scenario questions

You need to store custom AI container images in a private registry hosted within Azure. Which Azure service provides a managed Docker registry service?

Which distance metric in Azure Cosmos DB vector search calculates the inner product of two vectors, measuring both magnitude and angle?

You are building a serverless AI workflow that triggers an Azure Function whenever a new file is uploaded to an Azure Blob Storage container. The Function must start processing within seconds of the upload and should not require polling. Which Azure service should you use to connect Blob Storage to the Function?

You are deploying an AI workload to AKS and want to ensure that pods belonging to your application are distributed across different fault domains (availability zones) for high availability. Which Kubernetes feature should you configure?

You are evaluating data layer architectures for an enterprise AI application that requires both vector search and structured transactional data management. Which THREE criteria favor choosing Azure Cosmos DB over Azure AI Search as the primary database? (Choose three)

You are troubleshooting a scenario where an Azure App Service hosting an AI frontend cannot communicate with an Azure OpenAI endpoint secured by a private endpoint in a different virtual network. Which THREE of the following networking configurations should you verify? (Choose three)

You need to review the security recommendations provided by Microsoft for your Azure AI resources, such as enabling HTTPS-only traffic and configuring managed identities. Which Azure tool provides these prioritized security recommendations and a security score?

You are managing an Azure Service Bus Premium namespace. Your application requires strict transactional messaging where a worker receives a message from Queue A, processes it, and sends a resulting message to Queue B. If any step fails, both actions must be rolled back. How should you implement this?

Your team is implementing hybrid search in Azure AI Search combining full-text keyword search and vector search. Users report that certain exact product serial numbers are missing from the semantic ranking results. Which query parameter should you adjust to balance the influence of BM25 text search scores against vector cosine similarity scores?

You are building an order processing system with Azure Service Bus. Multiple clients might accidentally submit the exact same order twice within a 60-second window due to network retries. You need to prevent duplicate orders from entering the queue. What should you configure?

Your application uses Azure Service Bus Queues. A spike in traffic causes multiple worker instances to contend for messages. You want to ensure that when a worker locks a message, no other worker can process it, and the lock is automatically renewed in the background if processing takes longer than expected. Which client library feature should you use?

You are troubleshooting slow inference latency in an AI application deployed on AKS. You suspect that network packets between inference pods are traversing unnecessary hops due to overlay routing. Which CNI mode should you have chosen for optimal direct routing?

You have an AI workload that requires persistent storage for large model checkpoints. Which storage type should you mount to an AKS pod for optimal performance?

You are troubleshooting an AI application where users experience intermittent authentication failures when the application attempts to acquire tokens from Azure Active Directory for calling Cognitive Services. You want to inspect the exact HTTP status codes and error descriptions returned during token acquisition. Which namespace or log table should you analyze in Log Analytics?

Your team is building an analytics pipeline where IoT telemetry data is ingested via Azure Event Hubs and needs to be continuously archived in Parquet format to an Azure Data Lake Storage Gen2 account for AI model training. Which built-in feature of Event Hubs should you enable?

You are configuring continuous deployment for an AI model container. Whenever a data scientist pushes code to a GitHub repository, you want Azure Container Registry to automatically build and tag the new container image without managing an external CI/CD build agent. What should you use?

You manage an Azure Cosmos DB for NoSQL container that stores product documents with a vector embedding property. You need to query for products similar to a given embedding while also filtering by a category partition key. Which query approach should you use?

Your Azure AI application sends requests to multiple cognitive services. You need to route diagnostic logs and metrics from your Azure OpenAI and Azure AI Language services to a centralized Log Analytics workspace across different resource groups. What is the recommended way to configure this?

You are troubleshooting slow query performance in an enterprise Azure AI Search vector deployment. Which THREE architectural or configuration adjustments can improve query throughput and latency? Choose three.

Your enterprise application uses Azure Service Bus Topics to broadcast AI model inference updates to multiple microservices. One particular subscriber requires filtering messages so it only receives updates where the 'ModelVersion' property is equal to 'v2' and the 'ConfidenceScore' is greater than 0.85. How should you implement this?

You are designing an AI inference pipeline that publishes prediction results to an Azure Event Hubs namespace with four partitions. A downstream Azure Function must process events in the exact order they were produced for each customer ID, and the pipeline must scale to handle increasing load. The customer ID is included in the event body as a property. What should you do to guarantee per-customer ordering while maximizing throughput?

You are configuring an Azure Service Bus Topic and Subscriptions for an AI text classification system. Which THREE filter types are supported on Service Bus subscriptions for routing messages? Each correct answer represents a valid filter type.

You are implementing a robust data layer architecture for an enterprise generative AI application. Which THREE factors should you evaluate when deciding between Azure AI Search and Azure Cosmos DB for vector search? (Choose three)

Which Azure feature allows you to set up a private, internal-only container registry?

You are troubleshooting intermittent network timeout errors between microservices in an AKS cluster running an AI pipeline. You suspect that network policies are blocking required inter-pod communication. Which CNI plugin must be configured in AKS to enforce these network policies?

You are configuring vector search in Azure Cosmos DB for NoSQL. You want to ensure that vectors are indexed using the DiskANN algorithm for high recall and fast search performance. Which index type should you specify in the vector embedding policy?

You are designing an event-driven architecture that needs to integrate multiple Azure services. Which THREE statements accurately describe the ideal use cases for Azure Event Grid, Azure Service Bus, and Azure Event Hubs respectively? (Choose three)

You are troubleshooting an AI inference container deployed in Azure Container Apps that is failing health probes. Which TWO diagnostic tools or logs can you examine in the Azure portal to investigate the failure?

Your enterprise requires that all container images deployed to Azure Kubernetes Service (AKS) must originate from approved corporate Azure Container Registries (ACRs). How can you enforce this restriction cluster-wide?

You are using Application Insights to monitor a Retrieval-Augmented Generation (RAG) application. You need to log custom dimensions such as prompt token counts and user IDs alongside standard telemetry. Which class should you use in your C# application?

You are troubleshooting intermittent HTTP 429 (Too Many Requests) errors from an Azure OpenAI deployment. Which metric in Azure Monitor should you inspect to confirm whether token rate limits are being exceeded?

You are managing an Azure Cosmos DB for NoSQL database containing vector embeddings. You need to perform a migration of embeddings from one container to another without taking the application offline. Which Azure feature should you use?

You are using Azure Container Apps. You need to deploy a new version of your AI model without downtime. Which deployment strategy should you configure?

You need to ensure that your vector data in Azure AI Search is protected at rest. Which setting should you verify?

You are designing a disaster recovery strategy for an Azure Event Hubs namespace. You configure Geo-Disaster Recovery pairing between a primary region (East US) and a secondary region (West US). During a disaster drill, you trigger a failover. What happens to the DNS alias pointing to the Event Hubs namespace?

You have an Azure Container Registry and an Azure Kubernetes Service cluster in different Azure regions. You want to ensure that AKS nodes pull container images from a local regional endpoint to minimize latency and cross-region data transfer fees. What feature should you configure on ACR?

You need to secure access to an Azure AI Search service so that a Python web app running on Azure App Service can query indices without embedding API keys in configuration files. What is the most secure authentication mechanism to configure?

When configuring vector search in Azure AI Search, which TWO components are required to successfully define and execute a vector search query? (Choose two)

When designing an Azure AI Search index schema, which TWO properties must be defined for every field in the index? (Choose two)

When designing an Azure AI Search solution, you need to store high-dimensional embeddings. Which field type must be used to store these vector representations correctly?

An AI pipeline uses Azure Service Bus Queues. You want to inspect the number of messages currently residing in a queue waiting to be processed without actually receiving or locking them. Which Azure Portal section or metric should you check?

You need to configure network security for an Azure Container Apps environment that hosts an internal AI scoring API. The API must only be reachable from a specific Azure Virtual Network (VNet) and blocked from public internet access. How should you configure the environment?

You are planning a data layer architecture for an AI application on Azure that requires both relational transactional storage and vector search capabilities. Which TWO Azure database services natively support vector data types and similarity search functions? Choose two.

You need to deploy a containerized AI model to Azure Container Apps and configure it to scale based on Azure Service Bus queue messages. Which scaler should you specify?

You are designing a secure data layer architecture for financial documents using Azure Cosmos DB for NoSQL and Azure AI Search. Which THREE compliance and security controls should you implement? (Choose three)

Which Azure AI Search metric or tool helps administrators monitor query volume, latency, and throttling rates across search units?

You are configuring vector search in Azure AI Search for a knowledge mining solution. You need to ensure that the vector search queries return results efficiently and accurately. Which TWO components must be defined in the index schema? (Choose two.)

An application publishes custom events to an Azure Event Grid topic. You want to inspect the dead-lettered events that failed delivery after the maximum retry period. Where must you configure the dead-letter destination?

You need to check the health status of Azure AI services globally and see if any regional outages are currently impacting your deployed models. Which Azure tool should you consult?

You are optimizing an enterprise AI architecture for cost and performance. Which THREE of the following strategies effectively reduce Azure AI and infrastructure spending without sacrificing reliability? (Choose three)

Your Azure Machine Learning workspace is secured behind a virtual network with private endpoints. Data scientists need to access the workspace notebooks and compute instances securely from their on-premises corporate network without exposing management ports to the public internet. What hybrid networking feature should you establish?

You are configuring an Azure AI Search index where text fields are automatically analyzed using language-specific rules. Which property on an Edm.String field specifies the language analyzer (e.g., 'en.microsoft')?

You are managing an Azure Kubernetes Service (AKS) cluster that runs high-throughput AI model training jobs using NVIDIA Tensor Core GPUs. Pods frequently fail to schedule because of insufficient GPU memory across existing nodes. You need to ensure the cluster automatically provisions new GPU-enabled worker nodes when resource demands increase. What should you configure?

You are configuring vector search on an Azure AI Search index using a custom vectorizer that points to an external embedding endpoint. Which authentication method is recommended and natively supported for securely connecting Azure AI Search to the Azure OpenAI endpoint?

You are troubleshooting an AI application container in an AKS cluster that cannot resolve external domain names (e.g., huggingface.co). Which TWO Kubernetes components should you investigate?

You are troubleshooting event delivery failures in Azure Event Grid. Which TWO mechanisms can help you analyze or recover undeliverable events? (Choose two)

You are building an AI-powered order processing system. A web app publishes order events to an Azure Event Grid custom topic. A downstream Azure Function must process each event and, if processing fails, the event should be retried automatically by Event Grid. You configure the event subscription with a dead-letter destination. After a few days, you notice that some events were not processed successfully and were not delivered to the dead-letter destination. You need to ensure that failed events are captured for later analysis. What should you do?

You are designing a high-scale event ingestion pipeline using Azure Event Hubs in a secure enterprise environment. Public internet access must be disabled entirely. Producers and consumers reside in a peered Virtual Network (VNet). How should you configure network connectivity to the Event Hubs namespace?

You are deploying a containerized AI application to Azure Container Instances (ACI). The application needs to pull the container image from a private Azure Container Registry (ACR). You want to authenticate ACI to ACR without embedding credentials in the deployment configuration. What should you do?

Your organization uses Azure Event Grid namespaces for MQTT client messaging in an industrial IoT scenario. Which authentication method should you configure for IoT devices connecting directly to the Event Grid namespace MQTT broker?

Your organization requires that all messages sent to an Azure Service Bus Premium namespace are encrypted using customer-managed keys (CMK) stored in Azure Key Vault. Where must you configure this encryption setting?

You are designing an event-driven AI application that requires routing custom events from an Azure resource to multiple downstream serverless webhooks. Which Azure messaging service should you use to publish and route these events reliably?

You are managing an AKS cluster running resource-intensive AI training jobs. You want to ensure that nodes automatically scale up and down based on pending pod resource requests. Which component should you enable and configure?

You are developing a serverless AI notification workflow. When an AI model finishes training, it publishes an event to an Azure Event Grid topic. You want to trigger an Azure Logic App when this event occurs. Which Event Grid subscription event delivery schema and endpoint type should you select?

You are designing a high-availability RAG architecture where search queries must succeed even if an entire Azure region experiences an outage. You deploy Azure AI Search in a primary region and a secondary region. How should client applications handle failover?

Your organization uses Azure Service Bus Topics. You need to ensure that messages published to a topic are delivered to subscriptions in a specific priority order (e.g., high priority messages processed before normal priority). What is the recommended Service Bus design pattern to achieve this?

You are optimizing an enterprise Azure Cosmos DB for NoSQL vector database. Which THREE administrative or architectural practices help ensure high availability and predictable performance? (Choose three)

Which Azure AI Search capability allows you to extract text from images and PDF documents during indexer execution using AI cognitive skills?

Your development team is planning to deploy a containerized natural language processing model to Azure Container Apps. Which TWO features are natively supported by Azure Container Apps for managing application lifecycle and traffic? (Choose two.)

You are setting up image builds for a multi-architecture (AMD64 and ARM64) AI model container using Azure Container Registry Tasks. Which command or feature should you use to build images for both architectures simultaneously?

You are designing an enterprise AI event-driven pipeline. Events from multiple SaaS applications are published to an Azure Event Grid domain. You need to ensure that a rogue tenant cannot exhaust the delivery throughput of other tenants. Which feature should you leverage?

You are designing an application that stores vector embeddings in Azure Cosmos DB for NoSQL. You want to ensure that vectors are stored securely and that all data at rest is encrypted using customer-managed keys (CMK). How is this achieved in Cosmos DB?

Your application publishes events to an Azure Event Grid topic. You want to ensure that event publishers must present a valid shared access signature or key in the HTTP request header. Which header name does Event Grid expect for key-based authentication?

You are deploying a containerized AI model to Azure Container Apps. The model requires a GPU for inference. You configure the container app to use a workload profile with GPU support. However, when the app starts, it fails with an error indicating that the GPU is not available. You need to ensure the container can access the GPU. What should you do?

Which TWO of the following steps are required to enable GPU support for a pod in AKS?

You have a large image that takes a long time to pull. You want to speed up deployment in AKS. Which feature should you enable?

Which Azure service provides a fully managed NoSQL database with native vector search capabilities and turnkey multi-region replication?

You are implementing an AI model training pipeline that uses Azure Event Hubs to ingest training data. The pipeline must process data in order per partition and maintain high throughput. You are using the EventProcessorClient in a .NET application. You notice that some partitions are lagging while others are idle. You need to optimize the processor to balance the load across partitions. What should you do?

Which TWO mechanisms can be used to monitor and optimize costs associated with Azure AI services?

Which THREE configuration steps are required when setting up a Private Endpoint for an Azure OpenAI resource?

Which THREE of the following are security best practices for container registries?

You are deploying a containerized machine learning inference service to Azure Container Apps. The model artifact is large (15 GB) and must be securely loaded during container startup. What is the most efficient way to mount this model data into the container app?

Your organization requires strict network isolation for all Azure AI services. Which TWO of the following networking features should you configure to prevent public internet exposure? (Choose two)

You are building an AI financial transactions ledger using Azure Service Bus. Each transaction must be processed strictly in order per account ID, and if a transaction fails, subsequent transactions for that specific account must wait until the issue is resolved. Which feature should you use?

You are configuring an Azure Kubernetes Service (AKS) cluster for enterprise AI workloads. Which THREE practices should you implement to enhance cluster security and isolation? (Choose three.)

Your enterprise application uses Azure Service Bus Topics to distribute orders to inventory and billing services. A transient database outage occurs in the billing service. You must ensure that billing messages are not lost and can be retried without interfering with the inventory service. What feature should you configure?

You are designing an AI streaming architecture using Azure Event Hubs in a Dedicated cluster. You need to monitor capacity utilization to ensure the cluster does not exceed its allocated Processing Units (PUs). Which metric should you track in Azure Monitor?

Your team is running an AI copilot application that uses Azure OpenAI. To comply with data residency regulations, you need to verify that prompts and completions are processed entirely within a specific Azure region and that no data is persisted outside that region. Where can you verify regional data processing and residency commitments?

You are designing an enterprise search architecture on Azure that requires hybrid search capabilities. Which THREE components or features must be configured to successfully execute a hybrid query with semantic ranking in Azure AI Search? (Choose three)

You are integrating Azure OpenAI Service's text-embedding-ada-002 model with Azure AI Search. You want to automate the generation of embeddings directly inside the search service during data ingestion. Which component of Azure AI Search should you configure?

You need to store private AI model weights in an Azure Container Registry (ACR). Which authentication method follows the principle of least privilege for an AKS cluster to pull these images?

You are storing vector embeddings generated by Azure OpenAI in Azure Cosmos DB for NoSQL. Which built-in SQL function must you use within your query to compute vector distance when executing a similarity search?

Your enterprise AI solution runs on Azure Kubernetes Service (AKS) and connects to Azure OpenAI. You need to ensure comprehensive security across network, identity, and secrets. Which THREE of the following configurations should you deploy? (Choose three)

You are building an AI search solution in Azure AI Search. You need to ensure that when documents are deleted from the primary database, they are also automatically removed from the search index without requiring manual API calls. How should you configure the indexer?

You are building an AI container image and need to minimize its final size to speed up deployment times. Which multi-stage build practice should you follow?

You are configuring rolling updates for an AI model inference service on AKS with zero downtime requirements. Which THREE deployment or pod configuration settings should you configure?

Your Azure Service Bus Premium namespace hosts critical AI request queues. Due to sudden spikes in inference requests, one of the queues experiences peak concurrency exceeding the maximum throughput units. You need to scale the namespace capacity automatically without manual intervention. What feature should you configure?

You are designing an enterprise event-driven architecture where microservices across different Azure subscriptions need to subscribe to domain events published by a central Order Service. Which Azure Event Grid architecture should you implement?

Your team is comparing Azure Event Grid, Event Hubs, and Service Bus for an AI platform integration project. Which THREE statements correctly contrast these services? Each correct answer is factually accurate.

Your application publishes events to an Azure Event Grid system topic. You want to filter events so that your webhook subscriber receives only events where the 'eventType' is 'Microsoft.Storage.BlobCreated'. Where should you configure this filter?

Your Azure AI application relies on Azure OpenAI and Azure AI Search. You need to troubleshoot a sudden surge in HTTP errors and latency. Which THREE of the following Azure Monitor / Application Insights features or tools should you use to diagnose the issue? (Choose three)

You are designing an asynchronous AI transaction pipeline using Azure Service Bus. You need to implement the Competing Consumers pattern where multiple worker instances process messages from a single queue without duplicating work. How does Azure Service Bus natively support this pattern?

You are deploying an enterprise AI text-analysis system using Azure Service Bus topics and subscriptions. Downstream processing requires strict message ordering and session-aware processing so that related conversational turns are processed sequentially by the same worker instance. Which property must you enable on the Service Bus subscription?

You are managing an Azure Service Bus Standard namespace. Your development team requests the ability to use Topics and Subscriptions. What action must you take to support this requirement?

Which THREE of the following options are important when configuring an AKS cluster for AI workloads?

You are deploying an Azure OpenAI Service resource and need to ensure that API keys are not used for authentication. Which configuration should you apply?

You are troubleshooting a performance issue in an AI application where dependency calls to Azure OpenAI take significantly longer during periods of high traffic. You want to query Log Analytics to find the 95th percentile (p95) duration of all dependency calls to Azure OpenAI over the past 24 hours. Which KQL query should you execute?

You are optimizing an Azure Event Hubs stream processing application in Python. Messages are being processed too slowly, and you notice high CPU utilization on the consumer instance due to synchronous network I/O. Which programming model should you adopt to maximize ingestion throughput?

You are building a container image for an AI application that will be deployed to Azure Container Instances (ACI). The image will be stored in Azure Container Registry (ACR). You need to ensure that the image can be pulled by ACI securely without embedding registry credentials in the image or in scripts. Which TWO of the following approaches can be used to authenticate ACI to ACR? (Choose two.)

You are building a chat application with memory using Azure AI Search. You want to retrieve previous conversation turns that are semantically similar to the current user prompt. What search mode should you use if you want to execute both a vector search and a keyword search simultaneously and combine their results?

You are designing an AI streaming pipeline using Azure Event Hubs. You need to inspect diagnostic logs and operational metrics to track incoming request rates, server errors, and throttling events across the namespace. Where should you configure this telemetry collection in the Azure Portal?

Which distance metric in Azure Cosmos DB vector search calculates the shortest straight-line segment between two points in a multi-dimensional space?

When configuring vector search in Azure AI Search, which TWO components are defined within the vectorSearch object of an index definition? (Choose two)

You are building an event-driven AI workflow where an Azure Event Grid event triggers an Azure Function. To ensure that the function handles the Event Grid handshake validation handshake correctly when the subscription is created, what must your function code include?

Your application publishes events to an Azure Event Grid custom topic. You need to inspect the operational health and delivery success metrics of your event subscriptions. Where should you view these metrics natively in the Azure Portal?

Which THREE of the following are components of a standard Dockerfile for an AI application?

You are running a GPU-intensive AI workload in AKS. You want to ensure the pods are scheduled only on nodes that have GPUs. How do you enforce this?

You are building an event-driven application where messages sent to an Azure Service Bus queue must not be processed until a specific date and time in the future (e.g., 2 hours from now). What property should you set on the outgoing message?

You are using Azure OpenAI Service to generate embeddings for your documents before storing them in Azure Cosmos DB for NoSQL. The embedding model outputs vectors with a length of 1536. When defining the vector embedding policy in Cosmos DB, what value should you specify for the dimensions property?

You are configuring enterprise networking for an AKS cluster running sensitive AI models. Which THREE networking features should you implement for cluster security?

Which tool in Azure Portal allows you to test search queries, inspect index schemas, and view JSON responses for Azure AI Search?

You want to receive an email notification whenever monthly spending on your Azure OpenAI Service exceeds $5,000. Which Azure feature should you configure?

Your containerized AI application requires a specific version of a kernel driver that is not installed on the AKS nodes. What is the most efficient way to manage this?

You are developing a serverless application using Azure Functions that reacts to Azure Blob Storage creation events. Which event schema format should your function code expect by default when triggered by an Event Grid subscription?

You need to secure an Azure Machine Learning workspace against data exfiltration. Which THREE configurations should you implement?

You are writing a query in Azure Cosmos DB for NoSQL that sorts results by vector similarity and also filters results by a category property. How must you order the clauses in your SQL statement?

You need to monitor the monthly spending on Azure OpenAI token consumption and receive an alert when expenditures exceed a predefined threshold. Which tool should you use?

You are configuring diagnostic logging for an enterprise Azure OpenAI Service deployment. You need to forward logs to multiple destinations for security analysis and archiving. Which THREE of the following destinations are supported by Azure Monitor diagnostic settings? (Choose three)

Which TWO of the following are valid autoscaling options for AKS?

In Azure Cosmos DB for NoSQL, which property in the container definition specifies the path to the property containing the vector array within each document?

You are implementing distributed tracing across an event-driven AI workflow that passes messages from Azure Service Bus to Azure Functions, and finally to an Azure Cosmos DB database. Which mechanism should you use to propagate correlation context between these services?

You need to deploy a real-time object detection model inside an Azure Container App. The application requires immediate scale-out when the queue length of incoming image processing requests exceeds a threshold. Which scaling rule type should you configure?

An enterprise application uses Azure AI Search and needs to authenticate securely to an Azure OpenAI backend without exposing credentials in connection strings. What is the recommended approach?

You are troubleshooting a containerized AI model running in an Azure Container App that crashes immediately upon startup with an exit code indicating an Out Of Memory (OOM) error. You need to inspect the container resource allocations. Where can you adjust the memory allocation for the container?

You want to view an end-to-end distributed trace of a user request flowing from an Azure Front Door through an API Management gateway, into an Azure Function, and finally to an Azure OpenAI model call. Which Application Insights feature visualizes this entire call chain and highlights latency bottlenecks?

You are building an event-driven workflow where an external partner application needs to send custom events to your Azure backend. You decide to use Azure Event Grid Custom Topics. When the partner publishes an event, which event schema format must the JSON payload adhere to?

You are building a RAG solution on Azure AI Search. Documents and their embeddings are updated frequently, and you need the vector index to reflect changes within seconds without rebuilding the entire index. Which indexer behavior should you configure?

You are writing a Python application using the Azure Cosmos DB Python SDK to perform a vector search. You execute a parameterized SQL query containing VectorDistance(). What must be passed as a query parameter for the VectorDistance function to evaluate correctly against the container's vector property?

You need to view real-time log streams from an Azure Container App running a custom LangChain agent. Which Azure CLI command should you execute?

Your enterprise system uses Azure Service Bus. Which TWO mechanisms can you implement to handle 'poison' or repeatedly failing messages? (Choose two)

You are implementing an asynchronous AI processing pipeline using Azure Event Hubs. Multiple worker instances consume events from the same Event Hub. To prevent duplicate processing and ensure load balancing across workers, how should you manage consumer checkpoints?

You are writing a Python worker application that consumes messages from an Azure Service Bus queue. To prevent message loss during unexpected application crashes, you need to ensure that messages are locked while being processed and only deleted from the queue after successful processing. Which receive mode should you use?

You are designing a high-scale vector search architecture using Azure AI Search. Which THREE operational and architectural best practices should you follow to ensure optimal performance and cost-efficiency? (Choose three)

You are writing a Python script to query an Azure AI Search index using the azure-search-documents SDK. You want to retrieve both vector matches and keyword matches using hybrid search. Which class should you instantiate to represent the vector query?

You are configuring network security for an Azure AI Search service that indexes data from an Azure SQL Database. Both services are in the same region. You want to ensure that Azure AI Search can securely connect to Azure SQL Database without allowing inbound traffic from any public IP addresses. Which feature should you use on Azure SQL Database?

You are building an AI document processing pipeline that uses Azure Event Grid to notify downstream services when a new document is uploaded to an Azure Blob Storage container. You need to ensure that the event subscription delivers events to an Azure Function only when the document has a .pdf extension. What should you do?

You are designing an AI search architecture that requires handling millions of documents with sub-second vector similarity queries. You choose Azure AI Search. How does Azure AI Search ensure high query throughput for vector indexes?

Your Python-based AI service runs on an Azure Virtual Machine and connects to Azure OpenAI. To adhere to security best practices, you decide to eliminate storage of credentials on the VM disk by enabling a system-assigned managed identity on the virtual machine. How does your Python code obtain an access token using this managed identity?

Your company policy requires all outbound traffic from an Azure Machine Learning workspace to pass through a centralized firewall. Which feature must be implemented?

Your Azure AI application encounters transient network errors when calling cognitive services. Which TWO strategies should you implement in your code or architecture to handle these failures gracefully? (Choose two)

Your application uses Azure Event Grid to deliver events to an Azure Function webhook. Due to a downstream database outage, the Azure Function returns HTTP 500 errors. How does Event Grid handle event delivery when the endpoint fails?

You are securing an Azure AI Search service. Which THREE of the following actions are recommended for implementing a robust security posture? (Choose THREE)

You are designing an AI architecture that stores vector embeddings in Azure Cosmos DB for NoSQL. You need to implement role-based access control (RBAC) so that specific application microservices can only execute read-only queries against the database without having permission to write or delete documents. How should you configure this?

You are configuring continuous deployment for an AI model container using Azure DevOps and Azure Container Registry (ACR). You need to ensure that when a new container image is pushed to ACR, an event triggers an automated webhook that notifies an Azure Function to run post-deployment validation tests. Which event type should you subscribe to in the ACR webhook configuration?

Your enterprise AI system processes sensitive Personal Identifiable Information (PII). Compliance regulations require that audit logs capturing who accessed the AI endpoints must be retained immutably for 5 years without possibility of deletion. Where should you configure this immutability policy?

An enterprise application calls multiple Azure AI Language services. You need to trace requests across multiple distributed microservices to diagnose high latency issues. Which Azure Monitor capability should you implement?

Your team is using managed identities to connect an Azure App Service web app to an Azure OpenAI resource. The connection fails with a 403 Forbidden error. What is the most likely root cause?

You are deploying an AI-powered document processing solution that uses Azure Functions to call Azure OpenAI. The Azure Functions app runs in a Consumption plan. You need to ensure that the function can authenticate to Azure OpenAI without storing any secrets in code or configuration. You want to use a managed identity. What should you do first?

Your AI processing pipeline requires high-throughput streaming ingestion and retention of telemetry data. Which THREE features or capabilities are native to Azure Event Hubs? Each correct answer represents a complete capability.

Which THREE of the following are common reasons for a container image pull failure in AKS?

You are containerizing a large language model (LLM) inference API to run in Azure Container Apps. The model weights exceed 15 GB and cause container startup timeouts because the image takes too long to pull from Azure Container Registry (ACR). You need to optimize the container startup performance without reducing the model size. What is the best approach?

You are designing a secure enterprise generative AI platform using Azure AI Search and Azure OpenAI. Which THREE security practices should you implement to protect sensitive data and access? (Choose three)

Your organization requires that all data transmitted to an Azure Service Bus namespace is encrypted in transit using Transport Layer Security (TLS). What is the minimum required TLS version enforced by modern Azure Service Bus secure baselines?

Your development team wants to push custom Docker images containing fine-tuned open-source LLMs to a secure, private registry hosted on Azure. Which Azure service should you use to store and manage these container images?

You need to deploy a microservice application that consists of an API gateway and an AI model inference container. The solution must scale automatically based on HTTP traffic and support zero scaling when idle to reduce costs, without requiring complex Kubernetes cluster management. Which service is best suited for this?

You have deployed an AI model in Azure Machine Learning. You want to set up an alert that triggers an email to the operations team whenever the CPU utilization of the compute instance exceeds 90% for longer than 15 minutes. Which Azure Monitor feature should you configure?

Which THREE of the following items should be configured to ensure your AI workload in AKS is observable?

You are configuring authentication between an Azure Container App running an AI model and an Azure OpenAI resource. To adhere to security best practices, you must avoid storing API keys in environment variables or code. How should you configure this?

You want to set up an alert when the availability of your Azure AI custom model endpoint drops below 99%. Which Azure service should you use?

You need to deploy a quick, stateless AI data processing script packaged in a container image without setting up Kubernetes or Container Apps. Which Azure service offers the fastest deployment for a single container instance?

Which TWO actions can you perform using Azure Container Registry Tasks (ACR Tasks)?

Your organization uses Azure Event Grid to route IoT device lifecycle events. You want to ensure that events published to your custom topic are encrypted at rest using Microsoft-managed keys by default. Which action is required to enable this?

You are architecting an AI-driven video analytics pipeline using Azure Event Hubs. You need to ensure that frames belonging to the exact same video session are processed in strict chronological order by the same backend stream analytics worker. How should you partition your Event Hub?

Your team is building an AI document parser. When a user uploads a PDF to Azure Blob Storage, an event triggers an Azure Function. You want to view the delivery success rate and latency metrics of these events in the Azure Portal. Which Azure service dashboard provides these metrics out-of-the-box?

An AKS cluster is configured with KEDA for autoscaling an AI inferencing service based on Azure Queue Storage length. The pods fail to scale. Which component should you inspect first?

Your organization uses Azure Event Hubs to ingest telemetry from smart meters. You want to grant an external analytics vendor read-only access to the Event Hub data without sharing your master connection string or account keys. What should you create?

You are deploying a custom AI model container to Azure Container Apps. The container listens on port 8080 and requires health probes to verify readiness before routing traffic. How should you configure the probes?

You are troubleshooting a live AI web application where users report intermittent 504 Gateway Timeout errors when submitting large text prompts to a custom model endpoint. You want to check if the backend inference container is timing out or crashing. Where should you examine container-level stdout/stderr logs in Azure Container Apps?

You want to view real-time standard output logs from a container running in Azure Container Instances named 'ai-inferencing-aci'. Which Azure CLI command should you run?

You are designing the data architecture for an AI-powered document search application. You choose Azure AI Search because you need multi-lingual support, faceted navigation, and vector search. What is the maximum number of vector fields allowed per index in Azure AI Search?

You are auditing an Azure AI platform for security vulnerabilities. You want to ensure that secrets, connection strings, and certificates are handled in compliance with security best practices. Which THREE of the following practices should you enforce? (Choose three)

You deploy an AI inferencing service to an Azure Kubernetes Service (AKS) cluster. The service uses an ONNX Runtime container. Users report intermittent 504 Gateway Timeouts during peak batch request loads. You notice that the application pods are being terminated due to Out-Of-Memory (OOM) errors during heavy inference loads. How should you resolve this issue in your Kubernetes deployment manifest?

You need to view the logs of a container that recently crashed in an AKS cluster. Which command is used?

Your enterprise application uses Azure Service Bus Topics. A specific downstream billing system needs to receive only messages where the 'Region' property in the message application properties equals 'NorthAmerica'. What should you create on the Service Bus subscription?

You are configuring an Azure OpenAI service instance. You need to ensure that the service is only accessible from your corporate virtual network and that public internet access is completely disabled. Which configuration should you implement?

You are monitoring an Azure Machine Learning online endpoint that serves a real-time inference model. You need to detect when the model's input data distribution drifts from the training data and trigger an alert. Which Azure Machine Learning feature should you use?

You are configuring role-based access control for an Azure AI Search service. A data scientist needs to index content and query documents, but must not be permitted to manage service-level keys or change admin configurations. Which built-in role should you assign?

Your Azure Event Hubs namespace is experiencing high throughput spikes from AI inference nodes. You notice that some client producers are receiving 'QuotaExceededException' errors. What is the root cause and how should you remediate it?

You are deploying a model that requires a specific version of a non-standard OS library. You want to ensure the build environment is consistent across your team. What should you use?

You are designing a multi-tenant enterprise RAG system using Azure AI Search. Each tenant requires isolated document retrieval. Which feature should you implement to enforce data security while leveraging vector search?

An AI inference pipeline uses Azure Event Hubs to ingest telemetry. Your consumer application needs to read events starting from a specific timestamp to replay historical data for model retraining. Which feature of Event Hubs enables this capability?

You are deploying a web application container to Azure Container Apps and want to enable external HTTPS traffic. Which ingress setting must you configure?

You are designing an application that requires low-latency vector search for a high-traffic AI chatbot. You need to ensure the vector index remains performant as the dataset grows into millions of documents. Which index configuration in Azure AI Search should you implement to optimize for speed over absolute recall accuracy?

Your team is choosing between using Azure AI Search or Cosmos DB for NoSQL for a new project. Which TWO factors are key considerations that favor Azure AI Search?

You have an Azure OpenAI model deployment and need to monitor token consumption metrics over time to forecast future usage. Which tool provides pre-built charts for prompt and completion token counts?

You are setting up monitoring for a custom machine learning scoring script running inside an Azure Container Instance. You want to track custom metrics such as inference prediction confidence scores over time in Application Insights. How should you record these custom metrics in your Python scoring script?

Your application uses Cosmos DB for NoSQL to store product metadata and vectors. You need to perform a vector search that combines similarity scores with specific filter criteria on the 'category' field. How should you define your index policy to support this?

You want to ensure your AI inference service is highly available across multiple regions. What is the recommended approach for container distribution?

You are designing a data architecture on Azure where embeddings are generated offline by an Azure Databricks pipeline and stored in Azure AI Search. You want to minimize ingestion latency and optimize throughput when uploading millions of pre-computed vectors. Which client library API pattern should you use?

Which TWO of the following are true about Azure Container Apps?

When configuring an Azure Container Instances container group, which TWO properties can you define?

You are configuring GPU time-slicing on an AKS cluster to maximize GPU utilization for multiple lightweight AI inference containers sharing a single NVIDIA A100 GPU. Where must you define the time-slicing configuration profile?

Your data science team uses Azure Machine Learning notebooks. To prevent data exfiltration, you need to ensure that users cannot download datasets or trained model artifacts directly from the workspace to their local corporate laptops. Which feature should you configure?

You are designing an AI application architecture where embeddings are generated on-the-fly by an Azure Function and stored in Azure Cosmos DB for NoSQL. During peak load, the Azure Function times out due to rate limits (HTTP 429) from Azure OpenAI Service. What design pattern should you implement to make the ingestion pipeline resilient?

Your enterprise AI system uses Azure Service Bus. A background job processes messages from a subscription. If an exception occurs, the message must be abandoned, but you want to ensure that after 5 failed delivery attempts, the message is automatically moved to a dead-letter queue without custom retry logic in code. How should you configure this?

When configuring vector search in Azure AI Search, which TWO parameters must be defined when creating a vector profile? (Choose two)

You are configuring network policies in an AKS cluster to isolate your AI inference pods from other namespaces. You notice that traffic is still flowing between namespaces despite applying a NetworkPolicy. What is the most likely cause?

You are deploying an Azure OpenAI Service resource in a secured virtual network. You need to ensure that client applications inside a peered virtual network can access the Azure OpenAI endpoint without traversing the public internet, while completely blocking public network access. Which feature should you configure?

When designing an Azure Event Hubs streaming pipeline for AI telemetry, which THREE components or configurations are required to consume events reliably using the EventProcessorClient? Each correct answer represents a necessary element.

Your application sends messages to an Azure Service Bus queue. A downstream worker needs to postpone processing of a specific message until a later time without losing its place in the queue or dead-lettering it. What method should the worker invoke?

Which type of registry is most suitable for storing images that are shared across an entire organization?

Your organization wants to ensure that all Azure AI development follows strict security and observability standards. Which TWO of the following practices should be enforced across teams? (Choose two)

You are configuring data ingestion into an Azure AI Search index using an Azure AI Search indexer. The source data resides in Azure Blob Storage and consists of PDF documents. You want to chunk the documents and generate embeddings during ingestion without writing custom orchestration code. Which feature should you configure?

An Azure Machine Learning model is deployed to a Kubernetes cluster. Users report intermittent 503 errors. You suspect the underlying compute nodes are overloaded. Where should you look first to correlate these errors with infrastructure health?

You are managing an Azure Cosmos DB for NoSQL account that stores vector embeddings. You need to query the database using the VectorDistance function to find the top 10 most similar items to a given vector. The container has a vector index configured. Which query syntax should you use?

Your team is evaluating Azure Container Apps versus Azure Kubernetes Service (AKS) for hosting containerized AI workloads. Which TWO characteristics are advantages of Azure Container Apps over standard AKS? (Choose two.)

You are designing an MLOps pipeline on Azure Kubernetes Service (AKS) for a computer vision model. You need to configure GPU sharing among multiple inference pods on the same node to optimize cost. Which TWO actions should you take? Each correct answer presents part of the solution.

You are investigating performance degradation in an Azure Machine Learning inference pipeline. Which TWO of the following steps are appropriate for diagnosing the bottleneck? (Choose TWO)

You are debugging a Python application integrated with Application Insights. You notice that custom telemetry events generated in a background worker thread are not appearing in Application Insights. What is the most likely cause of this issue?

When managing Azure Container Registry (ACR), administrators can use ACR Tasks to automate tasks. Which TWO scenarios are valid use cases for ACR Tasks? (Choose two.)

You are designing a disaster recovery and backup strategy for Azure Cosmos DB for NoSQL storing vector embeddings. Which THREE backup options or capabilities are available? (Choose three)

You are troubleshooting a connection issue where an on-premises worker application cannot connect to an Azure Event Hubs namespace over AMQP port 5671 due to strict corporate firewall rules. Only port 443 outbound traffic is allowed. How can you configure the client connection to bypass this restriction?

Which Azure AI Search API parameter allows you to specify a vector query alongside traditional keyword search terms when executing a hybrid search?

Which THREE features are common to both Azure AI Search and Azure Cosmos DB for NoSQL when performing vector search?

You are designing an enterprise messaging solution using Azure Service Bus. You need to ensure that messages published within a transaction (involving multiple messages sent to different queues) either all succeed or all fail together. What feature should you use?

You are reviewing security logs in Azure Key Vault and notice unexpected access attempts from an unrecognized IP address. You need to immediately revoke all active Azure Active Directory tokens issued to a specific compromised user or service principal across your Azure AI applications. What action should you take?

You need to inspect the environment variables and configuration settings of a running container group in Azure Container Instances. Which Azure CLI command should you use?

When configuring vector search in Azure Cosmos DB for NoSQL, which TWO properties must be defined within the container's vector embedding policy? Choose two.

You are designing an enterprise search architecture that combines Azure AI Search and Azure OpenAI. Which THREE strategies help optimize hybrid search relevance and retrieval quality? Choose three.

You are configuring secure image signing and verification for your AI containers using Azure Container Registry and Notation. Which feature enables cryptographically signed container images?

Your enterprise application architecture incorporates Azure Cosmos DB for NoSQL as the primary operational data store and Azure AI Search as the vector index for semantic search. Which THREE mechanisms can you use to keep the Azure AI Search vector index synchronized with changes in Azure Cosmos DB?

You are configuring network security for an enterprise Azure Service Bus Premium namespace. Which THREE networking features can you configure to secure the namespace? (Choose three)

You are deploying a containerized AI web API to Azure Container Apps. The API must be accessible from the public internet over HTTPS. You have already created the container app and deployed the image. Which of the following should you configure to enable external ingress with automatic HTTPS?

You are managing multiple containerized AI models in AKS. You want to implement a service mesh to handle traffic splitting and mTLS. Which tool should you integrate?

Your containerized AI application needs to access sensitive API keys. What is the most secure way to provide these to your application in Azure Container Apps?

You are running an AI inference workload in an Azure Kubernetes Service (AKS) cluster. The pods require access to an Azure Machine Learning workspace data store via managed identity without storing credentials in code. Which Kubernetes feature should you configure?

Your team is building an AI solution that processes thousands of images uploaded to Azure Blob Storage daily. Each image upload must trigger an immediate Azure Function to invoke Azure Cognitive Services for metadata extraction. Which event-driven messaging service should you choose for this near real-time pub/sub architecture?

You need to prevent accidental deletion of a production Azure OpenAI resource that contains critical customer deployment configurations. Which Azure resource lock configuration should you apply?

You are optimizing an enterprise search architecture using Azure AI Search. Which THREE mechanisms help control latency and resource consumption during heavy vector query loads? (Choose three)

You are designing the data storage and indexing strategy for a multi-tenant AI search solution on Azure. Which TWO architectural practices should you implement to optimize vector search performance and tenant isolation in Azure AI Search?

Which Azure service provides cloud-scale vector search backed by either HNSW or DiskANN algorithms alongside managed NoSQL capabilities?

You are configuring vector search options in Azure Cosmos DB for NoSQL. Which TWO distance metrics are supported when defining a vector embedding policy? (Choose two)

You are implementing vector search in Azure AI Search for a document retrieval system. You need to ensure that the vector search returns the most relevant results for a query embedding. Which similarity metric should you configure in the vector search profile?

You are optimizing an AI model container image size. Which technique is most effective for reducing the footprint of an image based on a large Python deep learning framework?

You are designing an operational dashboard in Azure Monitor. Which TWO visualization components can you include in an Azure Workbook? (Choose two)

You are troubleshooting an AI inference container in Azure Container Apps that fails to start because it cannot pull the base image from Azure Container Registry. Authentication fails with an unauthorized error. What is the recommended way to grant the Container App access to ACR?

You are deploying a distributed PyTorch training job across multiple nodes in an Azure Kubernetes Service (AKS) cluster. Which mechanism should you use to facilitate high-speed, low-latency inter-node communication required for gradient synchronization?

You want to ensure that your Azure AI infrastructure costs are properly attributed to different business departments. Which TWO features should you configure? (Choose two)

Your application publishes events to an Azure Event Grid custom topic. You need to restrict publishing access so that only clients with a specific User-Assigned Managed Identity can send events. How should you secure the topic?

Your data science team pushes container images to Azure Container Registry (ACR). You need to ensure that every image pushed is automatically scanned for known vulnerabilities before being deployed to production. Which ACR feature should you enable?

You are implementing vector search in Azure AI Search using the REST API. You want to execute a pure vector query without any keyword matching. What parameter must be omitted or left empty in your query request payload?

You are configuring an Azure AI Search vector index. Which TWO parameters are part of the HNSW algorithm configuration settings? Choose two.

Which THREE of the following are benefits of using ACR Tasks for containerized AI workloads?

When migrating data into Azure AI Search for vector search, you encounter issues with ingestion. Which TWO of the following are valid reasons why an indexer might fail to ingest vector data?

You need to analyze log queries across multiple AI applications and infrastructure components to identify custom performance bottlenecks. Which query language is used in Azure Monitor Log Analytics to write queries against collected log data?

You are optimizing a large language model container inference deployment on AKS using GPU-enabled nodes (NC-series). The inference server experiences frequent out-of-memory errors on the GPU device itself during high context lengths. Which Kubernetes configuration metric should you monitor and alert on?

Which Azure AI Search field property indicates whether the contents of a field can be returned in search query result documents?

You are implementing a multi-modal AI application that searches across both text descriptions and product images stored in Azure AI Search. Which feature allows you to query both modalities within a unified search index?

You need to monitor the monthly cost of an Azure AI Document Intelligence resource to ensure it does not exceed a specified budget. Where should you configure an automated notification when the cost reaches 80% of the budget?

You need to store sensitive database connection strings and AI API keys used by containerized applications running in Azure Container Apps. Which feature should you use to securely store and reference these values?

You are optimizing search performance in Azure AI Search. You notice that vector queries are consuming excessive memory and slowing down. You decide to enable exhaustive k-NN fallback for specific queries. What does exhaustive k-NN do?

Which command-line interface tool is used to deploy and manage container images directly to Azure Container Registry?

You are configuring semantic ranking in Azure AI Search. You need to specify which fields in your index contain the title and content that the semantic ranker should analyze. Where do you configure these field mappings?

Your machine learning engineering team needs to run training jobs on Azure Machine Learning compute clusters. To minimize costs during off-peak hours, you need to configure the compute cluster to automatically scale down to zero nodes when no jobs are queued, and scale up when jobs are submitted. What setting should you configure on the compute cluster?

You are configuring comprehensive observability for an intelligent application built on Azure AI Document Intelligence and Azure OpenAI. Which THREE telemetry types or tools should you configure in Application Insights to capture complete operational insights? (Choose three)

You are configuring an Azure AI Search index schema via the REST API. You need to define a field that will hold a 1536-dimensional vector. Which field type must you assign to this field?

You are troubleshooting a performance degradation in an Azure Cosmos DB for NoSQL vector search application. Which THREE diagnostic steps or metrics should you inspect? (Choose three)

Your organization is implementing strict compliance standards. All event payloads transmitted through Azure Event Grid must be encrypted in transit using TLS 1.3 and encrypted at rest using a customer-managed key (CMK). Which Azure Event Grid tier supports configuring customer-managed keys?

Your enterprise AI application is deployed across multiple Azure regions for high availability. You need to ensure that logs from Application Insights instances in all regions are aggregated into a single central Log Analytics workspace for unified querying. How should you configure this?

You are troubleshooting a high-throughput stream processing pipeline using Azure Event Hubs. Consumers are experiencing lag because messages are accumulating faster than they can be processed. You want to temporarily replay historical events from 2 hours ago without altering the current consumer group offsets permanently. What should you do?

You are deploying a high-performance AI model in AKS. You need to ensure the container has access to the underlying host's NVIDIA GPU. What must be configured in the Pod spec?

Your team needs to process high-volume clickstream data from a web application using Apache Kafka protocols while leveraging Azure-managed infrastructure. Which Azure service should you deploy?

You are setting up auto-scaling for a containerized AI web app in Azure Container Apps. You want to scale based on the number of concurrent HTTP requests. Which scaler do you use?

When configuring Azure Monitor alerts for an AI application, which TWO action types can be included in an Action Group to notify operations personnel? (Choose two)

You are configuring a hybrid search in Azure AI Search. You want to combine results from a vector search and a keyword-based search. Which feature is specifically designed to normalize scores from these different retrieval methods into a single ranked list?

You want to ensure that no AI services can be created in unauthorized Azure regions across your entire subscription. Which Azure governance tool should you use to enforce this restriction?

You have a large collection in Azure Cosmos DB for NoSQL and want to perform a vector search. The application is currently hitting 'Request Rate Too Large' (429) errors during vector search queries. What is the most effective way to mitigate this?

When configuring vector search in Azure Cosmos DB for NoSQL, which TWO components must be defined within the container's indexing policy? (Choose two)

Your team is developing an AI solution that uses Azure Cognitive Services. You need to ensure that the API keys cannot be extracted from the client-side mobile application. What is the recommended architectural pattern to achieve this?

When storing vector embeddings in Azure Cosmos DB for MongoDB (vCore), which distance metric is natively supported when creating a vector search index?

An AI application uses Azure Service Bus queues for task distribution. A background worker receives a message, but needs more time to complete the lengthy AI inference task before the message lock expires. Which method should the worker invoke?

You want to monitor the security posture and compliance score of your Azure AI resources. Which TWO of the following tools should you use? (Choose two)

You notice that your AKS pods are stuck in 'ContainerCreating' state. You check the events and see 'FailedMount'. What is the most likely cause?

You need to export Azure Monitor metric and log data to an external SIEM solution for security auditing. Which Azure feature should you use to stream this telemetry in real-time to an external Event Hub?

Which TWO of the following are valid ways to authenticate an AKS cluster to an Azure Container Registry?

You are designing an asynchronous AI image classification workflow. Client applications upload images to Azure Blob Storage and need to be notified immediately when processing completes. The notification must include custom metadata generated by the AI worker. Which architecture should you implement?

Your enterprise AI solution runs across multiple subscriptions. You want to implement centralized cost allocation tags for all Azure AI resources to ensure every resource is tagged with 'CostCenter' and 'Environment'. Which Azure feature should you use to automatically audit and enforce these tags?

When configuring an Azure AI Search vectorizer for integrated vectorization, which TWO parameters or connections must be specified to link to an Azure OpenAI deployment? (Choose two)

You are analyzing security and compliance logs in an Azure Log Analytics workspace. You want to write KQL queries to investigate potential security incidents or token acquisition failures. Which THREE of the following KQL tables or operators are valid and useful for this investigation? (Choose three)

Which similarity metric measures the cosine of the angle between two vectors, focusing on orientation rather than magnitude, and is commonly used in Azure AI Search?

Your team is building an asynchronous order processing pipeline. If a downstream AI service fails to process a message from a Service Bus queue after 5 delivery attempts, the message must be automatically removed from active processing and preserved for manual inspection. What should you configure?

Your team runs an AI content-moderation service. When a user submits content, an Azure Function publishes an event to an Azure Event Grid custom topic. A webhook subscription delivers the event to a partner's HTTPS endpoint. The partner reports that they sometimes receive the same event multiple times and asks how to handle this. You need to advise the partner on the correct expectation for Event Grid delivery. What should you tell them?

You are building an AI search solution using Azure AI Search. You want to ensure that users searching for acronyms or synonyms receive relevant results even if the exact keyword does not appear in the document. Which feature should you configure?

You are designing a secure enterprise AI architecture on Azure. Which TWO of the following practices should you implement to secure credentials and service access? (Choose two)

Your enterprise AI solution runs on Azure Kubernetes Service (AKS) and utilizes Azure Key Vault to store secrets and API keys for cognitive services. You need to provide pods with secure, credential-less access to Azure Key Vault without storing connection strings in Kubernetes secrets or environment variables. Which integration should you implement?

You are designing an enterprise cloud solution that integrates Azure Event Grid, Azure Service Bus, and Azure Event Hubs. You need to select the appropriate service for three specific event-driven scenarios. Which THREE pairings of Azure messaging service to scenario are correct? (Choose three)

You are auditing your Azure subscription for security best practices related to Azure AI resources. Which TWO of the following actions help enforce governance and security? (Choose two)

Your enterprise architecture uses Azure Service Bus Topics and Subscriptions with geo-disaster recovery paired namespaces. A disaster occurs, and you trigger a failover to the secondary region. What happens to the messages currently in the subscriptions of the primary namespace?

Which TWO of the following features help manage traffic to containerized applications?

Which TWO of the following techniques help optimize the performance of containerized AI models in AKS?

Which REST API HTTP method is used to create or update an index definition in Azure AI Search?

You are developing a real-time AI sentiment analysis pipeline using Azure Event Hubs. The pipeline ingests customer feedback messages at a high rate. You need to ensure that each message is processed exactly once by the downstream analytics service, even if the service experiences transient failures. The analytics service uses the EventProcessorClient in the Azure.Messaging.EventHubs library. Which approach should you implement?

You are designing an enterprise event-driven architecture for AI workloads. Which TWO Azure services provide native support for publishing discrete, reactive event notifications when resources are created or modified? Each correct answer represents a complete solution.

You are implementing a RAG solution where user queries are matched against an Azure AI Search vector index. You want to ensure that search results only return documents where a specific metadata field 'securityLevel' matches the user's clearance. How should you apply this filter?

You are integrating Azure Container Registry with Azure Kubernetes Service. You want to enable authentication without storing static credentials (username/password) in Kubernetes secrets. What is the recommended integration method?

You have an AI scoring script that runs periodically. You want to execute this containerized workload on a schedule without managing virtual machines. Which Azure service is best suited for running containerized batch jobs on a schedule?

You are deploying a containerized AI inference API to Azure Container Apps. The container must read model files from an Azure Files share and write temporary logs to the same share. You need to configure the Container App so the share is available at a specific mount path inside the container. What should you do?

You are configuring a vector index in Azure AI Search and want to apply scalar quantization to reduce the memory footprint. What is the primary effect of scalar quantization on float32 vector data?

You are architecting an asynchronous machine learning inference pipeline. Which TWO Azure services allow you to decouple event publishers from event consumers using a publish-subscribe (pub/sub) pattern? Each correct answer represents a valid pub/sub architecture service.

To optimize costs and monitor consumption for an Azure OpenAI deployment across multiple business units, which THREE practices should you implement? (Choose three)

You have an AI model container hosted in Azure Container Registry. You want to ensure that every container image pushed to the registry is automatically scanned for known vulnerabilities before deployment. Which ACR feature should you enable?

You are running a containerized AI inference service on Azure Kubernetes Service (AKS). The service uses a large language model and requires 24 GB of GPU memory. You have a node pool with NVIDIA V100 GPUs (16 GB each). You need to ensure the pod can access sufficient GPU memory. What should you do?

You are designing a big data telemetry ingestion pipeline using Azure Event Hubs. Which THREE configuration options or properties must you consider when planning Event Hubs capacity and scaling? (Choose three)

Your application publishes custom events to an Azure Event Grid topic. You want to ensure that event publishers transmit data over secure HTTPS endpoints only. How should you enforce this?

You are configuring a Vector Index in Azure AI Search. You need to ensure that the vector similarity search is performed using the Cosine distance metric. Where is this configuration specified?

You are designing an Azure Cosmos DB for NoSQL container to store vector embeddings for a product recommendation engine. Queries will filter on category and then perform vector similarity search. You need to minimize latency and ensure the index supports both operations efficiently. Which indexing policy should you implement?

You are troubleshooting a scenario where hybrid queries in Azure AI Search are returning unexpected relevance rankings. Which THREE factors could influence the final score when using hybrid search with semantic ranking? (Choose three)

You are designing an AI streaming pipeline using Azure Event Hubs with Apache Kafka enabled. Existing Java producers using the Kafka producer API need to authenticate against Event Hubs securely using Microsoft Entra ID (OAuth 2.0). How should you configure the Kafka producer client properties?

Your development team is implementing an event-driven microservices architecture using Azure Service Bus. You need to ensure strict FIFO (First-In, First-Out) message processing order for related financial transaction events in an AI fraud-detection workflow. Which THREE configuration steps are required? (Choose three)

Your AI ingestion pipeline ingests millions of clickstream events per second from IoT devices and streams them into an Azure ML training pipeline. Which Azure service is specifically designed for high-throughput, low-latency telemetry ingestion at this scale?

You are developing a RAG solution and need to evaluate the quality of your vector retrieval results from Azure AI Search. Which metric is commonly used to measure the proportion of relevant documents retrieved in the top-k results?

When configuring an Azure Cosmos DB for NoSQL container to store embeddings, what data type must the vector property be stored as within the JSON document?

You are deploying an Azure OpenAI Service resource and must ensure that all traffic from your virtual network reaches the endpoint without traversing the public internet. Which feature should you configure?

You are designing an application that stores vector embeddings in Azure SQL Database. Which data type should you use to store vector data natively in modern Azure SQL?

You need to ensure that all data sent to Azure OpenAI Service is encrypted at rest using a custom encryption key that your organization controls and rotates. Which feature must you configure?

You need to restrict access to an Azure OpenAI resource so that only requests originating from a specific Azure Virtual Network are permitted. What should you configure?

You are building a RAG solution using Azure AI Search. Documents are updated frequently, and you need each document's vector embedding to be regenerated automatically whenever its text changes, without writing custom code to detect changes. Which Azure AI Search feature should you configure?

You are troubleshooting a latency issue with an AI model deployed in a Virtual Machine. You suspect the issue is related to storage IOPS limits. Which tool should you use to check the storage performance metrics?

You are designing a data layer architecture in Azure Cosmos DB for NoSQL for an AI application that performs high-frequency writes and real-time vector searches. You need to understand how vector indexing impacts write operations. What is the primary trade-off?

When designing an event-driven architecture using Azure Event Grid, which THREE security or delivery mechanisms can be configured on an event subscription? Each correct answer represents a valid configuration option.

You are configuring an Azure AI Search vector index for a retrieval-augmented generation (RAG) application. You need to select an algorithm for vector similarity search that balances recall speed with accuracy while allowing approximate nearest neighbor (ANN) search. Which vector search algorithm configuration should you select?

You want to limit the CPU resources that a specific AI inference pod can consume. Which Kubernetes field do you configure?

Your AI application consumes messages from an Azure Service Bus queue. During peak hours, processing takes longer than expected, and messages are frequently locked out and redelivered prematurely. You want to increase the time a message remains locked by the receiver. Where should you configure this setting?

You are deploying an AI model container in Azure Container Apps. Which TWO authentication mechanisms can you configure for securely pulling the image from a private Azure Container Registry?

When configuring an Azure AI Search vector profile, which TWO elements must be successfully referenced together to make the profile functional? (Choose two)

You are configuring semantic ranking in Azure AI Search to improve search relevance for your enterprise application. Which tier of Azure AI Search is required to enable semantic ranking?

Your team is preparing an Azure AI application for production release. You need to implement robust monitoring and observability. Which TWO of the following steps should be taken? (Choose two)

You are designing an enterprise-grade event-driven system where producers send financial transactions to Azure Event Hubs. You must guarantee that every single message is accounted for and that no data is lost even if an entire availability zone suffers a catastrophic failure. Which deployment configuration should you select for your Event Hubs namespace?

You are implementing an event-driven architecture where an Azure Function acts as an Event Grid subscriber. Occasionally, the downstream cognitive service is throttled, causing failures. You need to ensure that unprocessable events are not lost and can be inspected later. Where should you configure a dead-letter destination?

You are auditing your Azure AI services to ensure that all API keys are rotated regularly. What is the recommended practice for managing credentials in an enterprise AI solution?

Which THREE logs or telemetry types should you collect in Azure Monitor to comprehensively troubleshoot an AI-powered web application?

Your application publishes messages to an Azure Service Bus queue. The messages contain sensitive personal data. Enterprise compliance mandates that message payloads are encrypted end-to-end at the application layer before being sent to Service Bus. How should you implement this?

You are managing costs for an Azure AI solution and want to prevent unexpected budget overruns. Which TWO of the following cost monitoring and governance tools can you use? (Choose two)

You are building a hybrid search solution using Azure AI Search that combines BM25 full-text search with vector search. What is the name of the feature that intelligently combines and normalizes scores from different retrieval systems before presenting the final top results?

You are running a containerized AI image classification service on Azure Kubernetes Service (AKS). The service must process images from an Azure Blob Storage account. You want the pods to access the storage without embedding credentials in the container image or Kubernetes secrets. Which authentication method should you use?

An AI system uses Azure Service Bus queues for processing text-generation jobs. A specific job causes the worker function to crash repeatedly, leading to the message being redelivered continuously. Which Service Bus feature should you configure to capture these poison messages after a specific delivery count is reached?

Your team is building an automated image moderation pipeline. When an image is uploaded to Azure Blob Storage, you need to trigger an Azure Function to process it using Azure AI Vision. You want to ensure the lowest latency and native cloud event integration. Which integration approach should you configure?

When designing a hybrid search architecture that integrates Azure AI Search with an Azure OpenAI embedding model, which THREE challenges must you typically address regarding data management and retrieval? (Choose three)

Your enterprise security team mandates that all outbound traffic from your Azure Machine Learning workspace must pass through a centralized Azure Firewall, and no public IP addresses can be associated with workspace compute instances. Which workspace network isolation configuration should you select?

You are deploying an AI model container to Azure Container Apps. The container application needs to securely connect to an Azure SQL Database without storing plain-text database credentials in environment variables or application code. What is the recommended feature to use?

You are troubleshooting an Azure Function triggered by an Azure Event Grid subscription. The function is failing to receive events. Which TWO diagnostic steps should you take in the Azure Portal or via Azure CLI? Each correct answer is a valid troubleshooting action.

Your team is developing an Azure Function that acts as an Event Grid webhook subscriber. You want to test the function locally using the Azure Functions Core Tools CLI. Which command starts the local runtime and enables local event ingestion?

Your application makes frequent calls to Azure AI Document Intelligence. You need to ensure that if a transient network failure or HTTP 503 service unavailable error occurs, the Python SDK automatically retries the failed requests with exponential backoff. How should you initialize the client to support robust retry behavior?

You are developing an AI application in Azure and need to monitor custom telemetry, trace dependencies, and track dependency failures for calls made to an external machine learning model endpoint. Which Azure service should you use?

You are configuring secure ingress and network isolation for an Azure Container Apps environment. Which THREE capabilities are supported when configuring networking for Container Apps? (Choose three.)

You are designing a high-performance RAG data layer architecture using Azure AI Search. Which THREE indexing and retrieval strategies should you implement to maximize recall and precision? (Choose three)

An event subscriber endpoint hosted on an Azure App Service web app is failing to receive events from an Azure Event Grid system topic. Upon investigation, you discover Event Grid received a handshake validation failure. What is the most likely cause?

You are optimizing storage costs and search latency for a massive Azure AI Search vector index containing 50 million records, each with 3,072-dimensional embeddings from text-embedding-3-large. Which Azure AI Search feature should you implement to reduce memory footprint while maintaining acceptable recall?

Your team has noticed a significant cost spike in your Azure OpenAI usage. You need to identify which specific deployment is responsible for the highest token consumption. Which tool provides the most granular visibility into this data?

You want to track the latency of your model inference API in production. Which Azure tool should you integrate into your containerized application?

You are designing a multi-tenant AI ingestion pipeline using Azure Event Hubs. You need to ensure that low-priority tenants cannot starve high-priority tenants of partition resources. Which feature should you implement?

When configuring an Azure AI Search vector index, which TWO parameters can be adjusted within the HNSW algorithm configuration to trade off between search speed, memory usage, and recall accuracy? (Choose two)

You are troubleshooting high latency in an AI inference workload on AKS. You suspect the issue is caused by container startup time (cold starts). Which feature helps mitigate this?

Which property in an Azure Cosmos DB for NoSQL SQL query specifies the maximum number of vector search results to return?

You are building a RAG application using Azure AI Search. You want to ensure that the search results provided to the LLM are as relevant as possible by leveraging a re-ranking model. Which service must be enabled to utilize the 'Semantic Ranker'?

You are designing a RAG solution where documents are dynamically updated in Azure AI Search. You notice that search results return outdated information immediately after document updates. What is the cause of this behavior?

An application publishes custom events to an Azure Event Grid custom topic. You need to route events dynamically based on the event's 'department' property in the event payload. Which filtering mechanism should you configure on the Event Grid subscription?

You are building a container image for an AI model that requires GPU acceleration. You plan to run it on Azure Kubernetes Service (AKS). Which step must you take to ensure the pods can access GPU resources?

You want to find out which Azure subscriptions and resource groups are incurring the highest costs for Azure Machine Learning compute instances this month. Where should you view this cost breakdown?

An AI application hosted in Azure App Service throws intermittent socket exhaustion errors under heavy load when calling Azure OpenAI. You suspect improper HTTP client management. How should you fix this in .NET?

Your Azure OpenAI model deployment is experiencing a sudden latency spike. You want to determine if the bottleneck is due to server-side processing time or network transport overhead in your client application. Which Application Insights telemetry property should you inspect?

You are troubleshooting a containerized AI model deployment in Azure Container Apps that fails to pass its HTTP readiness probe. You need to inspect the container logs and runtime diagnostics. Which THREE tools or commands can you use to troubleshoot this issue? Each correct answer presents a complete solution.

Your enterprise application uses Azure Event Grid. Which TWO event schemas are natively supported when publishing events to an Event Grid custom topic? (Choose two)

You are writing a query in Azure Cosmos DB for NoSQL to retrieve documents based on vector similarity against a target embedding. Which built-in SQL function should you use in the ORDER BY clause?

You need to deploy a set of batch AI processing containers in Azure Container Instances that run to completion and then terminate. Which container group restart policy should you select?

You are optimizing an Azure Cosmos DB for NoSQL vector search container. Which THREE properties must be correctly configured inside the vectorEmbeddingPolicy JSON object? (Choose three)

You are designing an IoT data ingestion architecture using Azure Event Hubs. Devices occasionally send malformed JSON payloads that cause stream processing jobs to crash. You need to route these invalid messages to a separate error container without stopping the main ingestion stream. What should you implement?

You are managing costs for multiple Azure AI services used by different business units. You need to track expenditure against specific departmental budgets and receive automated alerts when spending exceeds 80% of the allocated budget. Which Azure feature should you use?

Your company policy requires securing AI model endpoints by disabling public internet access and ensuring all API requests use secure managed identities. Which TWO actions must you take? (Choose two)

Your company stores product catalog items in Azure Cosmos DB for NoSQL and needs to implement vector search for recommendation capabilities. Which indexing policy property must you add to enable vector indexing on a container?

You need to ensure that traffic between your Azure App Service hosting an AI wrapper and your Azure AI Search instance does not traverse the public internet. Which feature should you implement?

You are configuring Azure Event Grid to send events to an Azure Logic App. Which built-in trigger should you use in your Logic App workflow to receive these events seamlessly?

You are setting up Azure Monitor alerts for an Azure AI Search service. You want an SMS message to be sent to the on-call engineer whenever the search query latency exceeds 500ms. What component of Azure Monitor links the metric alert to the SMS notification channel?

You are configuring TLS termination for an AI model API hosted in Azure Container Apps using a custom domain name. Where must you upload or configure the custom SSL certificate?

You are architecting an event-driven AI ingestion pipeline using Azure Event Hubs. Which TWO features or capabilities are native to Azure Event Hubs? (Choose two)

You are auditing an Azure AI solution for security compliance. You discover that developers have been hardcoding storage account connection strings in source code repositories. You need to remediate this immediately by migrating secrets to Azure Key Vault and ensuring your Python application retrieves them securely at runtime using a managed identity. Which Python library and credential class should your code use?

When troubleshooting a Python AI application integrated with Application Insights, you want to ensure comprehensive error tracking and telemetry collection. Which TWO of the following SDK practices should you implement? (Choose two)

You are deploying a containerized AI model to Azure Container Apps. The model requires a persistent volume to store intermediate results and a secret to access an external API. You need to configure the container app to meet these requirements. Which two actions should you perform? (Choose two.)

Your AI application is hosted on Azure App Service and connects to Azure Cosmos DB and Azure OpenAI. You want to ensure that if credentials or connection strings ever leak, they cannot be used from unauthorized networks. Which feature should you implement?

An enterprise deployment of Azure OpenAI requires data encryption using a key that your security team fully manages and controls in Azure Key Vault. What must you configure?

You are designing a high-throughput RAG pipeline where documents are continuously ingested and queried. You choose Azure Cosmos DB for NoSQL as your vector store. How does Cosmos DB handle vector indexing updates when new documents are inserted?

Your development team needs to store API keys and connection strings for an Azure Cognitive Search service securely without embedding them in the source code. Where should you store these secrets?

You are developing an enterprise retrieval-augmented generation (RAG) application using Azure AI Search. You need to configure a vector index to store dense vector embeddings alongside traditional text fields. Which property within the Azure AI Search index definition must be explicitly configured with a vector search profile to enable HNSW (Hierarchical Navigable Small World) algorithm indexing?

A team member needs read-only access to view AI model deployment metrics in Azure Monitor but should not be able to change any resource settings. Which built-in role should you assign?

You are evaluating Cosmos DB for NoSQL vs. Azure AI Search for a vector search application. Your application requires strict ACID compliance for metadata updates along with vector search. Which should you choose and why?

You are configuring authentication and authorization across Azure messaging and eventing services. Which THREE statements regarding security features are correct? (Choose three)

When configuring vector search in Azure Cosmos DB for NoSQL, which TWO steps are required to prepare a container for vector search before inserting documents? (Choose two)

Which Azure feature allows you to scan images in your registry for vulnerabilities before deploying them to your production cluster?

You are configuring vector indexing in Azure Cosmos DB for MongoDB (vCore). You need to choose an indexing type for your vector property to balance query performance and recall accuracy for high-dimensional data. Which vector index type should you select for approximate nearest neighbor (ANN) search?

You are troubleshooting a performance issue where an Azure AI Search indexer fails to complete within the scheduled execution window when processing large PDF documents. What is the most effective configuration change to resolve the timeout issue?

You are configuring geo-disaster recovery for an Azure Service Bus Premium namespace containing critical financial transactions. A regional outage occurs. After initiating a failover to the secondary region, what happens to the alias pointing to the namespace?

You are designing a vector search solution using Azure AI Search. Which THREE of the following are necessary steps to configure an index to support vector search?

You are querying an Azure Cosmos DB for NoSQL container using vector search. You execute a query using the VectorDistance() system function. Which query structure is required to properly execute this vector search?

You are deploying an AI model container to Azure Container Apps. The container requires persistent storage to cache downloaded Hugging Face model weights across container restarts. Which storage type should you attach to the Container App?

Your application emits custom events to an Azure Event Grid topic. You want to test your webhook endpoint locally during development without deploying your code to Azure. Which tool should you use to receive events directly from Event Grid?

You are deploying a custom PyTorch model container image to Azure Container Apps. The container needs to scale out based on HTTP concurrent requests. Which built-in scale rule type should you configure in Azure Container Apps?

When designing a data layer architecture for an AI application using Azure AI Search, what is the primary role of an integrated vectorizer?

You want to set up an alert that notifies you whenever an Azure AI service resource is deleted or modified in your subscription. Which Azure feature should you use to capture these management-plane operations?

You are designing an event-driven AI document processing pipeline. Incoming PDF documents are uploaded to Azure Blob Storage, triggering an Event Grid event. The event triggers an Azure Function that downloads the PDF, processes it with Azure AI Document Intelligence, and saves results to Azure Cosmos DB. Under high load, duplicate events are occasionally received by the function, causing duplicate Cosmos DB records. How should you design the Azure Function to handle idempotency?

You want to create a centralized dashboard in the Azure portal that displays custom AI model performance metrics alongside infrastructure CPU and memory metrics. Which Azure Monitor feature should you create?

When analyzing cost reports in Azure Cost Management for your machine learning and AI services, which TWO grouping or filtering options help identify spending anomalies? (Choose two)

You are deploying an AI workload to Azure Container Apps. You need to ensure the container scales down to zero when there is no traffic. What should you configure?

You are designing a data layer architecture for an enterprise AI assistant that requires high-performance vector search, structured filtering, and multi-tenant isolation. Which THREE design patterns should you consider? (Choose three)

Your organization requires that container images stored in Azure Container Registry (ACR) comply with security standards. Which TWO actions can you take to secure container images in ACR? (Choose two.)

When configuring vector search algorithms in Azure AI Search, you can tune several parameters associated with the Hierarchical Navigable Small World (HNSW) graph. Which THREE parameters are configurable within an HNSW algorithm profile?

You are designing a secure MLOps pipeline using Azure Container Registry. Which THREE practices should you implement to secure your AI container images?

Which Azure AI Search feature allows you to re-order search results using advanced machine learning models trained by Microsoft to dramatically improve semantic relevance?

You are optimizing query performance for an Azure AI Search index experiencing high query volumes with vector search. You need to scale out query processing capabilities without increasing index build time. Which action should you perform?