Microsoft AI-200 Exam
Developing AI Cloud Solutions on Azure
https://www.passquestion.com/ai-200.html
35% OFF on All, Including AI-200 Questions and Answers
Pass AI-200 Exam with PassQuestion AI-200 questions and
answers in the first attempt.
https://www.passquestion.com/
1/9
, 1.An AI application needs to access a SQL database. To improve security, you want to eliminate the use
of passwords entirely in the application's connection string.
What should you implement?
A. Shared Access Signatures
B. IP Whitelisting
C. Azure Key Vault Secrets
D. Microsoft Entra ID (Azure AD) Authentication with Managed Identity
Answer: D
Explanation:
Using Managed Identity with Entra ID authentication allows the application to connect to Azure SQL
without any credentials in the code or configuration files.
2.An AI workload on AKS is failing to pull an image from Azure Container Registry (ACR). You verify the
Managed Identity has 'AcrPull' permissions.
What is the most likely networking issue?
A. The ACR has its firewall enabled and doesn't allow the AKS VNet
B. The AKS cluster is in the wrong region
C. The Dockerfile is missing an ENTRYPOINT
D. The pod needs more CPU
Answer: A
Explanation:
If the ACR firewall is enabled, you must either allow the AKS VNet/Subnet or use a Private Endpoint to
allow the cluster to reach the registry securely.
3.An AI application on AKS needs to store a client secret for a 3rd party API. You want to use 'Azure Key
Vault' but you want the secret to appear as a 'File' inside the pod's filesystem.
Which component do you need?
A. Helm Chart
B. Istio Service Mesh
C. Azure Disk Driver
D. Secrets Store CSI Driver
Answer: D
Explanation:
The Secrets Store CSI Driver allows you to mount secrets from Key Vault into a Kubernetes pod as a local
volume (file), providing a secure and familiar developer experience.
4.An AI agent on AKS is running out of memory during peak processing. You want to automatically move
the pod to a node with more RAM.
Which Kubernetes feature handles this?
A. ReplicaSet
B. Service Account
C. Horizontal Pod Autoscaler (HPA)
D. Vertical Pod Autoscaler (VPA)
Answer: D
2/9
Developing AI Cloud Solutions on Azure
https://www.passquestion.com/ai-200.html
35% OFF on All, Including AI-200 Questions and Answers
Pass AI-200 Exam with PassQuestion AI-200 questions and
answers in the first attempt.
https://www.passquestion.com/
1/9
, 1.An AI application needs to access a SQL database. To improve security, you want to eliminate the use
of passwords entirely in the application's connection string.
What should you implement?
A. Shared Access Signatures
B. IP Whitelisting
C. Azure Key Vault Secrets
D. Microsoft Entra ID (Azure AD) Authentication with Managed Identity
Answer: D
Explanation:
Using Managed Identity with Entra ID authentication allows the application to connect to Azure SQL
without any credentials in the code or configuration files.
2.An AI workload on AKS is failing to pull an image from Azure Container Registry (ACR). You verify the
Managed Identity has 'AcrPull' permissions.
What is the most likely networking issue?
A. The ACR has its firewall enabled and doesn't allow the AKS VNet
B. The AKS cluster is in the wrong region
C. The Dockerfile is missing an ENTRYPOINT
D. The pod needs more CPU
Answer: A
Explanation:
If the ACR firewall is enabled, you must either allow the AKS VNet/Subnet or use a Private Endpoint to
allow the cluster to reach the registry securely.
3.An AI application on AKS needs to store a client secret for a 3rd party API. You want to use 'Azure Key
Vault' but you want the secret to appear as a 'File' inside the pod's filesystem.
Which component do you need?
A. Helm Chart
B. Istio Service Mesh
C. Azure Disk Driver
D. Secrets Store CSI Driver
Answer: D
Explanation:
The Secrets Store CSI Driver allows you to mount secrets from Key Vault into a Kubernetes pod as a local
volume (file), providing a secure and familiar developer experience.
4.An AI agent on AKS is running out of memory during peak processing. You want to automatically move
the pod to a node with more RAM.
Which Kubernetes feature handles this?
A. ReplicaSet
B. Service Account
C. Horizontal Pod Autoscaler (HPA)
D. Vertical Pod Autoscaler (VPA)
Answer: D
2/9
