View Full Microsoft AI-200 Exam Dumps and Practice Test Dumps

 

Question 21

Which Azure service provides object storage for unstructured data?

1. Azure Files
2. Azure Blob Storage
3. Azure Table Storage
4. Azure Queue Storage

Correct Answer: 2

Explanation:

Azure Blob Storage is designed for storing large amounts of unstructured data such as documents, images, videos, backups, and application-generated files. AI applications commonly use Blob Storage for datasets, uploaded documents, model-related assets, and intermediate processing files. Blobs can be organized using containers and accessed through Azure APIs or SDKs. Azure Files provides managed file shares, Table Storage provides NoSQL key-value storage, and Queue Storage supports asynchronous messaging. Choosing the appropriate storage service depends on the application’s data access pattern and requirements. Blob Storage is particularly suitable when applications need scalable object-based storage.

Question 22

Which Azure service provides durable key-value NoSQL storage?

1. Azure Table Storage
2. Azure Blob Storage
3. Azure Files
4. Azure Disk Storage

Correct Answer: 1

Explanation:

Azure Table Storage provides a NoSQL datastore based on key-value entities. It is useful for applications that require simple, scalable storage without the relational structure of traditional database systems. Each entity can contain properties associated with partition and row keys. These keys support efficient retrieval and distribution of stored data. Blob Storage is optimized for objects, Azure Files provides file shares, and Managed Disks provide block storage for virtual machines. Table Storage can therefore be useful when an AI application needs lightweight structured records without requiring relational database capabilities.

Question 23

Which Azure storage option provides SMB-based managed file shares?

1. Azure Queue Storage
2. Azure Blob Storage
3. Azure Files
4. Azure Table Storage

Correct Answer: 3

Explanation:

Azure Files provides managed cloud file shares that can be accessed through protocols such as SMB. Applications and workloads can use these shares when they require file-system-like access rather than object-based storage. Azure Files can be useful for shared configuration files, application data, migration scenarios, and workloads that expect traditional file shares. Queue Storage is intended for messages, Blob Storage handles objects, and Table Storage stores NoSQL entities. Selecting Azure Files is appropriate when multiple systems need access to shared files using supported file-sharing protocols.

Question 24

Which Azure storage service is designed for asynchronous work queues?

1. Azure Blob Storage
2. Azure Files
3. Azure Table Storage
4. Azure Queue Storage

Correct Answer: 4

Explanation:

Azure Queue Storage provides a simple messaging mechanism for storing large numbers of messages that can be processed asynchronously. A producer places messages into a queue, while a worker retrieves and processes them later. This pattern helps decouple application components and can smooth workload spikes. Queue Storage is different from Blob Storage, which stores objects, and Azure Files, which provides file shares. Table Storage is intended for NoSQL entities. For a lightweight background-processing architecture, Queue Storage can provide a straightforward mechanism for distributing work between producers and consumers.

Question 25

Which Azure feature allows Blob Storage access without exposing account keys?

1. SAS token
2. Storage tier
3. Blob index
4. Container lease

Correct Answer: 1

Explanation:

A Shared Access Signature, or SAS, can provide delegated, time-limited access to Azure Storage resources without giving the recipient the storage account’s primary access keys. A SAS can restrict permissions, resources, and validity periods according to the required access pattern. This is useful when applications need temporary access to blobs or other supported storage resources. Storage tiers affect access and cost characteristics, blob indexes support organization and discovery scenarios, and leases provide controlled access to blobs. SAS should be carefully scoped to minimize unnecessary permissions and exposure.

Question 26

Which Azure mechanism assigns permissions using managed identities?

1. Azure RBAC
2. Blob versioning
3. Storage lifecycle
4. CDN caching

Correct Answer: 1

Explanation:

Azure role-based access control, or Azure RBAC, can assign permissions to managed identities and other security principals. Managed identities allow supported Azure resources to authenticate to services without requiring developers to embed credentials in application code. RBAC roles determine what operations the identity is authorized to perform on a resource. Blob versioning maintains previous blob versions, lifecycle management controls data movement or deletion based on rules, and CDN caching improves content delivery performance. Combining managed identities with appropriate RBAC assignments provides a strong foundation for secure service-to-service authentication.

Question 27

Which Azure service provides private network connectivity to supported PaaS resources?

1. Public IP
2. Private Endpoint
3. DNS forwarder
4. Route table

Correct Answer: 2

Explanation:

An Azure Private Endpoint provides private connectivity from a virtual network to supported Azure services through a private IP address. This allows applications to access services such as storage accounts or databases without requiring the traffic to traverse a public endpoint. Private endpoints are commonly used to strengthen network isolation for sensitive workloads. Public IP resources expose addresses for public connectivity, DNS forwarders handle name-resolution forwarding, and route tables define network routes. For secure AI applications that access managed Azure services, private endpoints can help establish controlled network paths.

Question 28

Which Azure networking feature controls inbound and outbound subnet traffic?

1. Azure Firewall
2. Network Security Group
3. Application Gateway
4. Traffic Manager

Correct Answer: 2

Explanation:

A Network Security Group, or NSG, contains security rules that control inbound and outbound network traffic associated with supported Azure resources. Rules can evaluate characteristics such as source, destination, protocol, and port. NSGs are commonly applied to subnets or network interfaces to restrict unwanted connectivity. Azure Firewall provides centralized network security capabilities, Application Gateway provides application delivery and Layer 7 features, and Traffic Manager performs DNS-based traffic routing. NSGs are particularly useful when an AI application’s components need controlled communication within a virtual network.

Question 29

Which Azure service provides centralized secrets with hardware-backed protection options?

1. Azure Key Vault
2. Azure Monitor
3. Azure Logic Apps
4. Azure Load Balancer

Correct Answer: 1

Explanation:

Azure Key Vault provides centralized management of secrets, cryptographic keys, and certificates. Depending on the configuration, key material can use hardware security modules through supported Key Vault offerings. Applications can authenticate using Microsoft Entra identities or managed identities rather than embedding credentials directly in source code. This helps reduce the risk associated with hard-coded secrets. Azure Monitor focuses on observability, Logic Apps provides workflow automation, and Load Balancer distributes network traffic. Key Vault is therefore the Azure service intended for securely managing sensitive application credentials and cryptographic resources.

Question 30

Which Azure service provides centralized identity authentication for applications?

1. Azure Storage
2. Microsoft Entra ID
3. Azure Monitor
4. Azure Event Grid

Correct Answer: 2

Explanation:

Microsoft Entra ID provides identity and access management capabilities for users, applications, services, and other identities. Applications can authenticate users through supported identity protocols and can obtain tokens for accessing protected resources. Entra ID also integrates with managed identities and Azure role-based access control. Azure Storage handles data, Azure Monitor provides observability, and Event Grid distributes events. Using centralized identity services allows applications to avoid implementing authentication independently for every component. This is especially important for cloud AI solutions that integrate multiple Azure resources and require controlled access.

Question 31

Which Azure feature lets applications authenticate without storing service credentials?

1. Managed identity
2. Storage account
3. Availability zone
4. Resource group

Correct Answer: 1

Explanation:

Managed identities provide Azure resources with an identity that applications can use to authenticate to supported services. The identity’s credentials are managed by Azure, reducing the need to store passwords, client secrets, or access keys in application configuration. The identity can then receive appropriate permissions through Azure RBAC or other supported authorization mechanisms. Storage accounts provide data services, availability zones provide infrastructure resiliency, and resource groups organize Azure resources. Managed identities are therefore an important security mechanism for applications that need service-to-service authentication without manually managing credentials.

Question 32

Which Azure service distributes HTTP requests across application instances?

1. Azure DNS
2. Azure Load Balancer
3. Azure Application Gateway
4. Azure Storage

Correct Answer: 3

Explanation:

Azure Application Gateway provides application-layer traffic distribution for HTTP and HTTPS workloads. It operates at Layer 7 and supports capabilities such as routing based on HTTP characteristics, TLS termination, and Web Application Firewall integration. This makes it suitable for web-facing applications that require intelligent request routing. Azure Load Balancer operates primarily at the network transport layer, Azure DNS provides name resolution, and Azure Storage handles data storage. Application Gateway can therefore be useful when an AI application exposes HTTP endpoints that require Layer 7 traffic management.

Question 33

Which Azure service provides centralized resource health and operational recommendations?

1. Azure Advisor
2. Azure Queue Storage
3. Azure Container Registry
4. Azure Service Bus

Correct Answer: 1

Explanation:

Azure Advisor analyzes Azure resources and provides recommendations related to areas such as cost, performance, reliability, security, and operational excellence. These recommendations can help teams identify opportunities to improve their cloud environment. Advisor is not a workload execution or messaging service. Queue Storage provides lightweight asynchronous messaging, Container Registry stores container images, and Service Bus provides enterprise messaging. For AI cloud solutions, Advisor can help identify configuration improvements across the Azure environment and support ongoing optimization of deployed resources.

Question 34

Which Azure monitoring feature detects abnormal application behavior using telemetry?

1. Azure App Service
2. Application Insights
3. Azure Files
4. Azure DNS

Correct Answer: 2

Explanation:

Application Insights provides application performance monitoring and telemetry capabilities for supported workloads. It can collect information such as requests, dependencies, exceptions, traces, and performance measurements. Developers can use this telemetry to investigate application behavior and identify failures or performance problems. Application Insights integrates with Azure Monitor, allowing application-level observations to be considered alongside broader monitoring information. App Service hosts applications, Azure Files provides managed file shares, and Azure DNS provides DNS services. Application Insights is therefore the appropriate choice when the goal is to monitor application execution and diagnose runtime issues.

Question 35

Which Azure service helps protect web applications from common Layer 7 attacks?

1. Azure Bastion
2. Azure Web Application Firewall
3. Azure Queue Storage
4. Azure Traffic Manager

Correct Answer: 2

Explanation:

Azure Web Application Firewall, or WAF, helps protect web applications from common application-layer threats. It can inspect HTTP and HTTPS requests and apply security rules designed to identify malicious patterns. WAF is commonly integrated with services such as Application Gateway, Front Door, or other supported application delivery architectures. Azure Bastion provides secure administrative access to virtual machines, Queue Storage provides messaging, and Traffic Manager performs DNS-based traffic distribution. A WAF is therefore appropriate when an AI application exposes web endpoints that require protection against common Layer 7 attack patterns.

Question 36

Which Azure service provides globally distributed HTTP application delivery?

1. Azure Front Door
2. Azure Table Storage
3. Azure Batch
4. Azure Files

Correct Answer: 1

Explanation:

Azure Front Door provides global application delivery capabilities for HTTP and HTTPS workloads. It can route client requests to backend origins and provides features such as global traffic management, acceleration, TLS termination, and integration with security capabilities. This makes it useful for applications serving users across geographic regions. Table Storage provides NoSQL storage, Azure Batch supports large-scale batch processing, and Azure Files provides managed file shares. Front Door is particularly useful when an AI-enabled web application requires globally distributed entry points and intelligent routing toward backend services.

Question 37

Which Azure service executes large numbers of parallel computational jobs?

1. Azure Functions
2. Azure Batch
3. Azure DNS
4. Azure App Configuration

Correct Answer: 2

Explanation:

Azure Batch is designed for running large-scale parallel and high-performance computing workloads. It manages pools of compute resources and schedules jobs across those resources. Batch can be useful when an application needs to process many independent computational tasks rather than handling individual requests through a traditional web service. Azure Functions is intended for event-driven serverless execution, DNS provides name resolution, and App Configuration stores application settings. AI and data-processing workflows can use Batch when computational jobs need to be distributed across multiple compute nodes.

Question 38

Which Azure capability automatically moves aging blobs to lower-cost tiers?

1. Blob lifecycle management
2. Private DNS
3. Managed identity
4. Application Gateway

Correct Answer: 1

Explanation:

Azure Blob Storage lifecycle management allows policies to automatically transition blobs between access tiers or delete data based on conditions such as age. This can reduce storage costs for datasets whose access frequency changes over time. For example, recently created data may remain in a frequently accessed tier while older information is moved to a less expensive tier. Private DNS provides name resolution, managed identities support authentication, and Application Gateway handles HTTP traffic. Lifecycle management is therefore useful for AI applications that accumulate large volumes of files and need automated storage-cost optimization.

Question 39

Which Azure service provides distributed application caching with low-latency access?

1. Azure Managed Redis
2. Azure Batch
3. Azure DNS
4. Azure Event Grid

Correct Answer: 1

Explanation:

Azure Managed Redis provides an in-memory data store designed for low-latency access. Applications can use it for caching frequently requested information, session data, counters, and other scenarios where fast retrieval is important. Keeping frequently accessed information in memory can reduce pressure on primary databases and improve application responsiveness. Azure Batch is designed for parallel compute jobs, Azure DNS handles name resolution, and Event Grid routes events. Managed Redis can be especially useful in AI application architectures when repeated retrieval of temporary or frequently requested data would otherwise increase backend processing requirements.

Question 40

Which Azure service can coordinate multi-step serverless workflows?

1. Azure Logic Apps
2. Azure Blob Storage
3. Azure Table Storage
4. Azure DNS

Correct Answer: 1

Explanation:

Azure Logic Apps provides workflow orchestration for connecting applications, services, and data sources through triggers and actions. A workflow can coordinate multiple steps and integrate with numerous Azure and external services using available connectors. This can be useful when an AI solution needs to coordinate activities such as receiving an event, calling a service, storing a result, and notifying another component. Blob Storage stores objects, Table Storage provides NoSQL entities, and Azure DNS handles name resolution. Logic Apps is therefore appropriate when the primary requirement is coordinating a multi-step integration or business workflow.