Knowledge + Practice

CCNA Security And Observability Questions

75 of 97 questions · Page 1/2 · Security And Observability topic · Answers revealed

Practice these questions Exam hub All questions

1

Multi-Selecthard

You are troubleshooting a scenario where an Azure App Service hosting an AI frontend cannot communicate with an Azure OpenAI endpoint secured by a private endpoint in a different virtual network. Which THREE of the following networking configurations should you verify? (Choose three)

Select 3 answers

A.Azure Front Door geo-filtering rules blocking all international DNS queries.

B.Virtual network peering between the App Service VNet and the private endpoint VNet.

C.App Service VNet integration enabled so outbound application traffic can route into the VNet.

D.Local admin passwords on the App Service worker instances.

E.Private DNS zone integration (e.g., privatelink.openai.azure.com) linked to the virtual networks.

AnswersB, C, E

A private endpoint resides in its own VNet, so traffic from the App Service VNet must traverse a peering link to reach it. Without peering, routing between the two virtual networks fails, blocking connectivity to the Azure OpenAI private endpoint.

Why this answer

Option B is correct because the App Service VNet and the private endpoint VNet must be peered (or otherwise connected via a gateway/transit) so that traffic can flow between them; without peering, the App Service cannot reach the private endpoint's private IP. Option C is correct because App Service must have regional VNet integration enabled, which routes outbound application traffic from the app into the delegated integration subnet, allowing it to reach the peered VNet and the private endpoint. Option E is correct because the private endpoint's FQDN (e.g., <resource>.privatelink.openai.azure.com) must resolve to the private IP via a private DNS zone linked to the relevant VNets; without this DNS integration, name resolution returns the public IP and the connection fails.

Option A is not relevant because Azure Front Door geo-filtering affects inbound HTTP traffic distribution, not internal DNS resolution or App Service-to-private-endpoint connectivity. Option D is not relevant because local admin passwords on worker instances have no bearing on VNet routing, peering, or private DNS resolution for private endpoint access.

Exam trap

AI-200 often tests the assumption that VNet integration alone is sufficient — candidates forget that private DNS zone linkage is mandatory or that peering must exist between the two VNets.

Practice this question →

2

MCQeasy

You need to review the security recommendations provided by Microsoft for your Azure AI resources, such as enabling HTTPS-only traffic and configuring managed identities. Which Azure tool provides these prioritized security recommendations and a security score?

A.Microsoft Defender for Cloud

B.Azure Cost Management

C.Azure Monitor Metrics

D.Azure Service Health

AnswerA

Microsoft Defender for Cloud continuously assesses Azure AI resources against Microsoft's security benchmarks, surfacing prioritised recommendations such as HTTPS-only traffic and managed identities, plus an aggregated secure score. That directly matches the requested recommendations and scoring capability.

Why this answer

Microsoft Defender for Cloud continuously assesses Azure resources — including Azure AI services — against security benchmarks and produces prioritized recommendations plus a secure score. Recommendations such as enabling HTTPS-only traffic, configuring managed identities, and restricting network access appear directly in Defender for Cloud's regulatory compliance and recommendations blades. This is the tool Microsoft positions for cloud security posture management (CSPM).

Exam trap

AI-200 often tests whether candidates can distinguish security posture management (Defender for Cloud) from operational monitoring (Azure Monitor) and platform health (Service Health), so the trap is picking a monitoring tool for a security-recommendation question.

How to eliminate wrong answers

Option B is wrong because Azure Cost Management analyzes and optimizes spending, not security posture — it has no recommendations about HTTPS or managed identities. Option C is wrong because Azure Monitor Metrics stores and visualizes numeric time-series data (CPU, latency, request counts); it does not generate security recommendations or a security score. Option D is wrong because Azure Service Health reports platform incidents, planned maintenance, and health advisories for Azure services, not per-resource security hardening guidance.

Practice this question →

3

MCQhard

You are troubleshooting an AI application where users experience intermittent authentication failures when the application attempts to acquire tokens from Azure Active Directory for calling Cognitive Services. You want to inspect the exact HTTP status codes and error descriptions returned during token acquisition. Which namespace or log table should you analyze in Log Analytics?

A.Azure Cost Management amortization tables

B.Azure Storage blob access audit logs

C.Azure Key Vault secret version history

D.Azure Active Directory sign-in logs or AzureDiagnostics table capturing managed identity token requests

AnswerD

Microsoft Entra ID sign-in logs and the AzureDiagnostics table record managed identity token requests, including HTTP status codes and error descriptions. Analysing these satisfies the requirement to inspect exact token acquisition failures rather than application-level or activity-log entries.

Why this answer

Token acquisition failures against Azure AD (Entra ID) are logged in the Azure AD sign-in logs and, for managed identity token requests, in the AzureDiagnostics table within Log Analytics. These logs capture the exact HTTP status codes (e.g., 400, 401, 403) and error descriptions such as AADSTS error codes returned during the OAuth 2.0 client credentials flow. Analyzing these tables lets you pinpoint whether the failure is due to misconfigured credentials, missing role assignments, or conditional access policies.

Exam trap

AI-200 often tests the confusion between resource-level diagnostic logs (like blob access or Key Vault audit) and identity-level logs, tricking candidates into selecting storage or vault logs when the failure is fundamentally an authentication/token issue.

How to eliminate wrong answers

Option A is wrong because Azure Cost Management amortization tables contain billing and usage cost data, not authentication or token acquisition telemetry. Option B is wrong because Azure Storage blob access audit logs record blob read/write/delete operations, not Azure AD token issuance events. Option C is wrong because Key Vault secret version history tracks secret lifecycle and versioning metadata, not HTTP status codes from token endpoint calls.

Practice this question →

4

MCQhard

Your Azure AI application sends requests to multiple cognitive services. You need to route diagnostic logs and metrics from your Azure OpenAI and Azure AI Language services to a centralized Log Analytics workspace across different resource groups. What is the recommended way to configure this?

A.Enable Application Insights dependency tracking on the subscription level via Azure Policy

B.Configure diagnostic settings on each AI service resource pointing to the centralized Log Analytics workspace

C.Configure Azure Event Grid subscriptions for every log event emitted by the AI endpoints

D.Deploy a Log Analytics agent (MMA) directly onto the Azure OpenAI PaaS resource instances

AnswerB

Diagnostic settings are configured per resource, so each Azure OpenAI and Azure AI Language resource needs its own setting pointing at the shared Log Analytics workspace. This centralises logs and metrics across resource groups without moving or recreating the services.

Why this answer

Diagnostic settings are the native Azure mechanism for routing resource-level platform logs and metrics from individual PaaS resources (such as Azure OpenAI and Azure AI Language) to a Log Analytics workspace, Storage account, or Event Hub. Because diagnostic settings are configured per resource and can target a workspace in any resource group or subscription (as long as the caller has appropriate RBAC), this is the correct way to centralize telemetry across resource groups.

Exam trap

The trap here is confusing application-level telemetry (Application Insights) or event routing (Event Grid) with resource-level platform diagnostics, causing candidates to pick a mechanism that cannot actually export Azure OpenAI/AI Language logs and metrics.

How to eliminate wrong answers

Option A is wrong because Application Insights dependency tracking is an application-level APM feature that captures outbound calls from instrumented apps, not the platform diagnostic logs and metrics of the Azure OpenAI or AI Language resources themselves, and Azure Policy cannot 'enable' dependency tracking at subscription scope. Option C is wrong because Event Grid delivers discrete resource events (e.g., blob created, resource updated), not the full diagnostic log/metric stream, and you would still need diagnostic settings to emit those logs. Option D is wrong because the Log Analytics agent (MMA) is for IaaS VMs and on-premises servers; it cannot be installed on PaaS resources like Azure OpenAI, which expose logs only via diagnostic settings.

Practice this question →

5

MCQmedium

You are using Application Insights to monitor a Retrieval-Augmented Generation (RAG) application. You need to log custom dimensions such as prompt token counts and user IDs alongside standard telemetry. Which class should you use in your C# application?

A.Configure the AzureMonitorLogExporter in the standard logging pipeline.

B.Use the TelemetryClient class and its TrackEvent method with a dictionary of custom dimensions.

C.Use the DiagnosticSource class to emit unstructured string logs to Console.

D.Use the AzureKeyVaultClient to store transient custom properties.

AnswerB

TelemetryClient.TrackEvent accepts a properties dictionary, letting you attach prompt token counts and user IDs as custom dimensions to Application Insights events. This satisfies the requirement to log custom dimensions alongside standard telemetry from the C# RAG application.

Why this answer

The TelemetryClient class in the Application Insights SDK is the primary API for sending custom telemetry, and its TrackEvent method accepts a dictionary of custom dimensions (properties) that are indexed and queryable in Application Insights. This allows you to attach arbitrary key-value pairs such as prompt token counts and user IDs to a custom event, which then appear as customDimensions in the telemetry schema. Unlike plain logging, this approach preserves structured data and integrates with the full Application Insights analytics and filtering capabilities.

Exam trap

AI-200 often tests the distinction between structured telemetry via TelemetryClient and unstructured logging or unrelated services, so candidates may mistakenly choose logging exporters or key vaults for custom dimensions.

How to eliminate wrong answers

Option A is wrong because AzureMonitorLogExporter is an OpenTelemetry exporter that forwards logs to Azure Monitor, but it does not provide a direct, structured way to attach custom dimensions to individual telemetry items in the Application Insights SDK model; it is used for exporting existing log records, not for creating custom events with properties. Option C is wrong because DiagnosticSource emits unstructured string logs to listeners like Console, which lack the structured custom dimensions and Application Insights integration required for queryable telemetry. Option D is wrong because AzureKeyVaultClient is for managing secrets and keys, not for storing or transmitting telemetry data; using it for custom properties would be an architectural anti-pattern and would not surface the data in Application Insights.

Practice this question →

6

MCQmedium

You are troubleshooting intermittent HTTP 429 (Too Many Requests) errors from an Azure OpenAI deployment. Which metric in Azure Monitor should you inspect to confirm whether token rate limits are being exceeded?

A.System Assigned Managed Identity Success Rate

B.Virtual Network Gateway Packet Drops

C.Data Ingestion Volume (GB)

D.Normalized Token Utilization

AnswerD

Normalized Token Utilization expresses consumed tokens as a percentage of the deployment's allocated token-per-minute quota, so sustained values near 100% confirm rate limiting. Raw token counts alone cannot distinguish throttling from normal load, making this the precise throttling indicator.

Why this answer

Normalized Token Utilization is the Azure OpenAI metric that expresses consumed tokens as a percentage of the deployment's tokens-per-minute (TPM) quota. When it approaches or exceeds 100%, the service returns HTTP 429, so this metric directly confirms whether rate limits are the cause.

Exam trap

AI-200 often tests whether candidates confuse authentication, networking, or ingestion metrics with quota metrics — the phrase 'token rate limits' is the tell for Normalized Token Utilization.

How to eliminate wrong answers

Option A is wrong because managed identity success rate relates to authentication token acquisition, not OpenAI request throttling. Option B is wrong because Virtual Network Gateway packet drops indicate network-layer issues, not application-level rate limiting. Option C is wrong because Data Ingestion Volume measures log/data ingestion into Log Analytics, unrelated to OpenAI token quotas.

Practice this question →

7

MCQmedium

You need to secure access to an Azure AI Search service so that a Python web app running on Azure App Service can query indices without embedding API keys in configuration files. What is the most secure authentication mechanism to configure?

A.Enable a system-assigned managed identity on App Service and assign the Search Index Data Reader role on Azure AI Search

B.Configure an IP firewall on Azure AI Search to allow only the static outbound IP of App Service

C.Store the primary admin API key in Azure App Service configuration environment variables

D.Use shared access signatures (SAS) tokens generated by a client script

AnswerA

A system-assigned managed identity lets App Service obtain Microsoft Entra ID tokens automatically, so no API keys sit in configuration files. Assigning the Search Index Data Reader role on Azure AI Search grants least-privilege query access, satisfying the requirement to query indices without embedded credentials.

Why this answer

The most secure approach is to enable a system-assigned managed identity on the App Service and grant it the Search Index Data Reader role on the Azure AI Search service. Managed identities eliminate secrets entirely — Azure AD issues and rotates the credentials automatically, and the app authenticates to Search using its identity. This follows the zero-trust, secretless best practice for service-to-service authentication.

Exam trap

AI-200 often tests whether candidates equate network restrictions with authentication; the trap is choosing the IP firewall because it sounds secure, when the question explicitly asks for a secretless authentication mechanism.

How to eliminate wrong answers

Option B is wrong because an IP firewall only restricts network origin; it does not authenticate the caller, and it does nothing to remove the need for an API key — anyone from that IP could still query if they had a key. Option C is wrong because storing the primary admin API key in App Service configuration embeds a long-lived secret that can leak via logs, source control, or portal access, and the admin key grants full control rather than least-privilege read access. Option D is wrong because Azure AI Search does not issue SAS tokens — SAS is an Azure Storage concept — so this option describes a mechanism that does not exist for Search.

Practice this question →

8

MCQeasy

You need to check the health status of Azure AI services globally and see if any regional outages are currently impacting your deployed models. Which Azure tool should you consult?

A.Azure Cost Management

B.Azure Policy

C.Azure Advisor

D.Azure Service Health

AnswerD

Azure Service Health reports platform-wide and regional service issues, including outages affecting Azure AI services, filtered to your subscriptions and resources. This satisfies the need to check global health and current regional outages impacting deployed models.

Why this answer

Azure Service Health provides personalized and global views of Azure service issues, planned maintenance, health advisories, and security advisories that may affect your deployed resources. It is the correct tool to check for regional outages impacting Azure AI services and your models.

Exam trap

AI-200 often tests whether candidates confuse Azure Advisor (recommendations) with Azure Service Health (live outage/incident reporting) — the trap is picking Advisor because it sounds like it 'advises on health.'

How to eliminate wrong answers

Option A is wrong because Azure Cost Management tracks and analyzes spending, not service health or outages. Option B is wrong because Azure Policy enforces governance rules and compliance on resources, not health monitoring. Option C is wrong because Azure Advisor provides best-practice recommendations for cost, performance, reliability, and security — it does not report live regional outages.

Practice this question →

9

Multi-Selecthard

You are optimizing an enterprise AI architecture for cost and performance. Which THREE of the following strategies effectively reduce Azure AI and infrastructure spending without sacrificing reliability? (Choose three)

Select 3 answers

A.Delete all Application Insights workspaces and stop collecting any monitoring telemetry.

B.Purchase Azure reservations or provisioned throughput commitments for steady-state workloads.

C.Right-size virtual machine and GPU SKUs based on historical Azure Monitor utilization metrics.

D.Configure Azure Machine Learning compute clusters to scale down to zero nodes when idle.

E.Run all development and production workloads on the highest tier enterprise GPUs 24/7 regardless of usage.

AnswersB, C, D

Reservations and provisioned throughput convert variable, consumption-based billing into a discounted fixed rate for predictable, steady-state demand, cutting compute and token costs substantially. Because the stem requires no loss of reliability, this preserves dedicated capacity rather than trading performance away, unlike spot or serverless alternatives.

Why this answer

Option B is correct because Azure reservations and provisioned throughput commitments (for example, Azure OpenAI Provisioned Throughput Units or Azure AI Search provisioned capacity) offer significant discounts over pay-as-you-go pricing for predictable, steady-state workloads, lowering cost while maintaining guaranteed capacity and reliability. Option C is correct because right-sizing VM and GPU SKUs using historical Azure Monitor utilization metrics ensures you pay only for the compute capacity actually needed, eliminating over-provisioning waste without reducing the performance required by the workload. Option D is correct because Azure Machine Learning compute clusters support min_nodes=0, which automatically scales the cluster down to zero nodes when idle, so you incur no compute charges during idle periods while still scaling back up on demand, preserving availability.

Option A is incorrect because deleting Application Insights workspaces and halting telemetry removes observability, degrading reliability, troubleshooting, and performance tuning rather than reducing spend responsibly. Option E is incorrect because running all development and production workloads on the highest-tier enterprise GPUs 24/7 regardless of usage maximizes cost and wastes capacity, directly contradicting the goal of cost optimization.

Exam trap

AI-200 often tests whether candidates equate 'cost reduction' with 'removing monitoring' or 'always using top-tier hardware', when the correct strategies are commitment discounts, right-sizing, and scale-to-zero.

Practice this question →

10

MCQmedium

Your Azure Machine Learning workspace is secured behind a virtual network with private endpoints. Data scientists need to access the workspace notebooks and compute instances securely from their on-premises corporate network without exposing management ports to the public internet. What hybrid networking feature should you establish?

A.Public IP addresses assigned to all developer workstations with NSG allow rules

B.Azure ExpressRoute or Site-to-Site VPN with Azure Private Link to workspace private endpoints

C.Turning off all network security groups and opening all ports on the Azure firewall

D.Azure Bastion deployed on the on-premises physical router

AnswerB

ExpressRoute or Site-to-Site VPN extends the corporate network to Azure, while Azure Private Link routes workspace traffic through private endpoints, keeping management ports off the public internet. This satisfies the on-premises access requirement without exposing the workspace publicly, unlike public endpoint access or jump-host workarounds.

Why this answer

To reach a private-endpoint-secured Azure Machine Learning workspace from on-premises without exposing management ports, you combine private connectivity with Azure Private Link. ExpressRoute or a Site-to-Site VPN provides the encrypted hybrid path from the corporate network into Azure, and Private Link resolves the workspace's private endpoint to a private IP inside the VNet, so notebook and compute traffic never traverses the public internet.

Exam trap

AI-200 often tests the misconception that public IPs plus NSG rules constitute secure hybrid access, when the correct answer requires private connectivity (ExpressRoute/VPN) plus Private Link to avoid internet exposure.

How to eliminate wrong answers

Option A is wrong because assigning public IPs to developer workstations and allowing NSG rules exposes the workspace to the internet and defeats the purpose of private endpoints — it reintroduces the public attack surface. Option C is wrong because disabling NSGs and opening all ports is a severe security anti-pattern that removes defense in depth and violates least privilege. Option D is wrong because Azure Bastion is an Azure-hosted jump-host service for RDP/SSH into Azure VMs; it cannot be deployed on an on-premises physical router and does not provide hybrid private connectivity to a workspace.

Practice this question →

11

Multi-Selectmedium

Which TWO mechanisms can be used to monitor and optimize costs associated with Azure AI services?

Select 2 answers

A.Network Watcher IP flow logs.

B.Application Insights live metrics stream.

C.Azure Bastion session monitoring logs.

D.Azure Budgets with configured email alert notifications.

E.Azure Advisor cost recommendations for right-sizing and idle resource cleanup.

AnswersD, E

Azure Budgets track actual and forecast spend against a defined threshold and trigger email alert notifications when usage approaches or exceeds it. This satisfies the requirement to monitor and optimise costs for Azure AI services through proactive notification.

Why this answer

Azure Budgets (option D) let you set spending thresholds on a scope such as a resource group or subscription and trigger email alert notifications when actual or forecasted costs approach or exceed the budget, which directly supports monitoring and controlling Azure AI service spend. Azure Advisor cost recommendations (option E) analyze usage telemetry to surface right-sizing guidance and idle or underutilized resource cleanup, which is exactly the optimization mechanism for reducing AI service costs. The remaining options are unrelated to cost management: Network Watcher IP flow logs (A) capture network traffic metadata for connectivity and security troubleshooting, Application Insights live metrics stream (B) provides real-time performance and telemetry diagnostics for applications, and Azure Bastion session monitoring logs (C) record secure RDP/SSH session activity through Bastion hosts, none of which report or optimize billing costs.

Exam trap

AI-200 often tests the boundary between cost management tools (Budgets, Advisor) and operational monitoring tools (Application Insights, Network Watcher) — candidates pick performance or security tools thinking they provide cost visibility, when only Budgets and Advisor address cost.

Practice this question →

12

Multi-Selectmedium

Which THREE configuration steps are required when setting up a Private Endpoint for an Azure OpenAI resource?

Select 3 answers

A.Enable public network access on the Azure OpenAI resource with unrestricted IP ranges.

B.Deploy the private endpoint into a subnet within your Virtual Network.

C.Integrate with a private DNS zone to resolve the Azure OpenAI FQDN to the private IP address.

D.Assign a public IP address directly to the private endpoint network interface.

E.Select the target sub-resource, such as 'account', for the Azure OpenAI service.

AnswersB, C, E

A private endpoint is a network interface, so it must be deployed into a subnet within your Virtual Network. This placement gives the Azure OpenAI resource a private IP reachable only inside that VNet, satisfying the isolation requirement.

Why this answer

Option B is correct because a private endpoint is a network interface created inside a subnet of your Virtual Network, so the endpoint must be deployed into a VNet subnet to give the Azure OpenAI resource a private IP address reachable from that network. Option C is correct because name resolution must map the Azure OpenAI FQDN (for example, <resource>.openai.azure.com) to the private endpoint's private IP; this is done by integrating with a private DNS zone such as privatelink.openai.azure.com and linking it to the VNet. Option E is correct because when creating the private endpoint you must specify the target sub-resource (group ID) of the Azure OpenAI service, which is 'account', so the endpoint connects to the correct service component.

Option A is not required and is in fact contrary to the goal, since private endpoint access typically involves disabling or restricting public network access rather than enabling it with unrestricted IP ranges. Option D is incorrect because a private endpoint's network interface receives a private IP address from the subnet; it is not assigned a public IP address.

Exam trap

AI-200 often tests the misconception that a Private Endpoint requires enabling public access or assigning a public IP, when in fact it is the opposite — private endpoints use private IPs and typically accompany disabling public network access.

Practice this question →

13

Multi-Selectmedium

Your organization requires strict network isolation for all Azure AI services. Which TWO of the following networking features should you configure to prevent public internet exposure? (Choose two)

Select 2 answers

A.Azure Private Link with private endpoints mapped to your virtual network

B.Enabling anonymous access on Application Insights data ingestion endpoints

C.Disabling public network access on the Azure AI resource firewall settings

D.Using Azure Front Door with global public anycast IPs

E.Assigning public IP addresses to all backend scoring containers

AnswersA, C

Private endpoints assign a private IP from your virtual network subnet to the Azure AI service, so traffic traverses the Microsoft backbone rather than the public internet. This directly satisfies the strict network isolation requirement by removing public exposure entirely.

Why this answer

Private endpoints via Azure Private Link and disabling public network access on PaaS resources ensure complete network isolation from the public internet.

Practice this question →

14

MCQhard

Your team is running an AI copilot application that uses Azure OpenAI. To comply with data residency regulations, you need to verify that prompts and completions are processed entirely within a specific Azure region and that no data is persisted outside that region. Where can you verify regional data processing and residency commitments?

A.Azure OpenAI service compliance terms and data residency documentation in the Azure Trust Center

B.Azure Resource Graph queries filtering by region

C.Azure Monitor geographic latency metrics dashboard

D.Application Insights dependency maps

AnswerA

The Azure Trust Center publishes Azure OpenAI compliance terms and data residency commitments, documenting which regions process prompts and completions and confirming no persistence outside them. This satisfies the requirement to verify regional processing against regulatory obligations.

Why this answer

The Azure Trust Center hosts Azure OpenAI Service compliance terms and data residency documentation, which is where you verify regional processing and residency commitments. It documents where data is processed, whether prompts/completions are stored, and the contractual commitments Microsoft makes. This is the authoritative source for compliance and data residency verification.

Exam trap

AI-200 often tests the confusion between resource metadata tools (Resource Graph) and compliance documentation (Trust Center), tempting candidates to pick a technical query tool when the question asks where to verify contractual residency commitments.

How to eliminate wrong answers

Option B is wrong because Azure Resource Graph queries return resource metadata (locations, tags, properties) but do not document or verify data processing/residency commitments; they show where resources are deployed, not where data is processed or whether it is persisted. Option C is wrong because Azure Monitor geographic latency metrics measure performance/latency, not data residency or processing location, and have no bearing on compliance commitments. Option D is wrong because Application Insights dependency maps visualize application component dependencies and call flows, not data residency or compliance terms.

Practice this question →

15

Multi-Selecthard

Your enterprise AI solution runs on Azure Kubernetes Service (AKS) and connects to Azure OpenAI. You need to ensure comprehensive security across network, identity, and secrets. Which THREE of the following configurations should you deploy? (Choose three)

Select 3 answers

A.Azure AD Workload Identity for Kubernetes pods to securely access Azure OpenAI without static keys.

B.Kubernetes Network Policies to restrict pod-to-pod communication within the cluster.

C.Azure Key Vault Provider for Secrets Store CSI Driver for secure secret mounting.

D.Grant cluster-admin permissions to every unauthenticated container image.

E.Disable all TLS encryption on Kubernetes ingress controllers.

AnswersA, B, C

Azure AD Workload Identity federates Kubernetes service accounts with Microsoft Entra ID, letting pods obtain tokens for Azure OpenAI without stored secrets. This satisfies the stem's identity and secrets security requirement across the AKS solution.

Why this answer

Option A is correct because Azure AD Workload Identity federates a Kubernetes service account with an Azure AD identity via OIDC, letting pods obtain Azure AD tokens for Azure OpenAI through the token projection without embedding static API keys. Option B is correct because Kubernetes Network Policies enforce pod-level ingress/egress rules (via the cluster's CNI, e.g., Azure CNI with Calico or Cilium), segmenting pod-to-pod traffic and limiting lateral movement inside the AKS cluster. Option C is correct because the Azure Key Vault Provider for Secrets Store CSI Driver mounts Key Vault secrets, keys, and certificates into pods as volumes, keeping secrets out of etcd and manifests and enabling rotation and managed-identity-based access.

Option D is wrong because granting cluster-admin to unauthenticated container images is a severe privilege-escalation and unauthenticated-access risk, violating least privilege. Option E is wrong because disabling TLS on ingress controllers exposes traffic in plaintext, breaking confidentiality and integrity for inbound connections.

Practice this question →

16

Multi-Selecthard

Your Azure AI application relies on Azure OpenAI and Azure AI Search. You need to troubleshoot a sudden surge in HTTP errors and latency. Which THREE of the following Azure Monitor / Application Insights features or tools should you use to diagnose the issue? (Choose three)

Select 3 answers

A.Azure Cost Management recommendation advisor for server resizing.

B.Application Map in Application Insights to identify downstream dependency latency bottlenecks.

C.Log Analytics workspace with KQL queries against the exceptions and dependencies tables.

D.Metrics explorer in Azure Monitor to check Azure OpenAI token limits and throttling metrics.

E.Azure Bastion diagnostic logs for RDP login failures.

AnswersB, C, D

Application Map renders the call topology between your app, Azure OpenAI and Azure AI Search, exposing which dependency contributes the latency. This satisfies the stem's need to pinpoint whether the surge originates in a downstream service rather than the front end.

Why this answer

Application Map visualizes dependencies and latency bottlenecks, Metrics explorer tracks token consumption and throttling counters, and Log Analytics enables KQL queries for specific exception traces.

Practice this question →

17

MCQeasy

You are deploying an Azure OpenAI Service resource and need to ensure that API keys are not used for authentication. Which configuration should you apply?

A.Disable local authentication on the Azure OpenAI resource and grant users the Cognitive Services OpenAI User role.

B.Configure a managed identity on the app service and store the API key in Azure Key Vault.

C.Implement Cross-Origin Resource Sharing (CORS) rules on the Azure OpenAI resource.

D.Enable soft-delete on the Azure OpenAI resource.

AnswerA

Disabling local authentication removes API-key access entirely, forcing Microsoft Entra ID token-based authentication, while the Cognitive Services OpenAI User role grants the necessary data-plane permissions. Together these satisfy the requirement that API keys are not used for authentication.

Why this answer

Azure role-based access control (Azure RBAC) can be used to authenticate requests to Azure OpenAI by disabling local authentication (API keys) via the 'disableLocalAuth' property.

Practice this question →

18

MCQhard

You are troubleshooting a performance issue in an AI application where dependency calls to Azure OpenAI take significantly longer during periods of high traffic. You want to query Log Analytics to find the 95th percentile (p95) duration of all dependency calls to Azure OpenAI over the past 24 hours. Which KQL query should you execute?

A.dependencies | where timestamp > ago(24h) | where target has 'openai' | summarize p95_duration = percentile(duration, 95) by target

B.exceptions | where timestamp > ago(24h) | summarize count() by outerType

C.requests | where timestamp > ago(24h) | summarize count() by resultCode

D.traces | where timestamp > ago(24h) | summarize avg(severityLevel) by message

AnswerA

Filtering dependencies by timestamp and target, then applying percentile(duration, 95) grouped by target, returns the p95 latency for Azure OpenAI calls. The percentile() aggregation is the specific function that computes the 95th percentile, satisfying the p95 requirement across the 24-hour window.

Why this answer

Dependency calls (including outbound calls to Azure OpenAI) are recorded in the Application Insights 'dependencies' table, which includes a 'target' field identifying the dependency endpoint and a 'duration' field in milliseconds. The percentile() aggregation function computes the 95th percentile, and filtering with 'target has openai' scopes the query to Azure OpenAI calls. This query directly answers the requirement.

Exam trap

The trap is selecting the wrong telemetry table — candidates often confuse 'requests' (inbound) with 'dependencies' (outbound) or reach for 'traces'/'exceptions' when the question is explicitly about outbound dependency latency percentiles.

How to eliminate wrong answers

Option B is wrong because the 'exceptions' table stores exception telemetry, not dependency durations, and 'outerType' groups by exception type — it cannot compute p95 latency. Option C is wrong because the 'requests' table records inbound server requests, not outbound dependency calls, and 'resultCode' is an HTTP status, not a latency metric. Option D is wrong because the 'traces' table holds diagnostic trace messages, and averaging 'severityLevel' produces a meaningless number unrelated to dependency duration.

Practice this question →

19

MCQeasy

You want to receive an email notification whenever monthly spending on your Azure OpenAI Service exceeds $5,000. Which Azure feature should you configure?

A.Azure Service Health incident alert

B.Cost Management budget with an alert threshold set at the desired dollar amount

C.Azure Advisor security recommendation

D.Azure Monitor Metric alert on CPU utilization

AnswerB

A Cost Management budget tracks actual or forecast spend against a scope and fires alerts when a configured threshold, such as $5,000, is crossed. It satisfies the stem's requirement to notify by email when monthly Azure OpenAI Service spending exceeds that amount.

Why this answer

Azure Cost Management budgets allow you to define spending thresholds and attach action groups or email recipients for notifications.

Practice this question →

20

Multi-Selecthard

You need to secure an Azure Machine Learning workspace against data exfiltration. Which THREE configurations should you implement?

Select 3 answers

A.Disable public network access on the Azure Machine Learning workspace.

B.Assign the Contributor role to all users on the subscription level.

C.Attach public IP addresses to all compute instances for rapid troubleshooting.

D.Configure a managed virtual network for the workspace with approved outbound rules.

E.Enable private endpoints for all dependent services such as Azure Storage, Key Vault, and Azure Container Registry.

AnswersA, D, E

Disabling public network access removes the internet-facing endpoint entirely, so workspace traffic must traverse private connectivity. This directly blocks exfiltration paths that rely on reaching the workspace over public IP addresses, satisfying the requirement to prevent outbound data leakage.

Why this answer

Option A is correct because disabling public network access on the Azure Machine Learning workspace forces all client and service traffic through private endpoints or approved private paths, eliminating the public internet as an exfiltration route. Option D is correct because a workspace managed virtual network isolates compute and uses approved outbound rules (via private endpoints or FQDNs), preventing compute from sending data to unapproved external destinations. Option E is correct because private endpoints for dependent services such as Azure Storage, Key Vault, and Azure Container Registry keep that traffic on the Microsoft backbone/private IP space, so data cannot be exfiltrated through those services' public endpoints.

Option B is incorrect because granting Contributor at subscription scope broadens access and violates least privilege rather than securing against exfiltration. Option C is incorrect because attaching public IP addresses to compute instances exposes them to inbound/outbound internet traffic and increases exfiltration risk.

Exam trap

AI-200 often tests whether candidates pick 'more permissions' or 'public IPs for troubleshooting' as security measures — the exam expects recognition that exfiltration protection is about removing public exposure, not adding access.

Practice this question →

21

MCQeasy

You need to monitor the monthly spending on Azure OpenAI token consumption and receive an alert when expenditures exceed a predefined threshold. Which tool should you use?

A.Azure Cost Management Budgets and Alerts

B.Log Analytics Workspace usage and estimated costs view

C.Application Insights availability tests

D.Azure Security Center compliance dashboard

AnswerA

Azure Cost Management Budgets let you set a monthly spend threshold scoped to Azure OpenAI resources and trigger alerts when actual or forecast cost exceeds it, directly satisfying the requirement to monitor token consumption spending and receive threshold alerts.

Why this answer

Azure Budgets in Cost Management allow you to set spending thresholds and automated email alerts when thresholds are reached.

Practice this question →

22

Multi-Selecthard

You are configuring diagnostic logging for an enterprise Azure OpenAI Service deployment. You need to forward logs to multiple destinations for security analysis and archiving. Which THREE of the following destinations are supported by Azure Monitor diagnostic settings? (Choose three)

Select 3 answers

A.Azure Event Hubs

B.Azure Storage account

C.Log Analytics workspace

D.Azure Container Registry local image cache

E.Azure Bastion host memory dump

AnswersA, B, C

Azure Monitor diagnostic settings natively stream resource logs and metrics to Azure Event Hubs, which satisfies the stem's security-analysis requirement by feeding third-party SIEM and streaming platforms at scale. Event Hubs is one of the three supported destinations alongside Log Analytics and Storage.

Why this answer

Diagnostic settings support routing logs and metrics to Log Analytics workspaces, Azure Storage accounts, and Azure Event Hubs.

Practice this question →

23

MCQmedium

An enterprise application uses Azure AI Search and needs to authenticate securely to an Azure OpenAI backend without exposing credentials in connection strings. What is the recommended approach?

A.Create a shared access signature (SAS) token for the Azure OpenAI endpoint and rotate it every 30 days.

B.Configure a system-assigned managed identity on the Azure AI Search service and assign the Cognitive Services OpenAI User role on the Azure OpenAI resource.

C.Use HTTP basic authentication with a pre-shared service principal secret.

D.Store the Azure OpenAI primary key in an Azure App Configuration service and reference it via Key Vault.

AnswerB

A system-assigned managed identity gives Azure AI Search an identity in Microsoft Entra ID, so it requests tokens for Azure OpenAI without stored secrets. Assigning the Cognitive Services OpenAI User role on the OpenAI resource grants least-privilege data-plane access, satisfying the no-credentials-in-connection-strings constraint.

Why this answer

A system-assigned or user-assigned managed identity should be enabled on the Azure AI Search service and granted the Cognitive Services OpenAI User role on the Azure OpenAI resource.

Practice this question →

24

MCQeasy

You want to view an end-to-end distributed trace of a user request flowing from an Azure Front Door through an API Management gateway, into an Azure Function, and finally to an Azure OpenAI model call. Which Application Insights feature visualizes this entire call chain and highlights latency bottlenecks?

A.Azure Cost Analysis

B.Azure Advisor security recommendations

C.Azure Policy compliance dashboard

D.Application Map and Transaction Diagnostics

AnswerD

Application Map renders the discovered components and their dependency calls as a topology, while Transaction Diagnostics drills into a single end-to-end trace, showing each span's duration. Together they expose where latency accumulates across Front Door, API Management, Functions, and Azure OpenAI.

Why this answer

Application Map in Application Insights visualizes the topology of distributed components and their call relationships, while Transaction Diagnostics drills into a single end-to-end transaction to show each dependency call and its latency. Together they trace a request from Front Door through APIM, Functions, and Azure OpenAI, highlighting the slowest hop.

Exam trap

AI-200 often tests whether candidates know that Application Map and Transaction Diagnostics are the tracing features, while Cost Analysis, Advisor, and Policy are governance/cost tools that cannot visualize request latency.

How to eliminate wrong answers

Option A is wrong because Azure Cost Analysis reports spending, not request traces or latency. Option B is wrong because Azure Advisor security recommendations are posture suggestions, not distributed tracing. Option C is wrong because Azure Policy compliance dashboards show governance state, not runtime call chains.

Practice this question →

25

MCQeasy

You need to view real-time log streams from an Azure Container App running a custom LangChain agent. Which Azure CLI command should you execute?

A.az cognitiveservices account log-stream --name <account-name>

B.az containerapp logs show --name <app-name> --resource-group <rg-name> --follow

C.az aks browsed --name <cluster-name>

D.az monitor metrics tail --resource <resource-id>

AnswerB

The --follow flag streams live output rather than returning a static snapshot, and az containerapp logs show targets the Container App's console output directly. This satisfies the real-time requirement without needing Log Analytics queries or a separate monitoring workspace.

Why this answer

The Azure CLI command 'az containerapp logs show' retrieves logs from a Container App, and the '--follow' flag streams them in real time (similar to tail -f). This is the correct command to view live log output from a running Container App hosting a LangChain agent.

Exam trap

AI-200 often tests whether candidates know the correct Azure CLI verb-noun structure for Container Apps versus AKS versus Cognitive Services — the trap is picking a plausible-sounding but non-existent command like 'az cognitiveservices account log-stream' or 'az monitor metrics tail'.

How to eliminate wrong answers

Option A is wrong because 'az cognitiveservices account log-stream' is not a valid command — Cognitive Services accounts do not expose a log-stream subcommand, and this would not target a Container App. Option C is wrong because 'az aks browsed' is not a real command (the actual command is 'az aks browse', which opens the Kubernetes dashboard and is deprecated), and it targets AKS clusters, not Container Apps. Option D is wrong because 'az monitor metrics tail' is not a valid command — Azure Monitor metrics are queried via 'az monitor metrics list', and metrics are numeric time-series data, not log streams.

Practice this question →

26

MCQhard

You are configuring network security for an Azure AI Search service that indexes data from an Azure SQL Database. Both services are in the same region. You want to ensure that Azure AI Search can securely connect to Azure SQL Database without allowing inbound traffic from any public IP addresses. Which feature should you use on Azure SQL Database?

A.Open firewall port 1433 for all IP addresses globally

B.Use Azure Front Door to load balance SQL TCP connections

C.Allow Azure services and resources to access this server firewall setting combined with Virtual Network rules

D.Configure an HTTP proxy inside an Azure VM to forward SQL queries

AnswerC

Correct. This setting allows trusted Azure services (like Azure AI Search) to connect to Azure SQL securely without opening the database to the public internet.

Why this answer

Service endpoints or private endpoints on Azure SQL Database allow Azure services (such as AI Search) to connect securely within the Microsoft backbone network while disabling public access.

Practice this question →

27

MCQmedium

Your Python-based AI service runs on an Azure Virtual Machine and connects to Azure OpenAI. To adhere to security best practices, you decide to eliminate storage of credentials on the VM disk by enabling a system-assigned managed identity on the virtual machine. How does your Python code obtain an access token using this managed identity?

A.Use static storage account connection strings hardcoded in environment variables

B.Make an unauthenticated HTTP GET request to the public Azure OpenAI endpoint with no headers

C.Use DefaultAzureCredential from the azure-identity library to automatically authenticate via the VM's IMDS endpoint

D.Read the plain-text password from a file located in /etc/passwd on the virtual machine

AnswerC

DefaultAzureCredential chains credential types and, on an Azure VM, resolves to ManagedIdentityCredential, which requests a token from the Instance Metadata Service endpoint at 169.254.169.254. This satisfies the requirement to eliminate credentials on the VM disk, since authentication relies on the platform-issued system-assigned identity rather than stored secrets.

Why this answer

The correct method is to use DefaultAzureCredential from the azure-identity library to automatically authenticate via the VM's IMDS endpoint. When a system-assigned managed identity is enabled on an Azure VM, the VM can request tokens from the Instance Metadata Service (IMDS) at a well-known endpoint (169.254.169.254). DefaultAzureCredential automatically detects the managed identity and uses it to obtain an access token for Azure OpenAI, eliminating the need to store credentials on the VM.

Exam trap

AI-200 often tests the misconception that managed identities require explicit credential storage or that DefaultAzureCredential does not automatically use IMDS, leading candidates to choose insecure options.

How to eliminate wrong answers

Option A is wrong because using static storage account connection strings hardcoded in environment variables stores credentials on the VM, which violates the requirement to eliminate credential storage. Option B is wrong because making an unauthenticated HTTP GET request to the public Azure OpenAI endpoint with no headers will fail; Azure OpenAI requires authentication via API key or Azure AD token. Option D is wrong because reading a plain-text password from /etc/passwd is not only insecure but also incorrect; /etc/passwd does not store passwords in plain text (they are in /etc/shadow), and this does not use managed identity.

Practice this question →

28

MCQmedium

Your company policy requires all outbound traffic from an Azure Machine Learning workspace to pass through a centralized firewall. Which feature must be implemented?

A.Enable public network access with selected IP addresses set to the firewall IP.

B.Use Azure Bastion to inspect all outbound connections from the workspace nodes.

C.Configure workspace outbound rules with fully qualified domain name (FQDN) tags and route traffic through Azure Firewall.

D.Deploy the workspace without virtual network isolation and rely on Network Security Groups.

AnswerC

FQDN tags in workspace outbound rules let Microsoft Entra ID-authenticated managed virtual networks forward traffic to Azure Firewall, satisfying the policy that all outbound traffic traverses a centralized firewall. Unlike service endpoints or private endpoints, this routes egress through the firewall rather than bypassing it.

Why this answer

To force all outbound traffic from an Azure Machine Learning workspace through a centralized firewall, you must configure workspace outbound rules using FQDN tags and route traffic through Azure Firewall. This is done by placing the workspace in a virtual network with a user-defined route (UDR) that points to Azure Firewall as the next hop, and then using Azure Firewall FQDN tags (such as AzureML) to allow required outbound traffic. This ensures that all egress is inspected and controlled by the firewall.

Exam trap

AI-200 often tests the misconception that NSGs or public network access settings can enforce outbound traffic inspection, when in fact a UDR to a firewall with FQDN tags is required for centralized egress control.

How to eliminate wrong answers

Option A is wrong because enabling public network access with selected IP addresses only restricts inbound access to the workspace; it does not route outbound traffic through a firewall. Option B is wrong because Azure Bastion provides secure RDP/SSH access to virtual machines, not outbound traffic inspection for a machine learning workspace. Option D is wrong because deploying without virtual network isolation and relying on NSGs does not provide centralized firewall inspection; NSGs are basic stateful packet filters and cannot enforce FQDN-based egress policies.

Practice this question →

29

Multi-Selectmedium

Your Azure AI application encounters transient network errors when calling cognitive services. Which TWO strategies should you implement in your code or architecture to handle these failures gracefully? (Choose two)

Select 2 answers

A.Disable all exception handling so unhandled errors crash the server.

B.Implement fallback routing or secondary region endpoints for high availability.

C.Terminate the application process immediately on the first transient timeout.

D.Configure SDK retry policies with exponential backoff and jitter for HTTP 429 and 503 errors.

E.Remove all timeout configurations from HTTP client connections.

AnswersB, D

Fallback routing redirects requests to a secondary region endpoint when the primary is unavailable, maintaining availability during regional outages or sustained throttling. It satisfies the stem's requirement for graceful failure handling at the architecture layer, complementing in-code retry policies.

Why this answer

Implementing retry logic with exponential backoff in SDK clients and configuring circuit breaker patterns or fallback endpoints helps handle transient failures.

Practice this question →

30

Multi-Selectmedium

You are securing an Azure AI Search service. Which THREE of the following actions are recommended for implementing a robust security posture? (Choose THREE)

Select 3 answers

A.Store all search index data in a public blob container for faster access.

B.Enable Private Endpoint access and disable public network access.

C.Use an Admin API key for all read-only client applications.

D.Enable Entra ID (formerly Azure AD) authentication to replace API keys.

E.Configure Azure Role-Based Access Control (RBAC) to manage data plane access.

AnswersB, D, E

A private endpoint gives the search service a private IP inside your virtual network, and disabling public network access removes internet exposure entirely. This satisfies the requirement to eliminate public attack surface for the service.

Why this answer

Option B is correct because enabling a Private Endpoint for Azure AI Search creates a private IP connection via Azure Private Link, and setting public network access to Disabled ensures the service is only reachable from within the virtual network, eliminating exposure to the public internet. Option D is correct because Entra ID (formerly Azure AD) authentication allows callers to be authenticated with identity tokens and assigned granular roles, removing the need to distribute and rotate static admin or query API keys that can be leaked. Option E is correct because Azure RBAC (for example, Search Service Contributor, Search Index Data Contributor, and Search Index Data Reader roles) governs data plane and control plane access through Entra ID identities, enabling least-privilege and auditable access management.

Option A is wrong because storing index data in a public blob container exposes sensitive content and is not how Azure AI Search stores or secures its indexes. Option C is wrong because admin API keys grant full control-plane rights (create, update, delete indexes) and should never be handed to read-only client applications; query keys or Entra ID-based read roles should be used instead.

Exam trap

AI-200 often tests whether candidates know that Admin API keys are over-privileged for read-only clients and that Entra ID RBAC plus Private Endpoints are the recommended modern security controls — candidates mistakenly pick API keys for convenience.

Practice this question →

31

MCQmedium

Your enterprise AI system processes sensitive Personal Identifiable Information (PII). Compliance regulations require that audit logs capturing who accessed the AI endpoints must be retained immutably for 5 years without possibility of deletion. Where should you configure this immutability policy?

A.Azure Storage account container immutability policies with time-based retention

B.Azure Active Directory audit log retention configuration

C.Application Insights retention settings configured via the portal

D.Azure Key Vault soft-delete and purge protection

AnswerA

Container-level time-based retention policies in Azure Storage enforce WORM immutability, preventing modification or deletion for the defined period. Configuring a five-year retention period on the container holding the audit logs satisfies the compliance requirement for immutable, non-deletable records.

Why this answer

Azure Storage account container immutability policies with time-based retention (WORM — Write Once, Read Many) enforce that blobs cannot be modified or deleted for a specified retention period, and when locked, the policy cannot be removed even by account owners. This directly satisfies the requirement for immutable 5-year audit log retention. Audit logs written to an immutable container remain tamper-proof for the full retention window.

Exam trap

AI-200 often tests the distinction between retention (how long data is queryable) and immutability (data cannot be altered or deleted), and candidates frequently pick Entra ID or Application Insights retention settings because they sound like audit-log controls.

How to eliminate wrong answers

Option B is wrong because Azure AD (Entra ID) audit log retention is a diagnostic setting that controls how long logs are queryable in the portal — it does not provide immutability and logs can still be exported, altered, or purged by privileged users. Option C is wrong because Application Insights retention settings only control how long telemetry data remains queryable in Log Analytics; data is deletable and the setting is a query-window, not a legal hold. Option D is wrong because Key Vault soft-delete and purge protection apply to secrets, keys, and certificates — they protect cryptographic material from accidental deletion, not audit log immutability, and have no bearing on log retention.

Practice this question →

32

MCQmedium

An enterprise application calls multiple Azure AI Language services. You need to trace requests across multiple distributed microservices to diagnose high latency issues. Which Azure Monitor capability should you implement?

A.Application Insights Distributed Tracing

B.Azure Advisor cost recommendations

C.Log Analytics metric alerts without instrumentation

D.Azure Network Watcher Connection Monitor

AnswerA

Application Insights Distributed Tracing correlates operations across microservices using a shared operation ID, exposing per-hop latency in the end-to-end transaction view. This satisfies the requirement to trace requests across distributed services and diagnose high latency.

Why this answer

Distributed tracing in Application Insights tracks requests across multiple service boundaries using W3C Trace Context headers.

Practice this question →

33

MCQhard

Your team is using managed identities to connect an Azure App Service web app to an Azure OpenAI resource. The connection fails with a 403 Forbidden error. What is the most likely root cause?

A.The App Service must be bound to a custom domain before managed identities can issue bearer tokens.

B.The app service requires a client secret stored in Azure Key Vault for managed identity authentication.

C.The managed identity has not been granted the 'Cognitive Services OpenAI User' role on the Azure OpenAI resource.

D.System-assigned managed identities cannot authenticate against Azure AI PaaS endpoints.

AnswerC

Managed identity authentication succeeds at the token level, but authorisation fails because no role assignment grants data-plane access. Assigning 'Cognitive Services OpenAI User' on the Azure OpenAI resource supplies the missing permission, resolving the 403 Forbidden error.

Why this answer

A 403 Forbidden from Azure OpenAI when using a managed identity almost always means the identity authenticated successfully (otherwise you'd see 401) but lacks the required data-plane RBAC role. The 'Cognitive Services OpenAI User' role grants the necessary permissions to call the Azure OpenAI inference endpoints. Assigning this role to the App Service's managed identity on the Azure OpenAI resource resolves the 403.

Exam trap

AI-200 often tests the distinction between authentication (401) and authorization (403) failures, and candidates frequently pick answers that suggest managed identities don't work with PaaS services or that secrets are still required.

How to eliminate wrong answers

Option A is wrong because managed identities issue bearer tokens via the Instance Metadata Service (IMDS) regardless of custom domain bindings — domain configuration is unrelated to token issuance. Option B is wrong because managed identities are specifically designed to eliminate the need for client secrets; requiring a Key Vault secret contradicts the purpose of managed identity authentication. Option D is wrong because system-assigned managed identities fully support authentication to Azure AI PaaS endpoints, including Azure OpenAI, Cognitive Services, and Azure ML — this is a documented and recommended pattern.

Practice this question →

34

MCQmedium

You are deploying an AI-powered document processing solution that uses Azure Functions to call Azure OpenAI. The Azure Functions app runs in a Consumption plan. You need to ensure that the function can authenticate to Azure OpenAI without storing any secrets in code or configuration. You want to use a managed identity. What should you do first?

A.Store the Azure OpenAI API key in Azure Key Vault and reference it from the function app settings using a Key Vault reference.

B.Create an application registration in Microsoft Entra ID and use its client secret to authenticate the function app to Azure OpenAI.

C.Enable a system-assigned managed identity on the Azure Functions app and grant it the Cognitive Services OpenAI User role on the Azure OpenAI resource.

D.Generate a shared access signature (SAS) token for the Azure OpenAI resource and pass it in the request header from the function.

AnswerC

Enabling a system-assigned managed identity on the Function App creates a service principal in Microsoft Entra ID. Assigning the Cognitive Services OpenAI User role to that identity on the Azure OpenAI resource grants the necessary permissions to call the service. This approach eliminates secrets and follows the principle of least privilege.

Why this answer

A system-assigned managed identity on the Azure Functions app allows it to authenticate to Azure OpenAI without any secrets. Granting the Cognitive Services OpenAI User role provides the necessary permissions. This is the recommended approach for secretless authentication in Azure.

Exam trap

The trap here is assuming that storing secrets in Key Vault is sufficient for a secretless solution, but the requirement explicitly prohibits storing secrets anywhere.

Practice this question →

35

MCQeasy

You have deployed an AI model in Azure Machine Learning. You want to set up an alert that triggers an email to the operations team whenever the CPU utilization of the compute instance exceeds 90% for longer than 15 minutes. Which Azure Monitor feature should you configure?

A.Azure Cost Management anomaly alerts

B.Azure Monitor metric alerts with an action group

C.Azure Policy remediation tasks

D.Azure Service Health planned maintenance alerts

AnswerB

Metric alerts evaluate platform metrics such as CPU utilisation against a threshold, and the 15-minute sustained condition is handled by the alert rule's aggregation granularity and evaluation frequency. Attaching an action group delivers the email to the operations team, satisfying both the threshold and notification requirements.

Why this answer

Azure Monitor metric alerts are designed to evaluate numeric time-series data such as CPU utilization from Azure Machine Learning compute instances. By creating a metric alert with a threshold of 90% and a 15-minute aggregation window, you can detect sustained high CPU usage. An action group attached to the alert defines the notification channel, such as email to the operations team.

This is the standard, native way to implement resource-level performance alerting in Azure.

Exam trap

AI-200 often tests the distinction between monitoring and alerting features versus governance or cost tools; candidates may incorrectly choose Azure Policy or Cost Management because they confuse alerting with enforcement or budgeting.

How to eliminate wrong answers

Option A is wrong because Azure Cost Management anomaly alerts focus on detecting unexpected spending patterns and budgets, not real-time resource performance metrics like CPU utilization. Option C is wrong because Azure Policy remediation tasks are used to enforce compliance and automatically correct non-compliant resources (e.g., tagging, allowed locations), not to monitor and alert on performance thresholds. Option D is wrong because Azure Service Health planned maintenance alerts notify about platform-initiated maintenance events affecting Azure services, not about resource-level metrics such as CPU usage on a compute instance.

Practice this question →

36

MCQeasy

You want to set up an alert when the availability of your Azure AI custom model endpoint drops below 99%. Which Azure service should you use?

A.Azure Policy definitions with audit effects.

B.Azure Cost Management anomaly detection.

C.Azure Monitor metric alerts configured on the 'Availability' or 'HttpServerErrors' metrics.

D.Microsoft Defender for Cloud vulnerability assessment.

AnswerC

Azure Monitor metric alerts evaluate platform metrics such as Availability and HttpServerErrors against a threshold, triggering when the endpoint drops below 99%. This satisfies the stem's requirement for availability alerting on the custom model endpoint without custom logging queries.

Why this answer

Azure Monitor metric alerts evaluate platform metrics such as Availability and HttpServerErrors against thresholds and fire notifications or actions when breached. Configuring a metric alert on Availability with a threshold below 99% is the direct way to detect endpoint availability drops.

Exam trap

AI-200 often tests whether candidates reach for governance (Policy) or security (Defender) tools when the question is purely about runtime monitoring — the keyword 'availability' points to Azure Monitor metrics.

How to eliminate wrong answers

Option A is wrong because Azure Policy is a governance tool that audits or enforces resource configurations — it does not monitor runtime availability of endpoints. Option B is wrong because Cost Management anomaly detection tracks spending patterns, not service availability. Option D is wrong because Defender for Cloud vulnerability assessment scans for security weaknesses (CVEs, misconfigurations), not live availability metrics.

Practice this question →

37

MCQhard

You are troubleshooting a live AI web application where users report intermittent 504 Gateway Timeout errors when submitting large text prompts to a custom model endpoint. You want to check if the backend inference container is timing out or crashing. Where should you examine container-level stdout/stderr logs in Azure Container Apps?

A.Log Analytics workspace querying the ContainerAppConsoleLogs_CL table

B.Azure Cosmos DB request unit (RU) consumption logs

C.Azure Key Vault audit logs

D.Azure Advisor performance recommendations

AnswerA

Querying ContainerAppConsoleLogs_CL in Log Analytics retrieves the container's stdout/stderr streams, exactly the diagnostic data needed to distinguish an inference timeout from a crash. Azure Container Apps forwards console output to this table, satisfying the stem's requirement to inspect container-level logs rather than platform or HTTP metrics.

Why this answer

Azure Container Apps writes container stdout/stderr to the Log Analytics workspace associated with the Container Apps environment, where it is queryable in the ContainerAppConsoleLogs_CL table. This is the canonical location for container-level logs, including crash traces, stack dumps, and application output that would reveal inference timeouts or OOM kills. Querying this table lets you correlate timestamps with the 504 errors reported by users.

Exam trap

The trap here is confusing observability data sources: candidates may pick Cosmos DB RU logs or Key Vault audit logs because they sound like 'diagnostic' sources, but only ContainerAppConsoleLogs_CL holds container stdout/stderr.

How to eliminate wrong answers

Option B is wrong because Cosmos DB RU consumption logs track database throughput and throttling (429s), not container stdout/stderr from an inference workload. Option C is wrong because Key Vault audit logs record secret/key access operations, not application runtime output. Option D is wrong because Azure Advisor provides best-practice recommendations and does not contain live container logs.

Practice this question →

38

Multi-Selecthard

You are auditing an Azure AI platform for security vulnerabilities. You want to ensure that secrets, connection strings, and certificates are handled in compliance with security best practices. Which THREE of the following practices should you enforce? (Choose three)

Select 3 answers

A.Implement automated secret rotation policies for API keys and service credentials.

B.Commit production database passwords to public GitHub repositories for easy developer access.

C.Grant every employee administrator access to all Key Vault secrets.

D.Use managed identities instead of embedding static connection strings in application configuration files.

E.Enable Key Vault soft-delete and purge protection to prevent accidental permanent deletion of secrets.

AnswersA, D, E

Automated rotation limits the window in which a leaked API key or credential remains usable, satisfying the audit's requirement for compliant secret handling. Stale secrets are replaced on schedule without manual intervention, reducing exposure from long-lived credentials.

Why this answer

Option A is correct because automated secret rotation policies for API keys and service credentials limit the blast radius of a leaked secret by ensuring credentials expire and are replaced on a schedule, which is a core Azure Key Vault and security best-practice control. Option D is correct because managed identities let Azure services authenticate to resources such as Key Vault and Azure SQL without storing static connection strings or credentials in application configuration files, eliminating a common credential-exposure vector. Option E is correct because enabling Key Vault soft-delete and purge protection prevents accidental or malicious permanent deletion of secrets, certificates, and keys, preserving recoverability during the retention period.

Option B is wrong because committing production database passwords to public GitHub repositories exposes credentials to anyone and violates every secret-management best practice. Option C is wrong because granting every employee administrator access to all Key Vault secrets violates least privilege and dramatically increases the risk of insider misuse or compromise.

Practice this question →

39

MCQmedium

You are configuring an Azure OpenAI service instance. You need to ensure that the service is only accessible from your corporate virtual network and that public internet access is completely disabled. Which configuration should you implement?

A.Set the firewall rules to block all traffic and allow only the specific IP address of your NAT gateway.

B.Configure a Service Tag in the Network Security Group to allow only specific IP ranges.

C.Implement Azure AD Conditional Access policies to restrict access based on user location.

D.Create a Private Endpoint, disable public network access in the Networking tab, and verify the DNS zone configuration.

AnswerD

A Private Endpoint assigns a private IP from your virtual network, and disabling public network access blocks all internet traffic. The DNS zone must resolve the service name to that private IP, otherwise clients still hit the public endpoint, so verification is essential.

Why this answer

To make an Azure OpenAI instance reachable only from a corporate VNet with no public internet access, you must create a Private Endpoint (which assigns a private IP from your VNet to the service), disable public network access on the Networking tab, and ensure the private DNS zone (privatelink.openai.azure.com) is linked so name resolution returns the private IP. All three steps are required for a fully private, functional deployment.

Exam trap

The trap is believing that IP allow-listing or Conditional Access achieves 'no public access'; the exam expects recognition that only a Private Endpoint plus disabled public access (with correct DNS) delivers true private-only connectivity.

How to eliminate wrong answers

Option A is wrong because allowing only a NAT gateway IP still leaves the service publicly reachable from that IP and does not provide VNet-internal private connectivity; it also does not disable public access. Option B is wrong because Service Tags in NSGs control traffic to Azure service IP ranges from your subnets, but they do not make the Azure OpenAI resource private or disable its public endpoint. Option C is wrong because Conditional Access is an identity control based on user/location/device signals and does not remove the public network endpoint or provide private IP connectivity.

Practice this question →

40

MCQhard

You are monitoring an Azure Machine Learning online endpoint that serves a real-time inference model. You need to detect when the model's input data distribution drifts from the training data and trigger an alert. Which Azure Machine Learning feature should you use?

A.Azure Machine Learning responsible AI dashboard with error analysis.

B.Azure Monitor Application Insights with custom telemetry for input data.

C.Azure Machine Learning data drift detection with a monitor on the deployed model.

D.Azure Machine Learning model performance monitoring using the model's accuracy metric.

AnswerC

Azure Machine Learning provides data drift detection for deployed models. You can configure a monitor that compares incoming inference data against a baseline dataset and computes drift metrics. When drift exceeds a threshold, it can trigger alerts. This is the correct feature to detect input data distribution changes.

Why this answer

Azure Machine Learning data drift detection allows you to monitor a deployed model's input data against a baseline and set up alerts when drift exceeds a threshold. This is the built-in feature for detecting changes in data distribution, making it the correct choice for the scenario.

Exam trap

The trap here is confusing data drift detection with model performance monitoring; the former focuses on input distribution, while the latter requires ground truth labels.

Practice this question →

41

MCQhard

You are configuring role-based access control for an Azure AI Search service. A data scientist needs to index content and query documents, but must not be permitted to manage service-level keys or change admin configurations. Which built-in role should you assign?

A.Search Service Contributor

B.Search Index Data Contributor

C.Cognitive Services Contributor

D.Storage Blob Data Reader

AnswerB

Search Index Data Contributor grants read and write access to index content and queries, covering indexing and document querying. It excludes service-level key management and admin configuration changes, satisfying the least-privilege constraint that the data scientist must not manage keys or alter service settings.

Why this answer

Search Index Data Contributor grants data-plane rights to read and write documents in indexes and to query them, which is exactly what a data scientist needs. It does not include the control-plane permissions to manage service keys, scale the service, or change admin configuration. That separation of duties matches the stated requirement.

Exam trap

AI-200 often tests the confusion between control-plane roles (Search Service Contributor) and data-plane roles (Search Index Data Contributor) — candidates pick the role with 'Contributor' in the name without checking the plane.

How to eliminate wrong answers

Option A is wrong because Search Service Contributor is a control-plane role that can manage the service, keys, and indexes but does not grant data-plane document read/write access. Option C is wrong because Cognitive Services Contributor is a broad control-plane role for Cognitive Services accounts and does not grant Azure AI Search index data access. Option D is wrong because Storage Blob Data Reader only reads blobs in Storage accounts and has no relationship to Azure AI Search indexes.

Practice this question →

42

MCQmedium

You have an Azure OpenAI model deployment and need to monitor token consumption metrics over time to forecast future usage. Which tool provides pre-built charts for prompt and completion token counts?

A.Azure Monitor metrics explorer on the Azure OpenAI resource.

B.Microsoft Purview data lineage maps.

C.Azure Advisor cost optimization recommendations.

D.Azure Log Analytics workspace without Application Insights configured.

AnswerA

Azure Monitor metrics explorer surfaces the platform metrics emitted by an Azure OpenAI resource, including prompt and completion token counts, as pre-built charts. It satisfies the forecasting requirement by plotting token consumption over time without custom logging queries.

Why this answer

Azure Monitor metrics explorer surfaces the built-in Azure OpenAI metrics, including Prompt Tokens, Completion Tokens, and Total Tokens, as pre-built charts on the Azure OpenAI resource. These metrics are emitted automatically per deployment and can be split by model or deployment name, making them the fastest way to trend token consumption for capacity forecasting.

Exam trap

AI-200 often tests whether candidates know that Azure OpenAI token metrics are available out-of-the-box in Azure Monitor metrics explorer, versus assuming they must first configure Log Analytics or Application Insights to see any token data.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview data lineage maps track data movement and governance across sources, not runtime token metrics. Option C is wrong because Azure Advisor provides cost and reliability recommendations, not time-series token charts. Option D is wrong because a Log Analytics workspace without Application Insights configured has no Azure OpenAI token telemetry piped in — diagnostic settings must be enabled and Application Insights or a workspace must receive the logs before any querying is possible.

Practice this question →

43

MCQhard

You are setting up monitoring for a custom machine learning scoring script running inside an Azure Container Instance. You want to track custom metrics such as inference prediction confidence scores over time in Application Insights. How should you record these custom metrics in your Python scoring script?

A.Save the metrics as text files in an Azure Blob Storage account and run hourly KQL queries

B.Use the Application Insights TelemetryClient track_metric() method

C.Print JSON strings to standard output and rely on Log Analytics automatic table parsing

D.Update Azure Key Vault secrets with the metric values

AnswerB

TelemetryClient.track_metric() sends custom metric telemetry directly to Application Insights, letting the scoring script emit prediction confidence values that appear in the customMetrics table for time-series analysis. This satisfies the requirement to track custom metrics over time rather than relying on auto-collected request telemetry.

Why this answer

The Application Insights SDK for Python provides the TelemetryClient class with a track_metric() method specifically designed to record custom metrics. Calling track_metric() sends the value to Application Insights, where it becomes queryable in the customMetrics table and can be charted over time. This is the native, supported way to instrument custom metrics from any Python process, including one running in an Azure Container Instance.

Exam trap

AI-200 often tests the misconception that printing logs or writing files is equivalent to emitting custom metrics, when Application Insights requires the SDK's track_metric() for proper metric ingestion and querying.

How to eliminate wrong answers

Option A is wrong because writing metrics to Blob Storage and running hourly KQL queries is a batch workaround that introduces latency, requires custom parsing, and does not leverage Application Insights' real-time metric ingestion. Option C is wrong because printing JSON to stdout relies on Log Analytics automatic parsing, which is unreliable for structured metrics and does not populate the customMetrics table; it also lacks the SDK's buffering, sampling, and correlation features. Option D is wrong because Key Vault is a secrets management service, not a telemetry store, and updating secrets with metric values is a misuse of the service that provides no monitoring capability.

Practice this question →

44

MCQmedium

Your data science team uses Azure Machine Learning notebooks. To prevent data exfiltration, you need to ensure that users cannot download datasets or trained model artifacts directly from the workspace to their local corporate laptops. Which feature should you configure?

A.Using Azure Front Door with Web Application Firewall disabled

B.Disabling Azure Monitor diagnostic logging

C.Workspace configured with a managed virtual network and outbound rules blocking public internet egress, plus disabled local file downloads in compute instance settings

D.Assigning the Contributor role to all external collaborators

AnswerC

Disabling local file downloads in compute instance settings directly blocks users from saving datasets or model artefacts to their laptops, satisfying the no-exfiltration constraint. The managed virtual network with outbound rules blocking public internet egress adds network-level containment, preventing alternate transfer paths from the workspace.

Why this answer

To prevent exfiltration from AML, you combine a workspace managed virtual network with outbound rules that block public internet egress, plus disabling local file downloads on compute instances. The managed VNet isolates compute and controls egress via private endpoints and FQDNs, while the compute instance setting removes the ability to download files to a local laptop. Together these enforce the no-exfiltration requirement.

Exam trap

The trap is picking a network or identity feature that sounds security-related (Front Door, RBAC) but does not actually block the data-download path; the exam expects you to know that AML managed VNet egress rules plus the compute-instance download toggle are the specific controls.

How to eliminate wrong answers

Option A is wrong because Azure Front Door with WAF disabled is a traffic-routing/CDN feature and does nothing to prevent data downloads from AML compute. Option B is wrong because disabling Azure Monitor diagnostic logging reduces audit visibility, which is the opposite of what a security control requires. Option D is wrong because granting Contributor to external collaborators expands access and increases exfiltration risk rather than preventing it.

Practice this question →

45

MCQmedium

You are deploying an Azure OpenAI Service resource in a secured virtual network. You need to ensure that client applications inside a peered virtual network can access the Azure OpenAI endpoint without traversing the public internet, while completely blocking public network access. Which feature should you configure?

A.Service endpoints with default deny rules on the public firewall

B.Azure Application Gateway with Web Application Firewall (WAF)

C.Azure Bastion deployed in the management subnet

D.Azure Private Link with a private endpoint for the Azure OpenAI resource

AnswerD

Correct. Private endpoints securely map the service endpoint to a private IP within your VNet and allow you to disable public access.

Why this answer

Azure Private Link with a private endpoint assigns a private IP address from your virtual network to the Azure OpenAI resource, allowing clients in peered VNets to reach the service entirely over the Microsoft backbone network. This satisfies the requirement to avoid the public internet while enabling you to set public network access to 'Disabled' on the Azure OpenAI resource. Service endpoints do not provide a private IP for the service and still route traffic through the public Azure network, so they cannot fully block public access.

Exam trap

AI-200 often tests the misconception that service endpoints provide full network isolation like Private Link, but service endpoints do not assign a private IP and still allow public endpoint exposure unless firewall rules are carefully managed.

How to eliminate wrong answers

Option A is wrong because service endpoints extend the VNet identity to the service but do not create a private IP; traffic still goes to the public endpoint, and you cannot fully disable public network access. Option B is wrong because Application Gateway with WAF is an inbound layer-7 load balancer and web firewall for your own applications, not a mechanism to privately connect to a PaaS service like Azure OpenAI. Option C is wrong because Azure Bastion provides secure RDP/SSH access to virtual machines, not private connectivity to Azure OpenAI endpoints.

Practice this question →

46

Multi-Selectmedium

Your organization wants to ensure that all Azure AI development follows strict security and observability standards. Which TWO of the following practices should be enforced across teams? (Choose two)

Select 2 answers

A.Disable all monitoring to reduce cloud resource costs.

B.Use shared root passwords for all virtual machines.

C.Require Application Insights integration on all deployed web and AI applications.

D.Mandate managed identities for all service-to-service authentication.

E.Allow developers to store production database passwords in public README files.

AnswersC, D

Application Insights captures request traces, dependency calls, exceptions and latency telemetry, directly satisfying the observability standard. Without it, teams cannot detect failures or monitor AI endpoint performance, so enforcing integration gives continuous visibility across deployed web and AI workloads.

Why this answer

Option C is correct because Application Insights provides the telemetry, distributed tracing, and logging needed to meet observability standards for deployed web and AI applications, enabling monitoring of requests, dependencies, and failures. Option D is correct because managed identities let Azure services authenticate to resources such as Key Vault, Storage, and Azure OpenAI without storing credentials in code, which directly enforces strict security standards for service-to-service authentication. Option A is wrong because disabling monitoring removes the observability required by the scenario and undermines incident detection and diagnostics.

Option B is wrong because shared root passwords eliminate accountability and violate least-privilege and credential-hygiene principles. Option E is wrong because storing production database passwords in public README files exposes secrets and is a severe security violation.

Practice this question →

47

MCQhard

An Azure Machine Learning model is deployed to a Kubernetes cluster. Users report intermittent 503 errors. You suspect the underlying compute nodes are overloaded. Where should you look first to correlate these errors with infrastructure health?

A.Azure Key Vault audit logs.

B.Log Analytics Workspace 'AppRequests' table.

C.Container Insights in Azure Monitor.

D.Azure Machine Learning studio 'Endpoints' monitoring tab.

AnswerC

Container Insights collects node-level CPU, memory and disk pressure plus container restart and eviction signals from the Kubernetes cluster, correlating them with pod failures. That infrastructure telemetry reveals overloaded nodes behind the intermittent 503 responses.

Why this answer

Container Insights (part of Azure Monitor) provides integrated monitoring for AKS, allowing you to correlate pod restarts and node resource exhaustion with application errors.

Practice this question →

48

Multi-Selecthard

You are investigating performance degradation in an Azure Machine Learning inference pipeline. Which TWO of the following steps are appropriate for diagnosing the bottleneck? (Choose TWO)

Select 2 answers

A.Change the SKU of the underlying compute cluster to a lower tier.

B.Restart the Azure Machine Learning workspace to clear cache.

C.Use Application Insights to examine the 'Dependencies' and 'Requests' logs for duration outliers.

D.Delete and recreate the deployment without checking logs.

E.Review the 'Logs' tab in the Azure Machine Learning endpoint overview to check for container-level errors.

AnswersC, E

Application Insights correlates the inference endpoint's incoming Requests with outbound Dependencies, exposing per-call duration outliers across the pipeline's stages. This directly satisfies the stem's need to locate where latency accumulates, since the dependency timeline isolates whether the model scoring call or an upstream service causes the degradation.

Why this answer

Option C is correct because Application Insights is the standard Azure Monitor integration for Azure Machine Learning online endpoints and deployments, and its 'Requests' and 'Dependencies' tables capture per-call duration, response codes, and dependency latency, which lets you pinpoint duration outliers and identify whether the bottleneck is in the scoring script or a downstream dependency. Option E is correct because the endpoint's 'Logs' tab surfaces the container logs (from the scoring script and inference server, e.g., gunicorn/flask or the azureml-inference-server) where errors, timeouts, and OOM or model-loading failures appear, directly revealing container-level causes of degradation. Option A is wrong because downgrading the compute SKU reduces CPU/GPU/memory resources and would worsen performance rather than diagnose the bottleneck.

Option B is wrong because there is no supported operation to 'restart' an Azure Machine Learning workspace to clear cache, and doing so would not produce diagnostic data. Option D is wrong because deleting and recreating a deployment destroys the existing logs and telemetry needed for root-cause analysis and does not constitute a diagnostic step.

Practice this question →

49

MCQhard

You are debugging a Python application integrated with Application Insights. You notice that custom telemetry events generated in a background worker thread are not appearing in Application Insights. What is the most likely cause of this issue?

A.Log Analytics ingestion rate limiting always drops multi-threaded telemetry

B.The application terminated or the worker thread exited before the telemetry client buffer was flushed

C.Application Insights automatically blocks all telemetry generated outside of HTTP request threads

D.The instrumentation key was incorrectly formatted as a GUID

AnswerB

The TelemetryClient buffers telemetry in memory and transmits asynchronously. If the worker thread exits or the process terminates before that buffer flushes, queued custom events are discarded and never reach Application Insights. This directly explains the missing events, satisfying the stem's background-thread constraint.

Why this answer

The Application Insights Python SDK buffers telemetry in memory and sends it asynchronously in batches. If the background worker thread exits or the application terminates before the buffer is flushed, the queued telemetry events are lost and never reach Application Insights. This is the most common cause of missing custom events from short-lived threads.

Exam trap

AI-200 often tests the misconception that telemetry is sent immediately upon track_event(), when in reality it is buffered and can be lost if the process exits before flushing.

How to eliminate wrong answers

Option A is wrong because Log Analytics ingestion rate limiting does not specifically target multi-threaded telemetry; it applies uniformly and would not selectively drop background thread events. Option C is wrong because Application Insights does not block telemetry based on thread type; it accepts telemetry from any thread as long as the SDK is used correctly. Option D is wrong because an incorrectly formatted instrumentation key would cause all telemetry to fail, not just background thread events, and the SDK would typically log an error.

Practice this question →

50

MCQhard

You are reviewing security logs in Azure Key Vault and notice unexpected access attempts from an unrecognized IP address. You need to immediately revoke all active Azure Active Directory tokens issued to a specific compromised user or service principal across your Azure AI applications. What action should you take?

A.Restart the Azure portal browser session

B.Revoke user refresh tokens using Azure AD PowerShell (Revoke-AzureADUserAllRefreshToken) or Microsoft Entra admin center

C.Change the Azure subscription display name

D.Delete the Azure Monitor Log Analytics workspace

AnswerB

Correct. Revoking refresh tokens invalidates all active sessions and tokens immediately across all connected applications.

Why this answer

Revoking refresh tokens invalidates the user's or service principal's ability to silently obtain new access tokens, effectively terminating the session across all clients. The Revoke-AzureADUserAllRefreshToken cmdlet (or the equivalent 'Revoke sessions' action in the Microsoft Entra admin center) sets the refreshTokensValidFromDateTime to now, so any token issued before that timestamp is rejected. This is the correct immediate containment step for a compromised identity.

Exam trap

AI-200 often tests the misconception that restarting a client session or deleting logs remediates a compromised identity, when the actual containment action is revoking refresh tokens at the Entra ID layer.

How to eliminate wrong answers

Option A is wrong because restarting a browser session only clears local cookies on one device — it does not invalidate tokens already issued to other clients or the attacker's session. Option C is wrong because changing the subscription display name is a cosmetic metadata change with no security effect on authentication tokens. Option D is wrong because deleting a Log Analytics workspace destroys telemetry and evidence, and does nothing to revoke tokens or stop the attacker.

Practice this question →

51

MCQeasy

You need to prevent accidental deletion of a production Azure OpenAI resource that contains critical customer deployment configurations. Which Azure resource lock configuration should you apply?

A.CanNotDelete resource lock

B.ReadOnly resource lock

C.Azure Policy deny assignment

D.Network Security Group deny rule

AnswerA

A CanNotDelete lock permits read and modify operations but blocks deletion, so administrators can still update deployment configurations while accidental removal of the production Azure OpenAI resource is prevented. ReadOnly would be excessive, since it would also block legitimate configuration changes.

Why this answer

The correct resource lock is CanNotDelete. This lock prevents accidental deletion of the Azure OpenAI resource while still allowing read and modify operations. It ensures that the resource cannot be deleted until the lock is removed, providing a safety net against unintended deletion.

Exam trap

AI-200 often tests the distinction between CanNotDelete and ReadOnly locks, with candidates incorrectly choosing ReadOnly when modification is still needed.

How to eliminate wrong answers

Option B is wrong because a ReadOnly lock prevents any modifications, including updates to deployment configurations, which may be necessary for operations; it is too restrictive for a production resource that might need changes. Option C is wrong because Azure Policy deny assignment is used to enforce organizational standards and can deny certain actions, but it is not a resource lock and does not specifically prevent deletion of a single resource; it is applied at a scope and can be complex. Option D is wrong because a Network Security Group deny rule controls network traffic, not resource management operations; it cannot prevent deletion of a resource.

Practice this question →

52

Multi-Selecteasy

You are designing an operational dashboard in Azure Monitor. Which TWO visualization components can you include in an Azure Workbook? (Choose two)

Select 2 answers

A.Azure SQL database table creation scripts (DDL)

B.KQL query result grids and charts

C.Azure Key Vault plain-text master password files

D.Docker container image binary layers

E.Azure Monitor metric charts

AnswersB, E

Workbooks render KQL query results as grids and charts, letting operators visualise Log Analytics and Azure Monitor metrics interactively. This satisfies the stem's requirement for visualisation components, since both are native Workbook tiles rather than separate dashboard-only features.

Why this answer

Option B is correct because Azure Workbooks natively render KQL query results as grids, charts, and other visualizations, which is the core mechanism for displaying Log Analytics data in a workbook. Option E is correct because Workbooks can also visualize Azure Monitor platform metrics directly through metric chart components, letting you combine metrics and logs in one dashboard. Options A, C, and D are incorrect because DDL scripts, Key Vault plain-text secrets, and Docker image binary layers are not visualization components and cannot be embedded as workbook tiles; Workbooks only display query/metric-based visualizations, text, links, and parameters.

Practice this question →

53

Multi-Selecteasy

You want to ensure that your Azure AI infrastructure costs are properly attributed to different business departments. Which TWO features should you configure? (Choose two)

Select 2 answers

A.Azure Key Vault cryptographic keys

B.Azure resource tags for department identification (e.g., Department=Finance)

C.Cost Analysis grouping and filtering by tag name

D.Application Insights availability probes

E.Azure Firewall network rules

AnswersB, C

Resource tags attach department metadata directly to Azure AI resources, enabling chargeback and showback. This satisfies the requirement to attribute costs by business unit, since tags flow into billing records and can be enforced through Azure Policy.

Why this answer

Resource tagging and Cost Management export/cost views help organize and attribute costs by department.

Practice this question →

54

MCQeasy

You need to analyze log queries across multiple AI applications and infrastructure components to identify custom performance bottlenecks. Which query language is used in Azure Monitor Log Analytics to write queries against collected log data?

A.GraphQL

B.SQL Server Transact-SQL (T-SQL)

C.Kusto Query Language (KQL)

D.Azure Resource Graph Query (ARGQL)

AnswerC

KQL is the native query language of Azure Monitor Log Analytics, so it queries the collected log data across AI applications and infrastructure components. Its operators let you join and filter tables to isolate custom performance bottlenecks.

Why this answer

Kusto Query Language (KQL) is the native query language used by Azure Monitor Log Analytics to query data stored in Log Analytics workspaces. It is designed for read-only, high-performance analysis of large volumes of structured, semi-structured, and unstructured log data, making it ideal for identifying custom performance bottlenecks across AI applications and infrastructure. KQL supports advanced operators like `summarize`, `join`, `render`, and `make-series` that enable deep diagnostics and visualization.

Exam trap

AI-200 often tests the confusion between KQL and other query languages like T-SQL or ARGQL, especially when candidates assume that Azure Monitor uses SQL because of its familiarity.

How to eliminate wrong answers

Option A is wrong because GraphQL is an API query language for client-server data fetching, not for querying log data in Azure Monitor. Option B is wrong because T-SQL is used for relational databases like Azure SQL Database, not for Log Analytics; while KQL has some SQL-like syntax, it is a distinct language optimized for telemetry data. Option D is wrong because Azure Resource Graph Query (ARGQL) is used to query and explore Azure resources at scale via Azure Resource Graph, not for analyzing log data in Log Analytics workspaces.

Practice this question →

55

MCQeasy

You need to monitor the monthly cost of an Azure AI Document Intelligence resource to ensure it does not exceed a specified budget. Where should you configure an automated notification when the cost reaches 80% of the budget?

A.Configure an alert rule in Azure Monitor on the Document Intelligence resource metric 'Transactions'.

B.Set up an action group in Azure Advisor to monitor billing anomalies.

C.Create a Budget in Azure Cost Management + Billing with an alert threshold set to 80%.

D.Create an expenditure alert inside the Azure AI Foundry portal.

AnswerC

Azure Cost Management budgets evaluate spend against a defined scope and trigger alerts at configured thresholds. Setting 80% on the budget notifies the team before the limit is breached, meeting the requirement for automated notification at that percentage.

Why this answer

Azure Cost Management + Billing Budgets are the native mechanism for setting spending thresholds and triggering automated notifications (email or action groups) when actual or forecasted cost reaches a defined percentage of the budget. Setting an 80% threshold on a budget scoped to the Document Intelligence resource is the correct approach.

Exam trap

AI-200 often tests the difference between cost governance (Budgets in Cost Management) and usage monitoring (Azure Monitor metric alerts) — candidates pick metric alerts on 'Transactions' thinking it tracks cost, when only Budgets track monetary spend.

How to eliminate wrong answers

Option A is wrong because Azure Monitor alert rules on the 'Transactions' metric track usage volume, not monetary cost — a transaction count alert does not map to a dollar budget and cannot enforce a cost threshold. Option B is wrong because Azure Advisor provides recommendations, not billing anomaly monitoring, and action groups are notification mechanisms, not budget monitors. Option D is wrong because Azure AI Foundry does not have a native 'expenditure alert' feature for individual AI resources — cost governance is centralized in Cost Management + Billing.

Practice this question →

56

MCQmedium

Your machine learning engineering team needs to run training jobs on Azure Machine Learning compute clusters. To minimize costs during off-peak hours, you need to configure the compute cluster to automatically scale down to zero nodes when no jobs are queued, and scale up when jobs are submitted. What setting should you configure on the compute cluster?

A.Set the minimum number of nodes to 0 and the maximum nodes according to workload requirements

B.Configure Azure Automation runbooks to stop the physical datacenter servers

C.Set the minimum number of nodes equal to the maximum number of nodes

D.Use Azure Functions timer triggers to delete the compute target every evening

AnswerA

Setting minimum nodes to 0 lets the cluster deprovision all compute when idle, while the maximum caps scale-up for queued jobs. This satisfies the stem's scale-to-zero cost requirement, since Azure ML scales nodes down automatically when no jobs are pending.

Why this answer

To automatically scale down to zero nodes when no jobs are queued and scale up when jobs are submitted, you should set the minimum number of nodes to 0 and the maximum nodes according to workload requirements. Azure Machine Learning compute clusters support autoscaling with a minimum of 0, which allows the cluster to deallocate all nodes when idle, minimizing costs. When a job is submitted, the cluster automatically scales up to the maximum node count to handle the workload.

Exam trap

AI-200 often tests the misconception that autoscaling to zero requires deleting the cluster or using external automation, when in fact setting min_nodes to 0 is the built-in, supported configuration.

How to eliminate wrong answers

Option B is wrong because configuring Azure Automation runbooks to stop physical datacenter servers is not applicable to Azure ML compute clusters, which are virtual and managed by Azure; you cannot stop physical servers. Option C is wrong because setting the minimum equal to the maximum disables autoscaling, resulting in a fixed-size cluster that cannot scale down to zero, leading to unnecessary costs. Option D is wrong because using Azure Functions timer triggers to delete the compute target every evening is a manual, disruptive approach that would delete the cluster and require recreation, losing configuration and causing delays; it is not the built-in autoscaling feature.

Practice this question →

57

Multi-Selecthard

You are configuring comprehensive observability for an intelligent application built on Azure AI Document Intelligence and Azure OpenAI. Which THREE telemetry types or tools should you configure in Application Insights to capture complete operational insights? (Choose three)

Select 3 answers

A.Configure dependency tracking to monitor outgoing HTTP calls made to Azure AI REST endpoints.

B.Track custom events to log domain-specific metrics like document processing success rates.

C.Install the Azure Firewall policy manager directly onto the Application Insights SDK.

D.Enable exception telemetry to automatically capture unhandled runtime errors and stack traces.

E.Use Azure Active Directory conditional access policies to restart unhealthy worker threads.

AnswersA, B, D

Dependency tracking records outgoing HTTP calls to Azure AI REST endpoints, capturing latency, response codes and failure rates for Document Intelligence and Azure OpenAI. This satisfies the observability requirement by exposing downstream service performance, which request telemetry alone cannot attribute to specific external dependencies.

Why this answer

Option A is correct because Application Insights dependency tracking automatically captures outgoing HTTP/REST calls to Azure AI Document Intelligence and Azure OpenAI endpoints, recording duration, result codes, and failures so you can diagnose latency and errors in the AI service calls. Option B is correct because custom events let you log domain-specific telemetry such as document processing success rates, which are not captured by default request/dependency metrics and are essential for business-level observability. Option D is correct because exception telemetry automatically captures unhandled runtime errors with stack traces, enabling root-cause analysis of failures in the application code.

Option C is incorrect because Azure Firewall policy management is a networking security function and cannot be installed into the Application Insights SDK. Option E is incorrect because Azure AD conditional access policies govern authentication/authorization and cannot restart unhealthy worker threads.

Exam trap

AI-200 often tests whether candidates can identify the three core telemetry types (dependencies, custom events, exceptions) and avoid distractors that mix in unrelated Azure services like Firewall or Conditional Access.

Practice this question →

58

MCQmedium

Your enterprise AI application is deployed across multiple Azure regions for high availability. You need to ensure that logs from Application Insights instances in all regions are aggregated into a single central Log Analytics workspace for unified querying. How should you configure this?

A.Configure each Application Insights resource to use the same shared centralized Log Analytics workspace during creation

B.Deploy a separate Log Analytics workspace in every region and use Azure Backup to copy tables

C.Write a custom Python script that downloads logs from each region every hour and uploads them to Azure Blob Storage

D.Use Azure Traffic Manager to merge log data streams at the DNS level

AnswerA

Application Insights resources can be directed to a workspace-based configuration, where each regional resource writes its telemetry into one shared Log Analytics workspace. Pointing every regional instance at the same workspace at creation satisfies the stem's requirement for centralised, cross-region querying.

Why this answer

Application Insights resources can be configured to send their telemetry to a Log Analytics workspace, and pointing multiple regional Application Insights instances at the same workspace aggregates all logs for unified KQL querying. This is done at creation time (or via migration) by selecting the shared workspace as the ingestion target. The result is a single pane of glass across regions without custom ETL.

Exam trap

AI-200 often tests the belief that separate regional workspaces can be 'merged' by a networking service, when the correct approach is to point all Application Insights resources at one shared workspace from the start.

How to eliminate wrong answers

Option B is wrong because Azure Backup protects data; it cannot copy Log Analytics tables between workspaces, and separate workspaces defeat the goal of unified querying. Option C is wrong because a custom Python download-and-upload script is brittle, introduces latency, and Blob Storage is not a queryable Log Analytics workspace, so it does not achieve centralized querying. Option D is wrong because Azure Traffic Manager is a DNS-based traffic distribution service; it has no ability to merge or store log data streams.

Practice this question →

59

Multi-Selectmedium

When configuring Azure Monitor alerts for an AI application, which TWO action types can be included in an Action Group to notify operations personnel? (Choose two)

Select 2 answers

A.Direct formatting of Azure billing invoices

B.Automated deletion of Azure subscription resources

C.Webhook integration to trigger automated incident creation in ITSM tools

D.Email / SMS / Push notifications

E.Local BIOS firmware updates for physical hypervisors

AnswersC, D

A webhook action posts alert payloads to an external HTTPS endpoint, letting the Action Group call an ITSM tool's API to open an incident automatically. This satisfies the stem's requirement to notify operations personnel indirectly through their existing ticketing workflow.

Why this answer

Action groups support multiple notification channels including email, SMS, push notifications, and webhooks.

Practice this question →

60

MCQeasy

You want to ensure that no AI services can be created in unauthorized Azure regions across your entire subscription. Which Azure governance tool should you use to enforce this restriction?

A.Azure Monitor action groups

B.Azure Cost Management budgets

C.Azure Policy with the 'Allowed locations' definition

D.Azure Security Center JIT access

AnswerC

Azure Policy's built-in 'Allowed locations' definition evaluates resource creation requests against a permitted region list and denies non-compliant deployments. Assigning it at subscription scope enforces the restriction across every AI service, satisfying the requirement to block creation in unauthorised regions.

Why this answer

Azure Policy with the built-in 'Allowed locations' definition restricts resource creation to approved Azure regions at the subscription or management group scope, enforcing the restriction across all AI services. Assigning this policy denies deployments in unauthorized regions.

Exam trap

AI-200 often tests whether candidates confuse monitoring/cost/security tools with governance enforcement — only Azure Policy can deny resource creation in unauthorized regions.

How to eliminate wrong answers

Option A is wrong because Azure Monitor action groups trigger notifications or automated actions in response to alerts, not governance restrictions on resource creation. Option B is wrong because Cost Management budgets track and alert on spending, not regional deployment permissions. Option D is wrong because Security Center (Defender for Cloud) JIT access manages temporary VM port access, not region restrictions for AI services.

Practice this question →

61

MCQmedium

Your team is developing an AI solution that uses Azure Cognitive Services. You need to ensure that the API keys cannot be extracted from the client-side mobile application. What is the recommended architectural pattern to achieve this?

A.Use Azure Front Door to strip API keys from incoming mobile requests

B.Implement a backend API proxy (e.g., Azure Functions or API Management) that authenticates mobile clients and calls Cognitive Services using secure server-side keys

C.Store the Cognitive Services API key in an encrypted local SQLite database on the mobile device

D.Configure Cognitive Services for anonymous public access and rely on mobile app version checks

AnswerB

Routing Cognitive Services calls through a backend proxy keeps the subscription key server-side, so it never ships in the mobile binary where decompilation would expose it. The proxy authenticates clients via Microsoft Entra ID and forwards requests, satisfying the stem's requirement that keys cannot be extracted from the client application.

Why this answer

A backend API proxy (Azure Functions or API Management) is the recommended pattern because the Cognitive Services subscription key stays server-side and is never shipped in the mobile binary, where it could be decompiled or intercepted. The mobile client authenticates to the proxy (e.g., via OAuth 2.0/Entra ID token), and the proxy validates that identity before calling Cognitive Services with the secret key. This also enables rate limiting, key rotation, and per-user quota enforcement without redeploying the app.

Exam trap

AI-200 often tests the misconception that client-side encryption or edge services like Front Door can protect secrets, when the only robust answer is to keep the key server-side behind an authenticated proxy.

How to eliminate wrong answers

Option A is wrong because Azure Front Door is a layer-7 edge router/CDN that forwards requests; it does not authenticate mobile users or hold Cognitive Services keys on their behalf, and 'stripping' keys from requests would not prevent keys embedded in the app from being extracted. Option C is wrong because any key stored on a mobile device — even in an encrypted SQLite database — is recoverable by an attacker with device access or via reverse engineering, since the decryption key must also reside on the device. Option D is wrong because anonymous public access to Cognitive Services exposes the endpoint to abuse and cost overruns, and app version checks are client-side controls that can be bypassed trivially.

Practice this question →

62

Multi-Selecteasy

You want to monitor the security posture and compliance score of your Azure AI resources. Which TWO of the following tools should you use? (Choose two)

Select 2 answers

A.Azure Container Registry storage tiers

B.Azure DNS zone editor

C.Azure Cost Management for billing forecasts

D.Azure Policy compliance dashboard for regulatory standard evaluations

E.Microsoft Defender for Cloud for security recommendations and secure score

AnswersD, E

Azure Policy's compliance dashboard continuously evaluates resources against built-in regulatory initiatives, such as ISO 27001 and NIST, surfacing per-resource compliance states and remediation tasks. This directly satisfies the stem's requirement to monitor the compliance score of Azure AI resources, since regulatory standard evaluations are exactly what the dashboard reports.

Why this answer

Option D is correct because the Azure Policy compliance dashboard evaluates resources against built-in and custom policy definitions, including regulatory standard initiatives such as ISO 27001, NIST SP 800-53, and PCI DSS, and reports each resource's compliance state, which directly addresses monitoring the compliance score of Azure AI resources. Option E is correct because Microsoft Defender for Cloud continuously assesses Azure resources, including AI services, against security benchmarks and surfaces security recommendations plus a Secure Score that quantifies the overall security posture. The two together cover the compliance dimension (Azure Policy) and the security-posture dimension (Defender for Cloud) requested in the scenario.

Option A is incorrect because Azure Container Registry storage tiers only control image storage performance and cost, not security or compliance evaluation. Option B is incorrect because the Azure DNS zone editor manages DNS records and has no role in security posture or regulatory compliance scoring. Option C is incorrect because Azure Cost Management provides billing and cost forecasting data, not security recommendations or compliance assessments.

Exam trap

The trap is selecting cost or operational tools (Cost Management, Container Registry) when asked about security posture; candidates must distinguish security/compliance tools (Defender for Cloud, Azure Policy) from billing and infrastructure management tools.

Practice this question →

63

MCQeasy

You need to export Azure Monitor metric and log data to an external SIEM solution for security auditing. Which Azure feature should you use to stream this telemetry in real-time to an external Event Hub?

A.Azure Backup vault scheduled jobs

B.Azure Advisor recommendations export

C.Diagnostic settings configured to stream to an Azure Event Hub

D.Azure Resource Graph queries

AnswerC

Diagnostic settings stream platform metrics and resource logs to an Event Hub, which the external SIEM consumes in near real-time. This satisfies the stem's constraint: exporting Azure Monitor telemetry to an external SIEM via Event Hub.

Why this answer

Diagnostic settings in Azure Monitor are the mechanism that routes platform metrics and resource logs to supported sinks, including Azure Event Hubs, Log Analytics workspaces, and Storage accounts. Configuring a diagnostic setting with Event Hub as the destination streams telemetry in near real-time, which an external SIEM can consume via its Event Hub connector. This is the native, supported path for exporting Azure telemetry to third-party security platforms.

Exam trap

AI-200 often tests the misconception that Resource Graph or Advisor can export telemetry, when the only supported real-time streaming mechanism is a diagnostic setting pointed at an Event Hub.

How to eliminate wrong answers

Option A is wrong because Azure Backup vault scheduled jobs handle data protection and recovery, not telemetry streaming, and they have no Event Hub export capability. Option B is wrong because Azure Advisor recommendations export produces best-practice guidance, not metric or log telemetry, and cannot stream to Event Hubs. Option D is wrong because Azure Resource Graph queries return resource configuration and inventory data on demand; they are not a real-time telemetry pipeline and do not forward logs or metrics to Event Hubs.

Practice this question →

64

MCQmedium

Your enterprise AI solution runs across multiple subscriptions. You want to implement centralized cost allocation tags for all Azure AI resources to ensure every resource is tagged with 'CostCenter' and 'Environment'. Which Azure feature should you use to automatically audit and enforce these tags?

A.Application Insights telemetry initializers

B.Azure Advisor security rules

C.Azure Policy with tag governance rules (e.g., 'Inherit a tag from the resource group' or 'Require specified tag')

D.Azure Cost Management budgets

AnswerC

Azure Policy tag governance rules audit and enforce tags across subscriptions, with built-in definitions such as 'Require a tag' and 'Inherit a tag from the resource group'. This centrally guarantees every Azure AI resource carries CostCenter and Environment, matching the stem's enforcement requirement.

Why this answer

Azure Policy is the governance service that audits and enforces resource properties, including tags, across subscriptions. Built-in tag policies such as 'Require a tag and its value on resources' and 'Inherit a tag from the resource group' let you deny non-compliant deployments or auto-remediate missing tags, and policy assignments can target management groups so they cover every subscription in the enterprise. This is the only option that provides automatic audit plus enforcement.

Exam trap

AI-200 often tests whether candidates confuse cost visibility tools (Cost Management budgets, Advisor) with enforcement tools (Azure Policy), luring them toward options that report on tags rather than audit and enforce them.

How to eliminate wrong answers

Option A is wrong because Application Insights telemetry initializers modify telemetry payloads (adding custom properties to traces), not resource tags, and they operate at the application SDK level. Option B is wrong because Azure Advisor provides recommendations on cost, security, reliability, and performance — it does not enforce or audit tags. Option D is wrong because Cost Management budgets trigger alerts or actions when spending thresholds are crossed; they consume tags for cost allocation but do not enforce their presence.

Practice this question →

65

Multi-Selecthard

You are analyzing security and compliance logs in an Azure Log Analytics workspace. You want to write KQL queries to investigate potential security incidents or token acquisition failures. Which THREE of the following KQL tables or operators are valid and useful for this investigation? (Choose three)

Select 3 answers

A.The exceptions table to analyze application error stack traces and failure types.

B.The SELECT * FROM command syntax traditionally used in relational SQL databases.

C.The DROP TABLE administrative command inside Application Insights log streams.

D.The summarize operator to aggregate telemetry data using functions like count() or percentile().

E.The dependencies table to inspect outbound API call targets, durations, and success results.

AnswersA, D, E

The exceptions table captures server-side and client-side exception telemetry, including stack traces, exception types and failure messages, which directly supports diagnosing token acquisition failures recorded by Microsoft Entra ID authentication libraries. It satisfies the stem's requirement for investigating token acquisition failures alongside security incidents within the same Log Analytics workspace.

Why this answer

Option A is correct because the exceptions table in Application Insights / Log Analytics stores exception telemetry including type, message, and stack traces, which is exactly what you need to diagnose application errors and token acquisition failures. Option D is correct because summarize is a core KQL operator that groups rows by one or more columns and applies aggregations such as count(), avg(), or percentile(), making it essential for spotting spikes or patterns in security and compliance telemetry. Option E is correct because the dependencies table records outbound calls (HTTP, SQL, Azure service calls) with target, duration, and success/failure result, which helps trace failed token or API calls.

Option B is not valid because KQL does not use SQL's SELECT * FROM syntax; queries start with a table name followed by pipe operators. Option C is not valid because DROP TABLE is a database DDL command and is not supported inside Application Insights or Log Analytics KQL queries.

Exam trap

AI-200 often tests whether candidates mistakenly apply relational SQL syntax (SELECT, DROP TABLE) to KQL, confusing the two query languages and assuming DDL operations are available in Log Analytics.

Practice this question →

66

Multi-Selectmedium

You are designing a secure enterprise AI architecture on Azure. Which TWO of the following practices should you implement to secure credentials and service access? (Choose two)

Select 2 answers

A.Use system-assigned or user-assigned managed identities for Azure service-to-service authentication.

B.Store API keys and connection strings as plain text in Git repository configuration files.

C.Store runtime secrets and certificates in Azure Key Vault.

D.Grant subscription Owner permissions to all mobile client applications.

E.Disable TLS encryption on internal microservice communication to improve network throughput.

AnswersA, C

Managed identities let Azure services authenticate to other resources without storing credentials in code or configuration. Microsoft Entra ID issues and rotates the tokens automatically, eliminating secrets that could leak, which directly satisfies the requirement to secure service-to-service access.

Why this answer

Option A is correct because managed identities (system-assigned or user-assigned) let Azure services authenticate to resources such as Key Vault, Storage, and Azure OpenAI without embedding any credentials in code or configuration, eliminating secret sprawl and enabling Azure AD token-based access. Option C is correct because Azure Key Vault is the dedicated service for storing and controlling access to runtime secrets, API keys, connection strings, and certificates, with RBAC, access policies, soft-delete, purge protection, and auditing. Option B is wrong because committing API keys and connection strings as plain text in Git exposes them to anyone with repository access and to history scraping, violating secret-management best practices.

Option D is wrong because granting subscription Owner to mobile client applications violates least privilege and would let a compromised app modify or delete any resource in the subscription. Option E is wrong because disabling TLS on internal microservice traffic removes encryption in transit, enabling eavesdropping and man-in-the-middle attacks for a negligible throughput gain.

Practice this question →

67

MCQhard

Your enterprise AI solution runs on Azure Kubernetes Service (AKS) and utilizes Azure Key Vault to store secrets and API keys for cognitive services. You need to provide pods with secure, credential-less access to Azure Key Vault without storing connection strings in Kubernetes secrets or environment variables. Which integration should you implement?

A.Kubernetes Service Account tokens mapped to Key Vault access policies via static connection strings

B.A Kubernetes CronJob that pulls keys from Key Vault and creates sealed secrets

C.Azure Container Instances virtual nodes with managed system-assigned identities

D.Azure Key Vault Provider for Secrets Store CSI Driver with Azure AD Workload Identity

AnswerD

The Secrets Store CSI Driver mounts Key Vault secrets directly into pods as volumes, while Azure AD Workload Identity federates the pod's Kubernetes service account with Microsoft Entra ID, issuing short-lived tokens. This eliminates stored connection strings or environment variables, satisfying the credential-less access constraint.

Why this answer

The Azure Key Vault Provider for Secrets Store CSI Driver mounts Key Vault secrets directly into pods as volumes, and when combined with Azure AD Workload Identity, the pod authenticates to Key Vault using a federated Kubernetes service account token — no stored credentials, connection strings, or environment variables. This is the recommended credential-less pattern for AKS.

Exam trap

AI-200 often tests whether candidates recognize that credential-less access requires workload identity plus the Secrets Store CSI Driver, luring them toward sealed secrets or static connection strings that still store credentials.

How to eliminate wrong answers

Option A is wrong because static connection strings are exactly what the requirement forbids, and mapping service account tokens to access policies via connection strings is not a supported credential-less pattern. Option B is wrong because a CronJob that pulls keys and creates sealed secrets still materializes secrets in the cluster and requires the CronJob itself to hold credentials, defeating the credential-less goal. Option C is wrong because Azure Container Instances virtual nodes are a burst-scaling mechanism for AKS, not an identity or secret-access integration, and system-assigned identities on ACI do not solve pod-level Key Vault access.

Practice this question →

68

Multi-Selecteasy

You are auditing your Azure subscription for security best practices related to Azure AI resources. Which TWO of the following actions help enforce governance and security? (Choose two)

Select 2 answers

A.Grant every user Contributor rights to the entire Azure subscription.

B.Use Azure Policy to enforce allowed deployment regions and mandatory tagging.

C.Share the master subscription co-administrator password with all external contractors.

D.Disable all firewall rules on Azure Key Vault.

E.Apply 'CanNotDelete' resource locks on critical production AI resources.

AnswersB, E

Azure Policy evaluates resource properties during deployment and flags non-compliant resources, directly enforcing the governance constraints in the stem: restricting deployments to approved regions and requiring mandatory tags. This satisfies the subscription-wide audit requirement, unlike identity or network controls that address different security axes.

Why this answer

Applying resource locks prevents accidental deletion, and enforcing Azure Policy ensures regional and configuration compliance.

Practice this question →

69

Multi-Selectmedium

To optimize costs and monitor consumption for an Azure OpenAI deployment across multiple business units, which THREE practices should you implement? (Choose three)

Select 3 answers

A.Apply Azure resource tags representing cost centers or business units to all AI service instances.

B.Delete all Log Analytics diagnostic logs immediately upon generation to reduce storage billing.

C.Analyze token usage patterns using Azure Monitor metrics to evaluate switching between Provisioned Throughput and Pay-As-You-Go.

D.Provision maximum possible provisioned throughput units permanently regardless of active workload.

E.Set up Azure Budgets with alert actions to notify department heads when spending hits 80% of allocation.

AnswersA, C, E

Resource tags propagate to Azure cost management, letting consumption be grouped and reported by business unit or cost centre. This satisfies the stem's multi-business-unit monitoring requirement, since untagged resources cannot be attributed to a department.

Why this answer

Option A is correct because applying Azure resource tags that represent cost centers or business units to every AI service instance enables cost allocation and chargeback reporting in Azure Cost Management, which is essential for tracking consumption per business unit. Option C is correct because Azure Monitor exposes token usage metrics for Azure OpenAI, and analyzing those patterns lets you decide whether Provisioned Throughput Units (PTUs) or Pay-As-You-Go token billing is cheaper for each workload's utilization profile. Option E is correct because Azure Budgets support alert actions (email, action groups, automation) that notify department heads when actual or forecasted spend reaches a threshold such as 80% of allocation, enabling proactive cost control.

Option B is wrong because deleting Log Analytics diagnostic logs immediately destroys the telemetry needed for monitoring and auditing, and diagnostic logs are not the primary driver of Azure OpenAI cost. Option D is wrong because permanently provisioning maximum PTUs regardless of active workload wastes money, since PTUs are billed hourly whether or not they are used.

Exam trap

AI-200 often tests the false-economy trap — candidates pick 'delete logs to save money' or 'provision max PTU for safety' when the correct answers balance observability, right-sizing, and proactive alerting.

Practice this question →

70

MCQmedium

You are deploying an Azure OpenAI Service resource and must ensure that all traffic from your virtual network reaches the endpoint without traversing the public internet. Which feature should you configure?

A.Enable public network access with selected IP address ranges

B.Configure a Service Endpoint without enabling virtual network rules

C.Deploy an Azure Application Gateway in front of the endpoint

D.Configure a Private Endpoint for the Azure OpenAI resource

AnswerD

A Private Endpoint assigns a private IP from your subnet to the Azure OpenAI resource via Azure Private Link, so virtual network traffic reaches the endpoint over the Microsoft backbone and never traverses the public internet, satisfying the stated constraint.

Why this answer

Private endpoints use private IP addresses from your VNet to securely bring services into your VNet, eliminating public exposure.

Practice this question →

71

MCQmedium

You need to ensure that all data sent to Azure OpenAI Service is encrypted at rest using a custom encryption key that your organization controls and rotates. Which feature must you configure?

A.Client-side encryption using PGP keys before sending HTTP payloads

B.Customer-managed keys (CMK) stored in Azure Key Vault

C.Azure Information Protection sensitivity labels applied via Microsoft Purview

D.Transparent Data Encryption (TDE) configured via SQL Server Management Studio

AnswerB

Customer-managed keys wrap the Azure OpenAI resource's data encryption key with a key held in Azure Key Vault, giving the organisation control over rotation. This satisfies the requirement that data at rest be encrypted with an organisation-controlled, rotatable key.

Why this answer

Customer-managed keys (CMK) in Azure Key Vault let you supply your own encryption key that Azure OpenAI uses for data-at-rest encryption, and you control rotation and revocation through Key Vault. This satisfies the requirement for organization-controlled, rotatable encryption keys for stored data.

Exam trap

AI-200 often tests the misconception that client-side encryption or Purview labels satisfy at-rest key control, when only CMK in Azure Key Vault gives the organization custody and rotation of the encryption key.

How to eliminate wrong answers

Option A is wrong because client-side PGP encryption protects data in transit or before storage but does not govern Azure OpenAI's at-rest encryption of stored data, and it is not a supported Azure OpenAI feature. Option C is wrong because Microsoft Purview sensitivity labels classify and protect documents but do not provide the encryption key for Azure OpenAI's at-rest storage. Option D is wrong because TDE is a SQL Server/Azure SQL feature and has no applicability to Azure OpenAI Service, which does not use SQL Server for its storage.

Practice this question →

72

MCQeasy

You need to restrict access to an Azure OpenAI resource so that only requests originating from a specific Azure Virtual Network are permitted. What should you configure?

A.Enable Cross-Origin Resource Sharing (CORS) and specify the VNet IP range.

B.Configure the Azure OpenAI resource networking settings to allow access from 'Selected networks' and add your Virtual Network subnet.

C.Assign the Cognitive Services Contributor role to the Virtual Network principal.

D.Enable Microsoft Defender for Cloud on the Virtual Network.

AnswerB

Selecting 'Selected networks' and adding the Virtual Network subnet applies service-level network ACLs, so requests from outside that subnet are rejected before reaching the model, satisfying the requirement to restrict access to one specific Azure Virtual Network.

Why this answer

Virtual network rules (service endpoints or private endpoints) on the Azure OpenAI firewall can restrict access to specific VNets.

Practice this question →

73

MCQhard

You are troubleshooting a latency issue with an AI model deployed in a Virtual Machine. You suspect the issue is related to storage IOPS limits. Which tool should you use to check the storage performance metrics?

A.Azure Network Watcher.

B.Azure Resource Graph Explorer.

C.Application Insights Dependency logs.

D.Azure Monitor Metrics for the Virtual Machine.

AnswerD

Azure Monitor Metrics exposes platform-level disk metrics for the virtual machine, including IOPS consumed, throughput and queue depth per data disk. This directly confirms whether storage IOPS throttling is causing the latency, which guest-level counters or application logs cannot attribute to the underlying limit.

Why this answer

Azure Monitor 'Metrics' for the Virtual Machine resource provides 'Disk Read Operations/sec' and 'Disk Write Operations/sec', which are key for diagnosing IOPS bottlenecks.

Practice this question →

74

Multi-Selectmedium

Your team is preparing an Azure AI application for production release. You need to implement robust monitoring and observability. Which TWO of the following steps should be taken? (Choose two)

Select 2 answers

A.Delete all log analytics workspaces weekly.

B.Rely solely on manual user bug reports without automated telemetry.

C.Configure Azure Monitor metric alerts and action groups for resource utilization and throttling thresholds.

D.Integrate the Application Insights SDK into application code to track requests, dependencies, and exceptions.

E.Disable all diagnostic logging to reduce storage overhead.

AnswersC, D

Azure Monitor metric alerts with action groups evaluate platform metrics such as CPU, memory and throttling, firing notifications when thresholds breach. This provides proactive detection of resource saturation and rate limiting, satisfying the production observability requirement for utilisation and throttling monitoring.

Why this answer

Option C is correct because Azure Monitor metric alerts with action groups provide automated, threshold-based notifications for resource utilization (such as CPU, memory, and request rates) and throttling (HTTP 429 responses), which are essential for detecting production issues proactively. Option D is correct because integrating the Application Insights SDK into the application code enables distributed tracing of requests, dependency calls, and exceptions, giving the end-to-end observability needed to diagnose failures and performance bottlenecks in an Azure AI application. Option A is incorrect because deleting Log Analytics workspaces weekly destroys the historical telemetry and query capability that monitoring depends on.

Option B is incorrect because relying solely on manual user bug reports provides no automated telemetry, leaving blind spots and delaying detection. Option E is incorrect because disabling diagnostic logging removes the audit and operational data needed for troubleshooting and compliance.

Exam trap

AI-200 often tests the misconception that monitoring can be achieved through manual reporting or that reducing logging overhead is beneficial, when in fact automated telemetry and alerts are essential for production observability.

Practice this question →

75

MCQmedium

You are auditing your Azure AI services to ensure that all API keys are rotated regularly. What is the recommended practice for managing credentials in an enterprise AI solution?

A.Hardcode primary and secondary keys in application configuration files with failover logic.

B.Store API keys in plain text in Azure DevOps variable groups.

C.Rotate API keys manually every 7 days using the Azure portal.

D.Eliminate API keys by migrating authentication to Microsoft Entra ID managed identities.

AnswerD

Managed identities let Azure AI services authenticate to resources through Microsoft Entra ID token issuance, removing stored API keys entirely. This satisfies the stem's rotation requirement by eliminating the credential that would otherwise need periodic rotation, reducing leakage risk.

Why this answer

Microsoft Entra ID managed identities let an Azure resource authenticate to another Azure service (such as Azure AI Search, Azure OpenAI, or Key Vault) without any secret stored in code or configuration. The identity is created and its credentials are rotated automatically by the platform, which eliminates the entire key-rotation problem the question describes. This is Microsoft's recommended enterprise pattern for service-to-service authentication in AI solutions.

Exam trap

AI-200 often tests the misconception that 'rotate keys more often' is the best security answer, when the stronger and recommended answer is to eliminate keys altogether using managed identities.

How to eliminate wrong answers

Option A is wrong because hardcoding primary and secondary keys in configuration files exposes secrets in source control and deployment artifacts, and failover logic does not remove the need to rotate those keys. Option B is wrong because plain-text secrets in Azure DevOps variable groups are readable by anyone with pipeline access; secrets should be stored in Azure Key Vault and linked via variable groups or Key Vault-backed connections. Option C is wrong because manual 7-day rotation is operationally fragile, error-prone, and does not scale — it also leaves keys valid for up to a week if a leak occurs.

Practice this question →

Page 1 of 2 · 97 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Security And Observability questions.

Start 20-question session