75 of 117 questions · Page 1/2 · Containerized AI Workloads · Answers revealed
You need to store custom AI container images in a private registry hosted within Azure. Which Azure service provides a managed Docker registry service?
ACR allows you to build, store, and manage container images and artifacts.
Why this answer
Azure Container Registry (ACR) is the managed Docker registry service in Azure used for storing and managing container images.
You have an AI model container that is frequently crashing due to OOM (Out of Memory) errors. How do you identify the actual memory usage compared to the limits?
Azure Monitor for Containers allows tracking of memory usage trends.
Why this answer
Azure Monitor or Prometheus/Grafana integration provides the metrics needed to compare usage against defined limits.
You are deploying an AI workload to AKS and want to ensure that pods belonging to your application are distributed across different fault domains (availability zones) for high availability. Which Kubernetes feature should you configure?
Topology spread constraints ensure high availability by distributing pods across availability zones.
Why this answer
Topology spread constraints allow you to configure how pods are spread across failure domains such as regions, zones, or nodes.
You are troubleshooting slow inference latency in an AI application deployed on AKS. You suspect that network packets between inference pods are traversing unnecessary hops due to overlay routing. Which CNI mode should you have chosen for optimal direct routing?
Azure CNI allocates VNet IPs directly to pods, providing optimal networking performance.
Why this answer
Azure CNI without overlay assigns VNet IP addresses directly to pods, eliminating encapsulation overhead and improving networking performance for high-throughput AI workloads.
You have an AI workload that requires persistent storage for large model checkpoints. Which storage type should you mount to an AKS pod for optimal performance?
Premium SSDs provide the low latency and high IOPS needed for checkpoints.
Why this answer
Azure Disk storage is generally preferred for high-throughput I/O needed by AI checkpoints.
You are configuring continuous deployment for an AI model container. Whenever a data scientist pushes code to a GitHub repository, you want Azure Container Registry to automatically build and tag the new container image without managing an external CI/CD build agent. What should you use?
ACR Tasks can build container images natively in Azure upon commits to GitHub repositories.
Why this answer
ACR Tasks is a cloud-native build service that builds container images on Azure without requiring a separate CI/CD infrastructure.
You are scaling an AI workload in Azure Container Apps. Which TWO scale rule triggers are natively supported without custom KEDA extensions?
HTTP scaling scales based on simultaneous web requests.
Why this answer
Azure Container Apps natively supports scaling based on HTTP requests, CPU, memory, and Azure Service Bus without manual KEDA manifest configuration.
Which Azure feature allows you to set up a private, internal-only container registry?
Private Link secures access to the registry within your private network.
Why this answer
Private Link allows you to access ACR over a private IP address from your VNET.
You are troubleshooting intermittent network timeout errors between microservices in an AKS cluster running an AI pipeline. You suspect that network policies are blocking required inter-pod communication. Which CNI plugin must be configured in AKS to enforce these network policies?
Azure CNI supports network policies (either Azure's native implementation or Calico) to restrict pod traffic.
Why this answer
Azure CNI with Azure Network Policies or Calico network policies must be enabled in AKS to enforce namespace and pod-level traffic rules.
You are troubleshooting an AI inference container deployed in Azure Container Apps that is failing health probes. Which TWO diagnostic tools or logs can you examine in the Azure portal to investigate the failure?
Log stream provides real-time stdout and stderr output from the container.
Why this answer
Azure Container Apps provides built-in log streaming, console access, and diagnostic metrics to troubleshoot container startup and health probe failures.
Your enterprise requires that all container images deployed to Azure Kubernetes Service (AKS) must originate from approved corporate Azure Container Registries (ACRs). How can you enforce this restriction cluster-wide?
Azure Policy for Kubernetes enforces admission control rules that block deployment of images from unapproved registries.
Why this answer
Azure Policy for Kubernetes uses Gatekeeper v3 to audit or enforce cluster behaviors, such as restricting image registries.
You are using Azure Container Apps. You need to deploy a new version of your AI model without downtime. Which deployment strategy should you configure?
Traffic splitting allows you to shift traffic gradually to the new version.
Why this answer
Blue-Green or Canary deployments in ACA allow traffic shifting between revisions without downtime.
You have an Azure Container Registry and an Azure Kubernetes Service cluster in different Azure regions. You want to ensure that AKS nodes pull container images from a local regional endpoint to minimize latency and cross-region data transfer fees. What feature should you configure on ACR?
Geo-replication replicates container registries across multiple regions for low-latency, local pulls.
Why this answer
ACR Geo-replication allows a single registry to be replicated across multiple Azure regions, providing local container image pulls.
You need to configure network security for an Azure Container Apps environment that hosts an internal AI scoring API. The API must only be reachable from a specific Azure Virtual Network (VNet) and blocked from public internet access. How should you configure the environment?
An internal-only Container Apps environment assigns a private virtual network IP for ingress, blocking public access.
Why this answer
Deploying Azure Container Apps with an internal Load Balancer (ILB) restricts ingress to a private IP within an integrated Virtual Network.
You need to deploy a containerized AI model to Azure Container Apps and configure it to scale based on Azure Service Bus queue messages. Which scaler should you specify?
The azure-service-bus scale rule monitors queue length to scale container replicas.
Why this answer
Azure Container Apps supports KEDA scalers natively, including the azure-service-bus scaler.
You are managing an Azure Kubernetes Service (AKS) cluster that runs high-throughput AI model training jobs using NVIDIA Tensor Core GPUs. Pods frequently fail to schedule because of insufficient GPU memory across existing nodes. You need to ensure the cluster automatically provisions new GPU-enabled worker nodes when resource demands increase. What should you configure?
The Cluster Autoscaler monitors for unschedulable pods and adds instances to the specified GPU node pool.
Why this answer
To automatically add GPU-backed nodes when workloads are pending due to resource constraints, you must configure the Kubernetes Cluster Autoscaler with a dedicated node pool that uses GPU virtual machine sizes (e.g., Standard_NC6s_v3).
You are troubleshooting an AI application container in an AKS cluster that cannot resolve external domain names (e.g., huggingface.co). Which TWO Kubernetes components should you investigate?
The kube-dns service routes DNS queries to CoreDNS pods.
Why this answer
DNS resolution issues in AKS typically point to CoreDNS pod status, kube-dns service configuration, or node network routing.
Which TWO Azure services can store and serve private Docker container images for AI workloads?
ACI pulls and runs container images stored in ACR.
Why this answer
Azure Container Registry and Azure Container Instances (via image pull secrets) interact with container images, while ACR is the dedicated private registry.
You are managing an AKS cluster running resource-intensive AI training jobs. You want to ensure that nodes automatically scale up and down based on pending pod resource requests. Which component should you enable and configure?
Cluster Autoscaler automatically adjusts the number of nodes in your AKS cluster based on resource demands.
Why this answer
The Kubernetes Cluster Autoscaler monitors for unschedulable pods and requests additional nodes from Azure Virtual Machine Scale Sets.
Your development team is planning to deploy a containerized natural language processing model to Azure Container Apps. Which TWO features are natively supported by Azure Container Apps for managing application lifecycle and traffic? (Choose two.)
Container Apps includes native KEDA integration for event-driven scaling, including scale-to-zero.
Why this answer
Azure Container Apps natively supports multi-revision management and traffic splitting between revisions, as well as KEDA autoscaling.
You are setting up image builds for a multi-architecture (AMD64 and ARM64) AI model container using Azure Container Registry Tasks. Which command or feature should you use to build images for both architectures simultaneously?
ACR Tasks support platform specifications and buildx for compiling multi-architecture container images.
Why this answer
ACR Tasks support multi-architecture builds using Docker buildx commands within a task definition file or quick task execution.
Which TWO of the following steps are required to enable GPU support for a pod in AKS?
Essential for providing physical GPU hardware.
Why this answer
You must use a GPU-enabled node pool and request GPU resources in the pod specification.
You have a large image that takes a long time to pull. You want to speed up deployment in AKS. Which feature should you enable?
Artifact Streaming allows the container to start before the full image is pulled.
Why this answer
Image Pull Secrets are standard, but ACR 'Artifact Streaming' is the specific feature for reducing pull times.
Which THREE of the following are security best practices for container registries?
Prevents public exposure.
Why this answer
Registry security includes scanning, limiting access, and protecting the content.
You are deploying a containerized machine learning inference service to Azure Container Apps. The model artifact is large (15 GB) and must be securely loaded during container startup. What is the most efficient way to mount this model data into the container app?
Azure Files storage mounts allow sharing large models across container replicas without bloating the container image.
Why this answer
Azure Container Apps supports mounting Azure Files or Azure Blob Storage (via blobfuse) as volumes, allowing containers to read large assets efficiently.
You are configuring an Azure Kubernetes Service (AKS) cluster for enterprise AI workloads. Which THREE practices should you implement to enhance cluster security and isolation? (Choose three.)
Workload Identity securely binds Kubernetes service accounts to Microsoft Entra identities without storing credentials.
Why this answer
Enterprise AKS security best practices include enabling Azure Policy for Kubernetes, using Azure RBAC for Kubernetes authorization, and utilizing Workload Identity for secure credential-less access to Azure services.
You need to store private AI model weights in an Azure Container Registry (ACR). Which authentication method follows the principle of least privilege for an AKS cluster to pull these images?
Managed Identity is the secure, recommended way for AKS to authenticate with ACR.
Why this answer
Managed Identity allows the AKS Kubelet to authenticate to ACR without storing static credentials.
You are building an AI container image and need to minimize its final size to speed up deployment times. Which multi-stage build practice should you follow?
Multi-stage builds discard build tools and dependencies from the final production image, reducing size.
Why this answer
Multi-stage builds allow you to use a heavy builder image with SDKs and compilers, then copy only the compiled artifacts and runtime binaries into a slim final base image.
You are configuring rolling updates for an AI model inference service on AKS with zero downtime requirements. Which THREE deployment or pod configuration settings should you configure?
RollingUpdate controls how many pods are replaced simultaneously.
Why this answer
Zero downtime deployments require liveness/readiness probes, RollingUpdate strategy with maxSurge/maxUnavailable, and PDBs.
You are deploying a custom PyTorch inference model container to Azure Container Apps. The application requires GPU acceleration for real-time video processing. Which Azure Container Apps environment configuration tier must you select to support this requirement?
GPU-enabled container apps require dedicated workload profiles that support NC-series or similar GPU nodes.
Why this answer
GPU-enabled nodes in Azure Container Apps are supported exclusively through the Consumption dedicated workload profiles tier, allowing you to scale container apps with NVIDIA GPU hardware.
Which THREE of the following options are important when configuring an AKS cluster for AI workloads?
Crucial for security.
Why this answer
Security, performance, and monitoring are key components for any production AI cluster.
You are deploying a custom PyTorch model to Azure Container Apps. You need to ensure that the container utilizes GPU acceleration. Which configuration step is required in the Container App environment?
GPU support in ACA is managed through dedicated workload profiles.
Why this answer
Azure Container Apps supports GPU-enabled nodes. You must select a workload profile that supports GPUs during the environment creation.
Which THREE of the following are components of a standard Dockerfile for an AI application?
Setup steps.
Why this answer
Base image, dependency installation, and the application entrypoint are core components.
You are running a GPU-intensive AI workload in AKS. You want to ensure the pods are scheduled only on nodes that have GPUs. How do you enforce this?
nodeSelectors ensure the pod only lands on labeled GPU nodes.
Why this answer
Using nodeSelectors or nodeAffinity is the standard Kubernetes way to restrict pod placement to specific node types.
You are configuring enterprise networking for an AKS cluster running sensitive AI models. Which THREE networking features should you implement for cluster security?
Egress filtering controls where cluster nodes can send outbound traffic.
Why this answer
Securing AKS network traffic involves Azure CNI network policies, private cluster API server endpoints, and outbound traffic filtering via Azure Firewall.
Which TWO of the following are valid ways to reduce the size of a container image?
Discards unnecessary build artifacts.
Why this answer
Multi-stage builds and using lighter base images are the two most effective strategies for image size reduction.
Your containerized AI application requires a specific version of a kernel driver that is not installed on the AKS nodes. What is the most efficient way to manage this?
This allows you to prepare the node environment before the main application starts.
Why this answer
Using an InitContainer with appropriate privileges to install the driver on the host is a common pattern for specific hardware needs.
Which TWO of the following are valid autoscaling options for AKS?
Scales nodes based on pending pods.
Why this answer
Horizontal Pod Autoscaler and Cluster Autoscaler are the two main ways to scale AKS.
You need to deploy a real-time object detection model inside an Azure Container App. The application requires immediate scale-out when the queue length of incoming image processing requests exceeds a threshold. Which scaling rule type should you configure?
KEDA queue-based scaling rules inspect the backing message queue length to scale pods up or down accordingly.
Why this answer
Azure Container Apps supports KEDA scalers, including the Azure Service Bus, Azure Queue Storage, and Redis scalers for event-driven scaling.
You are deploying a Python Flask API that wraps an ONNX runtime model to Azure Container Instances (ACI). The container needs to expose port 5000 externally. Which parameter must you specify when creating the container group?
A DNS name label and port mapping expose the container instance publicly with a routable endpoint.
Why this answer
When deploying to Azure Container Instances, you must explicitly configure the port and protocol for public IP exposure.
You are troubleshooting a containerized AI model running in an Azure Container App that crashes immediately upon startup with an exit code indicating an Out Of Memory (OOM) error. You need to inspect the container resource allocations. Where can you adjust the memory allocation for the container?
Container resource limits (CPU and memory) are defined in the container app's template settings.
Why this answer
In Azure Container Apps, container CPU and memory resources are configured per container in the container app revision template settings.
You are deploying a custom text-embedding model container to Azure Container Apps. You need to configure scaling rules so that the container scales out based on incoming HTTP traffic and Azure Service Bus queue length. Which TWO scalers can you configure? Each correct answer presents part of the solution.
The azure-servicebus scaler monitors queue or topic message counts to scale container app replicas.
Why this answer
Azure Container Apps uses KEDA under the hood and natively supports scaling based on HTTP traffic (http scaler) and Azure Service Bus queues (azure-servicebus scaler).
You are running a distributed AI training job on AKS using MPI. Which network configuration is critical for performance?
Accelerated Networking reduces latency and jitter, which is vital for MPI.
Why this answer
For distributed training, high-bandwidth/low-latency networking like InfiniBand or Azure Accelerated Networking is required.
You are configuring continuous deployment for an AI model container using Azure DevOps and Azure Container Registry (ACR). You need to ensure that when a new container image is pushed to ACR, an event triggers an automated webhook that notifies an Azure Function to run post-deployment validation tests. Which event type should you subscribe to in the ACR webhook configuration?
imagePush triggers the webhook notification specifically when a container image is pushed to ACR.
Why this answer
The 'imagePush' event type triggers the webhook whenever a new image manifest is successfully pushed to the container registry.
You manage an AKS cluster running high-throughput AI inference pods. During traffic spikes, pods experience latency due to slow container image pulls from Azure Container Registry (ACR). You want to optimize image pull performance across cluster nodes. Which feature should you enable?
Image streaming allows containers to start immediately by streaming layers on-demand rather than waiting for a full pull.
Why this answer
AKS supports image streaming (backed by containerd image streaming) to run containers before the entire image is downloaded, significantly reducing startup time.
Which THREE of the following are common reasons for a container image pull failure in AKS?
AKS node cannot reach the registry endpoint.
Why this answer
Incorrect credentials, network issues, and invalid tags are common failure points.
You are containerizing a large language model (LLM) inference API to run in Azure Container Apps. The model weights exceed 15 GB and cause container startup timeouts because the image takes too long to pull from Azure Container Registry (ACR). You need to optimize the container startup performance without reducing the model size. What is the best approach?
Artifact streaming enables container runtimes to start executing containers before all layers are fully downloaded.
Why this answer
ACR artifact streaming allows containers to start immediately by streaming layers on-demand without waiting for the entire image to download locally, significantly reducing cold-start times for large AI container images.
Your development team wants to push custom Docker images containing fine-tuned open-source LLMs to a secure, private registry hosted on Azure. Which Azure service should you use to store and manage these container images?
Azure Container Registry provides private Docker container image storage integrated with Azure Active Directory.
Why this answer
Azure Container Registry (ACR) is a managed Docker registry service based on the open-source Docker Registry 2.0, used for storing and managing container images and artifacts.
You need to deploy a microservice application that consists of an API gateway and an AI model inference container. The solution must scale automatically based on HTTP traffic and support zero scaling when idle to reduce costs, without requiring complex Kubernetes cluster management. Which service is best suited for this?
Azure Container Apps provides fully managed serverless containers with built-in KEDA scaling, including scaling to zero.
Why this answer
Azure Container Apps (ACA) provides serverless container hosting built on top of Kubernetes, supporting KEDA-based autoscaling including scaling to zero based on HTTP traffic.
Which THREE of the following items should be configured to ensure your AI workload in AKS is observable?
Standard stack for cluster metrics.
Why this answer
Logging, metrics, and tracing are the three pillars of observability in AKS.
You are configuring authentication between an Azure Container App running an AI model and an Azure OpenAI resource. To adhere to security best practices, you must avoid storing API keys in environment variables or code. How should you configure this?
System-assigned managed identity allows secure, credential-less authentication from the Container App to Azure OpenAI.
Why this answer
Managed identities allow Azure resources to authenticate to services supporting Microsoft Entra authentication without embedding credentials.
You need to deploy a quick, stateless AI data processing script packaged in a container image without setting up Kubernetes or Container Apps. Which Azure service offers the fastest deployment for a single container instance?
ACI allows you to run containers in Azure without managing virtual machines or orchestrators.
Why this answer
Azure Container Instances (ACI) is designed for fast, serverless deployment of single containers without cluster management.
Which TWO actions can you perform using Azure Container Registry Tasks (ACR Tasks)?
ACR Tasks can trigger builds automatically when source code or Dockerfiles are updated in GitHub or Azure DevOps.
Why this answer
ACR Tasks enable building container images in the cloud, automating multi-architecture builds, and running quick patch tasks.
An AKS cluster is configured with KEDA for autoscaling an AI inferencing service based on Azure Queue Storage length. The pods fail to scale. Which component should you inspect first?
Checking the status of the ScaledObject reveals errors in connecting to the trigger source.
Why this answer
The ScaledObject is the KEDA custom resource that defines the trigger. If it is misconfigured, the autoscaler will not function.
You are deploying a custom AI model container to Azure Container Apps. The container listens on port 8080 and requires health probes to verify readiness before routing traffic. How should you configure the probes?
Readiness probes ensure the container accepts traffic only when fully initialized and healthy on its listening port.
Why this answer
Azure Container Apps supports liveness, readiness, and startup probes configured via HTTP, TCP, or gRPC.
You want to view real-time standard output logs from a container running in Azure Container Instances named 'ai-inferencing-aci'. Which Azure CLI command should you run?
az container logs retrieves the logs for the specified container instance.
Why this answer
The 'az container logs' command streams or retrieves logs from an Azure Container Instance.
You deploy an AI inferencing service to an Azure Kubernetes Service (AKS) cluster. The service uses an ONNX Runtime container. Users report intermittent 504 Gateway Timeouts during peak batch request loads. You notice that the application pods are being terminated due to Out-Of-Memory (OOM) errors during heavy inference loads. How should you resolve this issue in your Kubernetes deployment manifest?
Raising the memory limit prevents the Linux kernel OOM killer from terminating the container when memory usage spikes during large batch inferences.
Why this answer
When container workloads experience OOM kills during peak load, you must increase the memory limit in the container resource specifications and ensure requests are appropriately sized.
You need to view the logs of a container that recently crashed in an AKS cluster. Which command is used?
The --previous flag shows logs from the previous instance of a crashed container.
Why this answer
kubectl logs is the standard command for viewing container outputs.
You are designing a high-performance AI inference architecture on Azure Kubernetes Service (AKS). Which THREE AKS features or configurations should you incorporate to optimize performance and resource utilization? (Choose three.)
Cluster Autoscaler adds or removes cluster nodes dynamically as resource demands fluctuate.
Why this answer
Optimizing AKS for AI workloads includes utilizing GPU-optimized node pools, node taint/tolerations to dedicate nodes to AI tasks, and cluster autoscaler for dynamic scaling.
You are deploying a model that requires a specific version of a non-standard OS library. You want to ensure the build environment is consistent across your team. What should you use?
Fixed tags ensure consistent environments across all builds.
Why this answer
Multi-stage Dockerfiles ensure the build environment is defined as code and consistent.
You are deploying a web application container to Azure Container Apps and want to enable external HTTPS traffic. Which ingress setting must you configure?
External ingress exposes the container app to public HTTPS traffic with a fully qualified domain name.
Why this answer
Enabling ingress and setting traffic to external allows public internet access to your Container App over HTTPS.
You need to automate the deployment of containerized AI models whenever a new image is pushed to ACR. What is the most efficient Azure-native tool for this trigger?
ACR Tasks are specifically designed to respond to repository events.
Why this answer
ACR Tasks can trigger deployments or build processes automatically upon push events.
You want to ensure your AI inference service is highly available across multiple regions. What is the recommended approach for container distribution?
Georeplication automatically syncs images to multiple regions.
Why this answer
Georeplication in ACR ensures images are available locally in multiple regions, improving deployment speed and availability.
Which TWO of the following are true about Azure Container Apps?
ACA manages the underlying infrastructure.
Why this answer
ACA is serverless and supports KEDA for scaling.
When configuring an Azure Container Instances container group, which TWO properties can you define?
A DNS name label exposes the container group publicly with a FQDN.
Why this answer
An ACI container group supports defining networking properties like DNS name labels, environment variables, restart policies, and resource requests.
You are configuring GPU time-slicing on an AKS cluster to maximize GPU utilization for multiple lightweight AI inference containers sharing a single NVIDIA A100 GPU. Where must you define the time-slicing configuration profile?
NVIDIA device plugin uses a ConfigMap to define sharing parameters such as time-slicing replicas.
Why this answer
GPU time-slicing in AKS is configured using a ConfigMap that defines replica counts per GPU device, which is then applied to the cluster.
You are configuring network policies in an AKS cluster to isolate your AI inference pods from other namespaces. You notice that traffic is still flowing between namespaces despite applying a NetworkPolicy. What is the most likely cause?
Kubenet or default unconfigured Azure CNI without policy enforcement enabled will ignore NetworkPolicy objects.
Why this answer
AKS requires a network plugin that supports network policies, such as Azure CNI with Azure Network Policies or Calico, to be enabled at cluster creation.
Which TWO of the following can be used to manage secrets in a containerized AI workload?
Industry standard for secret management in AKS.
Why this answer
Kubernetes Secrets and Azure Key Vault (with FlexVolume or Secret Store CSI) are the two standard ways.
Which type of registry is most suitable for storing images that are shared across an entire organization?
ACR is the enterprise-grade solution for Azure-based organizations.
Why this answer
Azure Container Registry (ACR) provides private storage and fine-grained access control for organizational images.
Your team is evaluating Azure Container Apps versus Azure Kubernetes Service (AKS) for hosting containerized AI workloads. Which TWO characteristics are advantages of Azure Container Apps over standard AKS? (Choose two.)
Container Apps abstracts Kubernetes complexity, removing the need to manage control planes.
Why this answer
Azure Container Apps provides simplified serverless management without exposing Kubernetes control plane complexity and offers native scale-to-zero capabilities.
You are designing an MLOps pipeline on Azure Kubernetes Service (AKS) for a computer vision model. You need to configure GPU sharing among multiple inference pods on the same node to optimize cost. Which TWO actions should you take? Each correct answer presents part of the solution.
Time-slicing or MIG allows multiple containers to concurrently execute workloads on a single physical GPU device.
Why this answer
To achieve GPU sharing in AKS, you can utilize the NVIDIA GPU Operator alongside Kubernetes device plugins or time-slicing features, which enable multiple containers to share a single physical GPU.
When managing Azure Container Registry (ACR), administrators can use ACR Tasks to automate tasks. Which TWO scenarios are valid use cases for ACR Tasks? (Choose two.)
ACR Tasks monitors base image dependencies and rebuilds dependent images when updates occur.
Why this answer
ACR Tasks supports automated container image builds on source code commits (CI) and automated OS/framework patching base image updates.
You have a large AI model file (5GB) that needs to be loaded into your container at startup. What is the recommended way to handle this?
Mounting external storage is the standard for large assets.
Why this answer
Mounting the file from Azure Blob Storage or an Azure File Share avoids bloating the container image and speeds up deployment.
You need to inspect the environment variables and configuration settings of a running container group in Azure Container Instances. Which Azure CLI command should you use?
az container show outputs the detailed configuration properties of the container instance.
Why this answer
The 'az container show' command returns the full JSON representation of a container instance, including environment variables and settings.
You are configuring secure image signing and verification for your AI containers using Azure Container Registry and Notation. Which feature enables cryptographically signed container images?
Notation (COSE standard) enables signing and verifying container images stored in ACR.
Why this answer
ACR supports container signing using Microsoft SignWorks and the Notation CLI tool to verify image integrity before deployment.
Ready to test yourself?
Try a timed practice session using only Containerized AI Workloads questions.