Online Access Free AI-200 Exam Questions

Hotspot Question
You are creating an app that uses Event Grid to connect with other services. Your app's event data will be sent to a serverless function that checks compliance. This function is maintained by your company.
You write a new event subscription at the scope of your resource. The event must be invalidated after a specific period of time.
You need to configure Event Grid.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: Key authentication
For secure, authenticated delivery to your company's serverless function, configure the Event Grid subscription using Key authentication. Select WebHook as the endpoint type and set the destination to your serverless function's HTTPS URL.
Box 2: ValidationCode handshake
For topic publishing in this scenario, you should configure Event Grid to use the ValidationCode handshake. This mechanism ensures that the company's compliance Azure Function securely verifies ownership of the endpoint by echoing a specific validation code back to Event Grid when the new subscription is registered at the scope of the resource.
Reference:
https://learn.microsoft.com/en-us/azure/event-grid/security-authorization

You are troubleshooting a production Azure OpenAI service that is experiencing intermittent connectivity issues. All telemetry is sent to a Log Analytics workspace.
You must write a KQL query that analyzes the AppRequests table. The query must filter for requests that occurred within the last 30 minutes and have a failed status.
The final output must display the total number of failures for each unique operation.
You need to select the KQL operators required to filter the time range and aggregate the failure counts.
Which two operators should you use? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.distinct
• B.summarize
• C.project
• D.where

You are evaluating a fine-tuned Azure OpenAI model against the base model before promoting it to production. Which Azure AI Foundry capability should you use?

• A.Azure AI Search indexer scheduling
• B.Content Safety category configuration
• C.Azure Monitor Application Insights only
• D.Prompt flow bulk testing / evaluation with metrics (groundedness, coherence, relevance)

You are developing an application that must extract structured field data (invoice number, total, vendor name) from scanned invoices in multiple layouts. You need a solution that requires no custom model training. What should you use?

• A.Azure AI Language custom named entity recognition
• B.Azure AI Document Intelligence custom neural model
• C.Azure AI Vision Read API
• D.Azure AI Document Intelligence prebuilt invoice model

Drag and Drop Question
You are deploying an Azure Function app that retrieves secrets from Key Vault by using a managed identity.
The deployment must ensure that identity and secret configuration are in place before the function code is deployed.
You need to deploy the function app securely.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation:
Step 1: Create the function app
You must first provision the underlying Azure Functions infrastructure before you can bind an identity or configuration settings to it.
Step 2: Assign a managed identity to the function app
Turning on the managed identity (such as a system-assigned identity) creates a distinct security principal in Microsoft Entra ID for the resource.
Step 3: Grant access to Key Vault
Use the managed identity's principal ID to create an access policy or RBAC role assignment in Key Vault, allowing the app to read secrets.
Step 4: Add Key Vault references to application settings.
Configure the Function App's application settings to point to the Key Vault secret URIs (@Microsoft.KeyVault(...)), which can now be securely resolved by the identity.
Step 5: Deploy the function code
Finally, deploy the application code. This ensures that when the code initializes and executes, all environment variables and secrets are already active and accessible, preventing application startup failures.
Reference:
https://learn.microsoft.com/en-us/azure/app-service/app-service-key-vault-references