View Full Microsoft AI-200 Exam Dumps and Practice Test Dumps

 

Question 61

Which Azure service provides managed Kubernetes node orchestration?

1. Azure Functions
2. Azure Service Bus
3. Azure Storage
4. Azure Kubernetes Service

Correct Answer: 4

Explanation:

Azure Kubernetes Service, or AKS, provides a managed Kubernetes environment for deploying containerized workloads. Azure manages important Kubernetes control-plane components while customers manage supported application and node configurations according to their chosen architecture. AKS supports scaling, networking, identity integration, monitoring, and container orchestration capabilities. Azure Functions is a serverless execution platform, Service Bus provides messaging, and Storage provides data services. AKS is appropriate when an AI application requires Kubernetes capabilities such as deployments, services, pods, and container orchestration rather than a simpler managed container hosting model.

Question 62

Which Azure container option runs a container without managing virtual machines?

1. Azure Container Instances
2. Azure Virtual Desktop
3. Azure Batch
4. Azure Dedicated Host

Correct Answer: 1

Explanation:

Azure Container Instances, or ACI, provides a way to run containers without managing the underlying virtual machines directly. It is useful for short-lived workloads, simple containerized applications, and scenarios where full orchestration is unnecessary. ACI can start containers quickly and provides basic networking and resource configuration options. Azure Virtual Desktop provides managed desktop experiences, Azure Batch handles large-scale compute jobs, and Dedicated Host provides isolated physical server capacity. For straightforward container execution without Kubernetes orchestration requirements, Azure Container Instances can provide a lightweight deployment option.

Question 63

Which container setting limits the CPU available to a workload?

1. Image digest
2. CPU limit
3. Registry tag
4. Container label

Correct Answer: 2

Explanation:

A CPU limit defines the maximum CPU resources that a container workload can consume according to the platform’s resource-management model. Setting resource limits helps prevent one workload from consuming excessive compute capacity and affecting other workloads sharing the environment. Containerized AI applications may require carefully selected CPU and memory allocations depending on their processing requirements. Image digests identify immutable image versions, registry tags provide human-readable image references, and labels store metadata. Resource limits are therefore an important part of predictable container deployment and capacity management.

Question 64

Which container concept identifies a specific immutable image version?

1. Service name
2. Namespace
3. Image digest
4. Environment variable

Correct Answer: 3

Explanation:

A container image digest is a content-based identifier that uniquely references a specific image version. Unlike a mutable tag, a digest can provide a precise reference to the image content being deployed. This is useful in production automation because deployments can consistently use the same image artifact and reduce ambiguity caused by tags being moved to different versions. Service names identify application endpoints, namespaces provide logical grouping in supported orchestration environments, and environment variables provide runtime configuration. Using image digests can improve deployment reproducibility and artifact traceability.

Question 65

Which Azure container practice reduces unnecessary image size?

1. Multi-stage build
2. Larger base image
3. Duplicate dependencies
4. Unused packages

Correct Answer: 1

Explanation:

A multi-stage Docker build allows developers to separate the build environment from the final runtime image. Compilation tools and temporary dependencies can remain in an earlier stage while only required application artifacts are copied into the final image. This can produce smaller images, reduce attack surface, and improve image transfer and startup efficiency. Larger base images, duplicate dependencies, and unused packages generally increase image size unnecessarily. For AI cloud applications, smaller production images can also simplify deployment and reduce the amount of data that container platforms need to pull before starting workloads.

Question 66

Which Azure Container Registry feature automatically builds images from source changes?

1. Registry lock
2. ACR Tasks
3. Storage tiers
4. Private DNS

Correct Answer: 2

Explanation:

Azure Container Registry Tasks, commonly called ACR Tasks, can automate container image building and related workflows. Tasks can build images from source code or update images when base images change, depending on the configured workflow. This helps teams automate container image creation without maintaining a separate build server for every container build process. Registry locks control repository behavior, storage tiers apply to supported storage resources, and Private DNS handles private name resolution. ACR Tasks can therefore be useful in CI/CD pipelines where container images need to be built consistently from application source.

Question 67

Which Azure storage redundancy option replicates data across availability zones?

1. LRS
2. GRS
3. ZRS
4. RA-GRS

Correct Answer: 3

Explanation:

Zone-redundant storage, or ZRS, synchronously replicates supported storage data across multiple availability zones within an Azure region. This helps protect against failures affecting an individual availability zone. Local-redundant storage, or LRS, maintains copies within a single physical location, while geo-redundant options such as GRS provide replication to a secondary region. The appropriate redundancy configuration depends on availability, durability, and disaster-recovery requirements. For AI applications with regional workloads that need protection from zone-level infrastructure failures, ZRS can provide stronger regional resilience than single-location redundancy.

Question 68

Which Azure storage feature prevents accidental blob deletion for a retention period?

1. Blob lifecycle rules
2. Immutable blob storage
3. Storage account tags
4. Access tiers

Correct Answer: 2

Explanation:

Immutable blob storage can enforce retention policies that prevent protected blob data from being modified or deleted during a defined retention period. This capability is useful for workloads with regulatory, compliance, or preservation requirements. Once an appropriate immutability policy is applied, protected data cannot simply be removed before the retention conditions allow it. Lifecycle rules manage automated data movement or deletion, tags provide metadata, and access tiers influence storage and access costs. AI solutions that process regulated records or require tamper-resistant retention can use immutable storage when supported by their data-management requirements.

Question 69

Which Azure service provides a managed private DNS zone?

1. Azure Private DNS
2. Azure Event Hubs
3. Azure Batch
4. Azure Advisor

Correct Answer: 1

Explanation:

Azure Private DNS provides DNS functionality for private resources within Azure virtual networks. It allows applications to resolve private domain names without requiring publicly accessible DNS records. Private DNS zones can be linked to virtual networks so connected resources can resolve appropriate private names. Event Hubs handles event ingestion, Batch provides compute processing, and Advisor provides recommendations. Private DNS is particularly useful when an AI application communicates with Azure services through private endpoints and requires reliable internal name resolution.

Question 70

Which Azure service can securely expose a virtual machine through browser-based SSH or RDP?

1. Azure Front Door
2. Azure Bastion
3. Azure Application Gateway
4. Azure Traffic Manager

Correct Answer: 2

Explanation:

Azure Bastion provides managed, browser-based access to virtual machines through supported SSH and RDP connections. It allows administrators to connect to virtual machines without requiring public IP addresses on those machines. Bastion is deployed within a virtual network and can help reduce exposure of administrative access endpoints. Front Door provides global application delivery, Application Gateway handles Layer 7 traffic routing, and Traffic Manager provides DNS-based traffic distribution. For administrative access to virtual machines while reducing direct public exposure, Azure Bastion is a suitable Azure service.

Question 71

Which Azure feature records changes made to resource configuration?

1. Azure Policy
2. Azure Activity Log
3. Azure DNS
4. Azure Load Balancer

Correct Answer: 2

Explanation:

The Azure Activity Log records subscription-level events such as resource management operations, configuration changes, and other administrative activities. It can help administrators determine who performed an operation, what action occurred, and when the event took place. Activity Log information is useful for auditing and operational troubleshooting. Azure Policy evaluates resource compliance against organizational rules, DNS manages name resolution, and Load Balancer distributes network traffic. When investigating changes to Azure resources, the Activity Log provides an important source of administrative event information.

Question 72

Which Azure governance service evaluates resources against organizational rules?

1. Azure Monitor
2. Azure Policy
3. Azure Storage
4. Azure Functions

Correct Answer: 2

Explanation:

Azure Policy helps organizations define and enforce rules for Azure resources. Policies can evaluate whether resources meet requirements related to configuration, location, security, allowed resource types, or other governance conditions. Depending on the policy effect, Azure Policy can audit resources, deny noncompliant deployments, or support remediation workflows. Azure Monitor focuses on observability, Storage provides data services, and Functions provides serverless execution. For AI cloud environments that need consistent governance across multiple resources and subscriptions, Azure Policy can provide centralized compliance controls.

Question 73

Which Azure feature groups related resources for management and access control?

1. Resource group
2. Availability set
3. Service endpoint
4. DNS label

Correct Answer: 1

Explanation:

An Azure resource group is a logical container for related Azure resources. Resources placed in the same group can be managed together and can participate in common lifecycle and access-management practices. Resource groups help organize deployments and make it easier to manage applications composed of multiple Azure services. Availability sets provide virtual machine resiliency arrangements, service endpoints provide network access to supported Azure services, and DNS labels provide naming information. A resource group is therefore a fundamental organizational unit when deploying and managing an AI cloud solution.

Question 74

Which Azure deployment method defines infrastructure using declarative templates?

1. Azure Functions
2. Azure Monitor
3. Azure Resource Manager templates
4. Azure Event Hubs

Correct Answer: 3

Explanation:

Azure Resource Manager templates, commonly known as ARM templates, use declarative definitions to describe Azure infrastructure and configuration. Instead of manually creating each resource, a template can define the required resources and their relationships so deployments can be repeated consistently. This approach supports infrastructure as code and can be integrated into automated deployment pipelines. Azure Functions provides application execution, Monitor provides observability, and Event Hubs handles event ingestion. Declarative infrastructure definitions are valuable for AI cloud environments because they improve deployment repeatability across development, testing, and production environments.

Question 75

Which Azure service manages infrastructure deployments using Bicep files?

1. Azure Resource Manager
2. Azure Service Bus
3. Azure Cosmos DB
4. Azure Cache

Correct Answer: 1

Explanation:

Azure Resource Manager provides the deployment and management layer for Azure resources, and Bicep is a declarative infrastructure-as-code language that compiles to ARM template representations. Bicep files can define resources, dependencies, parameters, and configuration in a concise syntax. This enables teams to version infrastructure definitions alongside application code and automate deployments. Service Bus provides messaging, Cosmos DB provides database capabilities, and caching services provide low-latency data access. Bicep and ARM together support repeatable infrastructure deployment for complex Azure AI solutions.

Question 76

Which Bicep feature allows reusable infrastructure definitions?

1. Parameters
2. Modules
3. Comments
4. Outputs

Correct Answer: 2

Explanation:

Bicep modules allow infrastructure definitions to be separated into reusable components. A module can represent a particular infrastructure pattern, such as a storage account, networking component, or monitoring configuration, and can then be reused from multiple deployments. This promotes consistency and reduces duplication in infrastructure-as-code projects. Parameters allow values to be supplied to deployments, outputs expose deployment results, and comments provide documentation. For larger AI cloud environments, modules can help organize complex infrastructure into manageable and reusable building blocks.

Question 77

Which Azure deployment concept ensures resources are created in dependency order?

1. Resource tags
2. Managed identity
3. Resource dependencies
4. Storage encryption

Correct Answer: 3

Explanation:

Resource dependencies define relationships that determine deployment ordering when one resource requires another to exist first. Azure Resource Manager can use dependency information to understand how resources should be provisioned. For example, an application component may depend on a network resource or another supporting service. Correct dependency modeling helps prevent deployment failures caused by resources being created before their prerequisites are available. Tags organize resources, managed identities provide authentication, and storage encryption protects data. Dependency management is therefore an important part of reliable infrastructure-as-code deployment.

Question 78

Which Azure capability helps identify resources by custom metadata?

1. Resource tags
2. Network routes
3. Storage keys
4. Event subscriptions

Correct Answer: 1

Explanation:

Azure resource tags are key-value metadata assigned to resources. Organizations can use tags to categorize resources according to application, environment, owner, department, cost center, or other organizational attributes. Tags can support resource management, reporting, governance, and cost analysis. Network routes determine traffic paths, storage keys provide access credentials for supported storage operations, and event subscriptions connect event publishers with consumers. Consistent tagging can be particularly useful in AI environments where many resources must be tracked across development, testing, and production deployments.

Question 79

Which Azure mechanism can enforce allowed resource locations?

1. Azure Advisor
2. Azure Policy
3. Azure Monitor
4. Azure Bastion

Correct Answer: 2

Explanation:

Azure Policy can enforce organizational requirements such as permitted Azure regions. A policy can evaluate resource deployments and deny or audit resources that do not meet the specified location requirement. This can help organizations maintain compliance, control data residency, and standardize infrastructure placement. Azure Advisor provides recommendations, Azure Monitor collects telemetry, and Bastion provides secure administrative connectivity to virtual machines. For AI workloads subject to regional deployment requirements, Azure Policy can provide automated governance rather than relying entirely on manual review.

Question 80

Which Azure service provides centralized cost analysis across cloud resources?

1. Azure Cost Management
2. Azure Event Grid
3. Azure Container Registry
4. Azure Key Vault

Correct Answer: 1

Explanation:

Azure Cost Management provides tools for analyzing, monitoring, and managing Azure spending. Organizations can examine costs, create budgets, investigate usage trends, and identify spending patterns across supported scopes. This is useful for AI workloads because compute, storage, networking, and managed services can produce significant and variable costs. Event Grid handles event routing, Container Registry stores container artifacts, and Key Vault manages secrets and cryptographic resources. Cost analysis can help teams understand resource consumption and establish controls that support predictable cloud spending.