Courseiva

AI-200 · topic practice

Security And Observability practice questions

This domain covers securing and monitoring Azure AI workloads: identity and access control, network isolation, encryption of data at rest and in transit, and diagnostic visibility. Questions are scenario-based, asking you to pick the correct Azure governance, networking, or Key Vault feature to satisfy a stated compliance or restriction requirement.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Editorial oversight:Johnson Ajibi· MSc IT Security, IEEE Senior Member
20 questionsDomain: Security And Observability
Practice 10 questionsBrowse domain →

What the exam tests

What to know about Security And Observability

Be able to select the right control for a stated requirement: Azure Policy for subscription-wide governance, network ACLs or private endpoints for network restriction, and customer-managed keys in Key Vault for encryption control. The single most important thing is matching the requirement to the correct Azure feature rather than a similar-sounding one.

Azure Policy assignments and initiatives to enforce regional and resource-type restrictions subscription-wide

Azure OpenAI network ACLs, private endpoints, and virtual network rules to restrict inbound access

Customer-managed keys in Azure Key Vault for encryption at rest of Azure AI resources

Managed identity and Azure RBAC role assignments for authenticating to Azure AI services

Watch out for

Common Security And Observability exam traps

  • ▸Confusing Azure Policy (enforcement and deny effects) with Azure RBAC, which grants permissions rather than restricting where resources can be deployed.
  • ▸Assuming network ACLs alone provide private connectivity; private endpoints and disabling public access are separate configuration steps.
  • ▸Believing Microsoft-managed keys satisfy a customer-controlled key rotation requirement; customer-managed keys in Key Vault are required.

Practice set

Security And Observability questions

20 questions · select your answer, then reveal the explanation

Question 1hardmultiple choice
Read the full Security And Observability explanation →

An enterprise AI application experiences intermittent HTTP 429 (Too Many Requests) errors when calling Azure OpenAI Service during peak hours. You need to analyze the exact token consumption trends and throttling patterns over the past week. Where should you look first in Azure Monitor?

Question 2mediummultiple choice
Read the full Security And Observability explanation →

You have a custom machine learning model deployed as a managed online endpoint in Azure Machine Learning. You need to ensure that scoring requests made to the endpoint are encrypted in transit and that client authentication is enforced using JSON Web Tokens (JWT). What authentication method does the managed online endpoint support by default?

Question 3easymultiple choice
Study the full Python automation breakdown →

You are troubleshooting a Python application that fails to connect to Azure Key Vault using a managed identity. You want to inspect the exact exception stack trace and identify whether the managed identity token request failed. Where should you look in your local development or cloud diagnostics?

Question 4easymultiple choice
Read the full Security And Observability explanation →

You want to check the current monthly spend on your Azure OpenAI Service resource and identify which model deployments are consuming the most budget. Which Azure portal tool should you use?

Question 5hardmultiple choice
Read the full Security And Observability explanation →

You have configured distributed training for a large language model across multiple nodes in an Azure Machine Learning cluster. Training jobs are failing with socket timeout errors between nodes. You need to verify internal node-to-node communication and ensure that the underlying Network Security Group (NSG) rules permit communication on the required ports. Which ports must be open between nodes in the cluster?

Question 6mediummultiple choice
Read the full Security And Observability explanation →

Your organization requires that all cognitive service keys stored in Azure Key Vault are automatically rotated every 90 days. What native Azure Key Vault feature should you configure to accomplish this?

Question 7hardmultiple choice
Study the full Python automation breakdown →

You are troubleshooting a Python application that uses Azure SDK libraries to interact with Azure AI services. The application is flooding Log Analytics with excessive telemetry, causing unexpected cost increases. You want to dynamically adjust the sampling rate of Application Insights without redeploying application code. How can you achieve this?

Question 8hardmultiple choice
Read the full Security And Observability explanation →

You are optimizing costs for an AI workload running on Azure Kubernetes Service (AKS). You notice that GPU node pools are underutilized during weekends. You want to scale down the GPU node pool to 0 nodes on weekends and scale back up on Monday mornings. What Kubernetes native feature or Azure integration should you use?

Question 9mediummultiple choice
Review the full routing breakdown →

Your organization mandates that all data transferred between your Azure web application and Azure OpenAI Service must not traverse public internet routers, even within Azure's backbone. Which Azure networking configuration provides this guarantee?

Question 10hardmultiple choice
Read the full Security And Observability explanation →

You are investigating an incident where an AI model endpoint experienced a spike in memory consumption, resulting in Out-Of-Memory (OOM) container crashes. You want to query Log Analytics to find the exact container memory working set percentage across all replicas during the past 2 hours. Which table and KQL query should you use?

Question 11mediummultiple choice
Study the full Python automation breakdown →

Your Python AI application is deployed to Azure App Service and connects to Azure Key Vault using a managed identity. Recently, you rotated the Key Vault secret value, but your App Service application is still retrieving the old secret value. What is the most likely reason for this behavior?

Question 12hardmulti select
Read the full Security And Observability explanation →

Your Azure Machine Learning workspace is secured inside a virtual network with private endpoints. To ensure that data scientists can securely train models and access data stores without exposing resources to the public internet, which THREE of the following configurations must be established? (Choose three)

Question 13mediummulti select
Read the full Security And Observability explanation →

When monitoring an Azure OpenAI Service deployment using Azure Monitor, which TWO metrics are commonly tracked to evaluate throughput and capacity limits? (Choose two)

Question 14hardmulti select
Read the full Security And Observability explanation →

You are troubleshooting a slow-performing Azure AI Search service that indexes millions of documents. You want to check performance counters and query execution metrics using Azure Monitor. Which THREE of the following metrics or log categories are available for Azure AI Search? (Choose three)

Question 15hardmultiple choice
Read the full Security And Observability explanation →

You are troubleshooting a custom LLM application deployed to an Azure Kubernetes Service (AKS) cluster. Requests are failing intermittently with HTTP 429 errors from Azure OpenAI. You need to implement a resilient observability and retry strategy using Azure Monitor. Which metric should you monitor to identify throttling?

Question 16mediummultiple choice
Read the full Security And Observability explanation →

Your development team wants to trace downstream calls made by a Semantic Kernel agent to Azure OpenAI and an external plugin. Which SDK package and feature should you integrate into your .NET application?

Question 17hardmultiple choice
Read the full Security And Observability explanation →

You are configuring network security for an Azure Machine Learning workspace. Compute instances must be accessible via Jupyter Lab, but no public IP addresses can be associated with the compute instances. Which configuration is required?

Question 18hardmultiple choice
Read the full Security And Observability explanation →

You are investigating performance degradation in an Azure AI Search vector search index. You need to run a Kusto Query Language (KQL) query in Application Insights to analyze dependency durations for search queries. Which table should you query?

Question 19easymulti select
Read the full Security And Observability explanation →

Which TWO Azure services or features can be used to securely store and reference secrets such as connection strings for an Azure AI Search service without hardcoding them?

Question 20hardmulti select
Read the full Security And Observability explanation →

When troubleshooting performance issues in an enterprise Azure OpenAI deployment using Application Insights, which TWO Kusto Query Language (KQL) queries or techniques help identify slow model responses?

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Sign up freeLog in

Focused Security And Observability sessions

Start a Security And Observability only practice session

Every question in these sessions is drawn from the Security And Observability domain — nothing else.

10 questions20 questions30 questions50 questions
Browse all Security And Observability questions →Mixed AI-200 session

Related practice questions

Related AI-200 topic practice pages

Move into related areas when this topic feels solid.

Security And Observability practice questions

Work through AI-200 questions on Security And Observability.

Event Driven Integration practice questions

Practise AI-200 questions linked to Event Driven Integration.

Data Management Services And Vector Search practice questions

Targeted AI-200 practice covering Data Management Services And Vector Search.

Containerized AI Workloads practice questions

Sharpen your AI-200 knowledge of Containerized AI Workloads.

AI-200 fundamentals practice questions

AI-200 fundamentals practice questions for AI-200.

AI-200 scenario practice questions

Targeted AI-200 practice covering AI-200 scenario.

AI-200 troubleshooting practice questions

Practise AI-200 questions linked to AI-200 troubleshooting.

Frequently asked questions

What does the AI-200 exam test about Security And Observability?
Be able to select the right control for a stated requirement: Azure Policy for subscription-wide governance, network ACLs or private endpoints for network restriction, and customer-managed keys in Key Vault for encryption control. The single most important thing is matching the requirement to the correct Azure feature rather than a similar-sounding one.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Security And Observability questions in a focused session?
Yes — the session launcher on this page draws every question from the Security And Observability domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other AI-200 topics?
Use the topic links above to move to related areas, or go back to the AI-200 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the AI-200 exam covers. They are not copied from any real exam or dump site.