View Full Microsoft AI-200 Exam Dumps and Practice Test Dumps

 

Question 101

Which Azure service provides centralized security posture management?

1. Azure Advisor
2. Microsoft Defender for Cloud
3. Azure DNS
4. Azure Batch

Correct Answer: 2

Explanation:

Microsoft Defender for Cloud provides security posture management capabilities that help organizations identify security risks across cloud resources. It can assess configurations, generate recommendations, and provide security insights for supported workloads. This makes it useful for maintaining security visibility across applications, infrastructure, and services. Azure Advisor provides broader optimization recommendations, Azure DNS handles name resolution, and Azure Batch manages large-scale compute jobs. For AI cloud solutions containing multiple interconnected resources, Defender for Cloud can help teams identify security weaknesses and improve their overall cloud security posture.

Question 102

Which Azure service provides private connectivity from a virtual network to PaaS services?

1. Service endpoint
2. Application Gateway
3. Network Watcher
4. Private Endpoint

Correct Answer: 4

Explanation:

An Azure Private Endpoint creates a private network interface with a private IP address for supported Azure services. This allows applications in a virtual network to communicate with the target service through private connectivity rather than relying on a publicly accessible endpoint. Private endpoints are useful when an AI application needs stronger network isolation for databases, storage, or other supported services. Service endpoints provide a different network access mechanism, Application Gateway handles application traffic, and Network Watcher provides network monitoring and diagnostic capabilities. Private Endpoint is therefore the appropriate choice when private IP-based access is required.

Question 103

Which Azure diagnostic tool captures network packet information for analysis?

1. Network Watcher packet capture
2. Azure Policy
3. Azure App Configuration
4. Azure Cost Management

Correct Answer: 1

Explanation:

Azure Network Watcher provides network diagnostic capabilities, including packet capture for supported virtual machines. Packet capture allows administrators to inspect network traffic when investigating connectivity problems, unexpected communication, or application behavior. Captured packets can be analyzed using appropriate network-analysis tools after collection. Azure Policy handles governance, App Configuration manages application settings, and Cost Management focuses on cloud spending. Packet capture is particularly useful when an AI application’s components cannot communicate as expected and normal logs do not provide enough information to identify the network-level problem.

Question 104

Which Azure capability automatically detects configuration drift against desired policies?

1. Application Insights
2. Azure Load Balancer
3. Azure Policy
4. Azure Container Registry

Correct Answer: 3

Explanation:

Azure Policy can evaluate deployed resources against defined organizational requirements and identify resources that do not comply with those requirements. This makes it useful for detecting configuration drift from established governance standards. Depending on the policy effect, noncompliant resources can be audited, denied during deployment, or addressed through remediation workflows. Application Insights monitors applications, Load Balancer distributes network traffic, and Container Registry stores container images. For AI environments with many resources, policy-based compliance checks can help maintain consistent configurations over time.

Question 105

Which Azure feature allows secure access to storage using temporary permissions?

1. Access tier
2. Shared Access Signature
3. Blob index tag
4. Storage redundancy

Correct Answer: 2

Explanation:

A Shared Access Signature, or SAS, grants delegated access to supported Azure Storage resources for a specified period and with selected permissions. This can allow an application or user to access a blob without receiving the storage account’s broader credentials. SAS tokens can be restricted by resource, operation, and validity period. Access tiers control storage economics, blob index tags support data discovery, and redundancy determines how data copies are maintained. Properly scoped SAS tokens are useful when AI applications need temporary access to documents, datasets, or generated files.

Question 106

Which Azure service monitors resource metrics for threshold-based alerting?

1. Azure Monitor
2. Azure Files
3. Azure Service Bus
4. Azure Container Registry

Correct Answer: 1

Explanation:

Azure Monitor collects and analyzes telemetry from Azure resources and applications. Metric alerts can evaluate measurements against configured thresholds and trigger notifications or automated actions when conditions are met. For example, an application can be monitored for elevated resource consumption or abnormal service behavior. Azure Files provides managed file shares, Service Bus handles messaging, and Container Registry manages container images. Monitoring and alerting are important for AI cloud applications because resource usage can vary significantly depending on workload volume, inference traffic, data processing, or background jobs.

Question 107

Which Azure service provides a managed message broker using AMQP?

1. Azure Storage
2. Azure Event Grid
3. Azure Service Bus
4. Azure DNS

Correct Answer: 3

Explanation:

Azure Service Bus is a fully managed enterprise message broker that supports protocols and messaging patterns suitable for reliable application communication, including AMQP. It provides queues and topics, along with features such as dead-lettering, duplicate detection, transactions, and message locks. These capabilities help applications communicate asynchronously while reducing direct dependencies between components. Azure Storage provides data services, Event Grid focuses on event routing, and DNS provides name resolution. Service Bus is therefore a suitable choice when an AI application requires durable enterprise messaging with advanced delivery and processing features.

Question 108

Which Azure storage feature adds searchable metadata to blobs?

1. Blob index tags
2. Storage replication
3. Access tiers
4. Soft delete

Correct Answer: 1

Explanation:

Blob index tags provide key-value metadata that can be used to categorize and discover blobs. Applications can use these tags to identify files according to properties such as document type, processing status, business category, or other searchable attributes. This can be useful in AI workflows where large collections of documents or generated artifacts need to be organized and queried efficiently. Storage replication provides redundancy, access tiers control storage economics, and soft delete helps recover deleted data. Blob index tags are therefore particularly useful when metadata-based discovery is required.

Question 109

Which Azure service helps diagnose connectivity between virtual network resources?

1. Azure Policy
2. Azure Cost Management
3. Network Watcher
4. Azure App Configuration

Correct Answer: 3

Explanation:

Azure Network Watcher provides tools for diagnosing and monitoring network connectivity in Azure. Capabilities include connection troubleshooting, IP flow verification, packet capture, and other network diagnostic features. These tools can help determine whether security rules, routing, or connectivity paths are causing communication failures. Azure Policy focuses on governance, Cost Management analyzes spending, and App Configuration manages application settings. Network Watcher is therefore valuable when an AI application’s services are deployed across virtual networks and engineers need to investigate unexpected connectivity problems.

Question 110

Which Azure feature protects deleted blobs from immediate permanent removal?

1. Blob soft delete
2. Event filtering
3. API revision
4. Network peering

Correct Answer: 1

Explanation:

Blob soft delete allows deleted blobs to remain recoverable for a configured retention period. This provides protection against accidental deletion and can help restore data when a user or application removes an object unintentionally. Soft delete is different from lifecycle management, which can automate data movement or deletion according to configured rules. Event filtering controls event delivery, API revisions manage API iterations, and network peering connects virtual networks. For AI applications storing important documents or datasets, soft delete can provide an additional recovery mechanism against accidental data loss.

Question 111

Which Azure feature controls who can perform actions on a resource?

1. Azure RBAC
2. Blob versioning
3. Event routing
4. Autoscale

Correct Answer: 1

Explanation:

Azure role-based access control, or Azure RBAC, determines which authenticated identities can perform specific actions on Azure resources. Roles contain permissions and can be assigned at appropriate scopes such as management groups, subscriptions, resource groups, or individual resources. This supports the principle of least privilege by giving users, applications, and managed identities only the permissions they require. Blob versioning preserves earlier blob versions, event routing directs events, and autoscale adjusts supported resource capacity. RBAC is therefore fundamental to authorization in Azure-based AI solutions.

Question 112

Which Azure service provides centralized management of application certificates?

1. Azure Monitor
2. Azure Key Vault
3. Azure Event Hubs
4. Azure Batch

Correct Answer: 2

Explanation:

Azure Key Vault supports centralized management of certificates as well as secrets and cryptographic keys. Applications and services can retrieve certificates through controlled access mechanisms, while administrators can manage certificate-related lifecycle operations. This helps avoid storing certificate material directly inside application source code or deployment packages. Azure Monitor handles telemetry, Event Hubs provides event streaming, and Batch provides large-scale compute. Key Vault is therefore appropriate when an AI application requires protected certificate storage and controlled access to cryptographic resources.

Question 113

Which Azure service provides DNS-based global traffic routing?

1. Azure Front Door
2. Azure Traffic Manager
3. Azure Bastion
4. Azure Firewall

Correct Answer: 2

Explanation:

Azure Traffic Manager is a DNS-based traffic routing service that directs clients toward appropriate endpoints according to configured routing methods. It can use policies based on factors such as priority, performance, geographic location, or weighted distribution. Because routing occurs through DNS responses, it differs from services that directly proxy application traffic. Front Door provides global HTTP and HTTPS application delivery, Bastion provides virtual machine administration, and Firewall provides network security. Traffic Manager is useful when an application needs DNS-level distribution across multiple endpoints.

Question 114

Which Azure service provides centralized protection against network threats?

1. Azure Application Insights
2. Azure Firewall
3. Azure Table Storage
4. Azure Queue Storage

Correct Answer: 2

Explanation:

Azure Firewall is a managed, stateful network security service that provides centralized traffic filtering for Azure virtual networks. It supports network and application-level traffic controls and can help enforce consistent outbound and inbound security policies. This makes it useful for architectures where multiple application components require centralized network protection. Application Insights focuses on application telemetry, Table Storage provides NoSQL data storage, and Queue Storage supports asynchronous messaging. AI solutions with multiple networked components can use Azure Firewall as part of a layered network-security architecture.

Question 115

Which Azure service provides global HTTP routing with integrated web security?

1. Azure Front Door
2. Azure Table Storage
3. Azure Batch
4. Azure Files

Correct Answer: 1

Explanation:

Azure Front Door provides global HTTP and HTTPS application delivery and can integrate with security capabilities such as Web Application Firewall. It can route client traffic toward backend origins while providing features designed for globally distributed web applications. This makes it useful for AI applications that expose web APIs or user-facing interfaces across multiple regions. Table Storage provides NoSQL storage, Batch provides parallel compute, and Files provides managed file shares. Front Door is therefore appropriate when global application delivery and web traffic management are required.

Question 116

Which Azure capability helps prevent repeated processing of duplicate messages?

1. Event partitioning
2. Message sessions
3. Duplicate detection
4. Blob indexing

Correct Answer: 3

Explanation:

Azure Service Bus supports duplicate detection, which can help prevent a message with the same configured message identity from being processed repeatedly within the applicable detection window. This is useful when applications may encounter retries or network conditions that cause a sender to submit the same logical message more than once. Duplicate detection can improve reliability in asynchronous architectures, although application-level idempotency may still be valuable. Event partitioning distributes event streams, message sessions support ordered related processing, and blob indexing provides searchable storage metadata.

Question 117

Which Azure service provides a managed environment for running container images without Kubernetes?

1. Azure Container Instances
2. Azure DNS
3. Azure Policy
4. Azure Monitor

Correct Answer: 1

Explanation:

Azure Container Instances allows users to run containerized workloads without directly managing virtual machines or a Kubernetes cluster. It is useful for simple container execution, short-lived workloads, development scenarios, and tasks that do not require full orchestration. Azure DNS provides name resolution, Azure Policy manages governance, and Azure Monitor handles telemetry. A containerized AI utility or processing task can use Container Instances when it needs straightforward execution without the operational overhead associated with a full Kubernetes environment.

Question 118

Which Azure feature automatically applies governance to newly created resources?

1. Azure Advisor
2. Azure Policy
3. Azure Cost Management
4. Azure Monitor

Correct Answer: 2

Explanation:

Azure Policy can evaluate resource deployments and apply governance requirements through policy effects. Depending on the policy definition, a deployment can be audited, denied, modified, or targeted for remediation. This allows organizations to enforce standards automatically rather than relying entirely on manual reviews. Advisor provides recommendations, Cost Management analyzes spending, and Monitor provides telemetry. In an AI cloud environment, policies can help ensure newly created resources follow organizational requirements for security, configuration, supported regions, or resource types.

Question 119

Which Azure service can store large binary files with lifecycle policies?

1. Azure Blob Storage
2. Azure Service Bus
3. Azure Event Hubs
4. Azure DNS

Correct Answer: 1

Explanation:

Azure Blob Storage is designed for large-scale storage of unstructured data, including documents, images, videos, datasets, and other binary objects. Blob Storage supports lifecycle management policies that can automatically move data between access tiers or delete it according to configured conditions. Service Bus and Event Hubs are messaging and event-streaming services, while DNS provides name resolution. AI solutions often use Blob Storage for source documents, uploaded files, generated artifacts, and data-processing inputs. Lifecycle policies can help manage these datasets efficiently as their access patterns change.

Question 120

Which Azure capability provides a consistent identity for an application resource?

1. Storage account key
2. Managed identity
3. SAS token
4. Connection string

Correct Answer: 2

Explanation:

A managed identity provides an Azure resource with an identity that applications can use to authenticate to supported Azure services. The identity is managed by Azure, which reduces the need to distribute or store credentials such as connection strings or account keys. Permissions can be assigned to the managed identity through Azure RBAC or other supported authorization mechanisms. SAS tokens provide delegated access to storage, while connection strings and account keys represent credential-based authentication approaches. Managed identities are therefore a strong choice for secure service-to-service authentication in Azure AI solutions.