tier should you select?

A.Basic

B.Free

C.Storage Optimized (L1)

D.Standard (S1)

AnswerD

Semantic search requires the Standard S1 tier or above; Free and Basic tiers lack semantic ranking entirely. Selecting S1 satisfies the stem's constraint that the Azure AI Search pricing tier must support semantic search capabilities.

Why this answer

Semantic search in Azure AI Search requires the Standard tier (S1) or higher. The Basic and Free tiers do not support semantic ranker, which uses deep learning models to re-rank results. Storage Optimized tiers are for large-scale storage but also support semantic search; however, the question asks for the minimum tier, and Standard is the lowest tier that includes semantic search.

Therefore, Standard (S1) is correct.

Exam trap

AI-103 often tests the misconception that Basic or Free tiers support advanced features like semantic search, but candidates must remember that semantic search requires at least the Standard tier.

How to eliminate wrong answers

Option A is wrong because the Basic tier does not support semantic search; it only offers basic full-text search with limited indexing capacity. Option B is wrong because the Free tier lacks semantic search and is intended for evaluation only, with strict limits on indexes and storage. Option C is wrong because while Storage Optimized (L1) supports semantic search, it is not the minimum tier; it is designed for scenarios requiring massive storage, and the question asks for the minimum tier that supports semantic search.

Practice this question →

117

MCQhard

You are managing an Azure AI Custom Vision project and need to automate model training and evaluation updates as new training images are tagged. Which REST API or SDK component should you use to initiate the training iteration process?

A.Azure Machine Learning Pipeline REST endpoint

B.Azure AI Vision Prediction API

C.Azure AI Content Safety moderation batch API

D.Custom Vision Training API TrainProject method

AnswerD

The TrainProject method in the Custom Vision Training API creates a new iteration from the current tagged images, satisfying the requirement to initiate training automatically as tagging progresses. It returns the iteration ID needed for subsequent evaluation and publishing steps.

Why this answer

The Custom Vision Training API provides the TrainProject method, which initiates a training iteration for a specified project. This is the correct API to automate model training when new tagged images are added. It allows you to programmatically trigger training and then evaluate the resulting iteration.

Exam trap

AI-103 often tests the confusion between training and prediction APIs, or between Custom Vision and Azure Machine Learning services, leading candidates to pick Azure ML pipelines for Custom Vision tasks.

How to eliminate wrong answers

Option A is wrong because Azure Machine Learning Pipeline REST endpoint is used for orchestrating ML workflows in Azure ML, not for Custom Vision training. Option B is wrong because the Azure AI Vision Prediction API is for making predictions with a trained model, not for training. Option C is wrong because Azure AI Content Safety moderation batch API is for content moderation, unrelated to Custom Vision training.

Practice this question →

118

MCQmedium

Your development team needs to deploy an Azure OpenAI model deployment in an enterprise environment. They require provisioned throughput units (PTUs) to guarantee predictable latency and throughput for a mission-critical chatbot. Where can you purchase and manage PTU allocations?

A.Azure Portal or Azure OpenAI Studio during model deployment creation by selecting the Provisioned tier.

B.Azure DevOps pipeline YAML configuration files.

C.Microsoft 365 Admin Center under billing subscriptions.

D.Visual Studio Enterprise subscription benefit portal.

AnswerA

Provisioned throughput units are purchased and managed directly through the Azure Portal or Azure OpenAI Studio when creating the deployment, selecting the Provisioned tier. This satisfies the requirement for guaranteed, predictable latency and throughput by reserving dedicated model capacity rather than consuming shared pay-as-you-go quota.

Why this answer

Provisioned Throughput Units (PTUs) for Azure OpenAI are purchased and managed through the Azure Portal or Azure OpenAI Studio when creating or updating a model deployment by selecting the Provisioned deployment type. This is where you specify the PTU quantity, associate it with the Azure OpenAI resource, and manage capacity reservations for predictable latency and throughput.

Exam trap

AI-103 often tests whether candidates know that PTU purchase and management is an Azure resource-level operation performed in the Portal or Azure OpenAI Studio, not a licensing or DevOps pipeline activity.

How to eliminate wrong answers

Option B is wrong because Azure DevOps pipelines are CI/CD orchestration tools; they can deploy infrastructure via IaC but are not a marketplace or management surface for purchasing PTU capacity. Option C is wrong because the Microsoft 365 Admin Center manages Microsoft 365 licenses and subscriptions, not Azure OpenAI provisioned throughput, which is an Azure resource-level commitment. Option D is wrong because Visual Studio Enterprise subscription benefits cover developer tooling and Azure credits, not PTU allocation or management for Azure OpenAI deployments.

Practice this question →

119

MCQmedium

You are developing an application that uses Azure OpenAI. You need to ensure that the application can authenticate to the Azure OpenAI service without storing credentials in code. What should you use?

A.Azure Active Directory (Azure AD) token-based authentication using managed identities.

B.Shared Access Signatures (SAS) generated for the Azure OpenAI resource.

C.Azure OpenAI API keys stored in Azure Key Vault and retrieved at runtime.

D.OAuth 2.0 client credentials flow with a client secret stored in Azure App Configuration.

AnswerA

Azure OpenAI supports Azure AD authentication, allowing applications to authenticate using managed identities without storing any credentials. The application can request a token from Azure AD and use it to call the service. This is the recommended approach for passwordless authentication and integrates with Azure role-based access control.

Why this answer

Azure AD authentication with managed identities allows your application to authenticate to Azure OpenAI without any stored credentials. The managed identity is assigned to the application's hosting resource, and Azure AD issues tokens that the application uses to access the service. This eliminates secret management and is the recommended practice.

Exam trap

The trap here is assuming that storing credentials in a secure store like Key Vault or App Configuration makes them passwordless; managed identities are the true passwordless solution.

Practice this question →

120

Multi-Selectmedium

You are monitoring the health and operational status of an Azure AI multi-service account. Which TWO built-in metrics can you track in Azure Monitor to evaluate performance and reliability? (Choose two.)

Select 2 answers

A.Employee payroll deductions

B.Server Errors (failed requests due to server-side issues)

C.Virtual machine disk defragmentation percentage

D.Total Calls (request volume)

E.Browser cache hit ratio

AnswersB, D

Server Errors is a built-in Azure Monitor metric counting requests that failed due to server-side faults, typically HTTP 5xx responses. It satisfies the stem's reliability requirement by surfacing backend failures, enabling alerts and diagnosis of service-side degradation on the multi-service account.

Why this answer

Option B, Server Errors, is correct because Azure Monitor exposes this metric for an Azure AI multi-service account to count failed requests caused by server-side issues, which directly reflects reliability and helps diagnose service-side faults. Option D, Total Calls, is correct because it tracks the overall request volume hitting the account, a key performance and usage indicator for capacity and trend analysis. The remaining options do not belong: employee payroll deductions (A) is an HR/finance concept unrelated to Azure Monitor metrics, virtual machine disk defragmentation percentage (C) is a VM storage metric not exposed for an AI multi-service account, and browser cache hit ratio (E) is a client-side web performance measure rather than an Azure Monitor metric for this resource.

Exam trap

AI-103 often tests whether candidates can distinguish platform metrics emitted natively by an Azure AI resource from unrelated infrastructure or business metrics, so distractors are deliberately drawn from VM, network, and HR domains.

Practice this question →