AI-200 Practice Test 3: 50 Questions and Answers for Developing AI Cloud Solutions on Azure

Published August 1, 2026

Practice AI-200 questions for Developing AI Cloud Solutions on Azure. This test follows the current skills measured for containerized solutions, Azure data services for AI, messaging and event-driven integration, Azure Functions, security, monitoring, and troubleshooting. Select your answers, review the explanations, and track your progress in the Learning Dashboard.

Exam: AI-200Questions: 50Recommended score: 70%+Time: 60 minutes

Before you start

This independent practice test includes 30 single-choice, 10 multiple-response, and 10 true/false questions. It is designed for Azure AI Cloud Developer Associate candidates who want scenario-based preparation with clear explanations and Microsoft Learn references. When a question requires more than one answer, the question text tells you exactly how many answers to choose.

Question 1: During a design review of "Service Bus topic with filtered subscriptions", which practices should be approved? Choose 2 answers.

Use one queue when every consumer needs its own copy
Assume topic filters enforce application authorization
Publish once to the topic
Create subscriptions for independent consumer groups
Share one receiver checkpoint across subscriptions

The correct answers are Publish once to the topic, and Create subscriptions for independent consumer groups.

Service Bus topics fan messages out to subscriptions, and each subscription behaves like a virtual queue that can use SQL or correlation filters. The selected practices support a secure and operable implementation; the remaining choices introduce incorrect assumptions or avoidable risk.

The correct answer is Grant only the required Key Vault data-plane role.

Managed identity provides an Entra identity without an application secret, and Key Vault data-plane RBAC grants narrowly scoped secret access. Specifically, grant only the required Key Vault data-plane role. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Use project to select or derive columns.

KQL uses tabular operators: where filters rows, project shapes columns, and summarize performs aggregations such as counts grouped by dimensions or time bins. Specifically, use project to select or derive columns. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is False.

Connection pooling reduces connection setup overhead and protects PostgreSQL from excessive concurrent sessions when configured with sensible bounds and timeouts. The statement is incorrect; the recommended practice is to set pool limits below database connection capacity.

The correct answer is Tune concurrency to downstream capacity.

A Service Bus trigger activates a function when messages arrive and integrates broker settlement and retry behavior with the Functions runtime. Specifically, tune concurrency to downstream capacity. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Retain error and high-latency traces when supported.

OpenTelemetry sampling controls trace volume and cost; consistent decisions and deliberate retention of diagnostically valuable traces improve usefulness. Specifically, retain error and high-latency traces when supported. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is False.

A point read addressed by item id and partition key is the most efficient Cosmos DB lookup, and reusing the SDK client supports connection management. The statement is incorrect; the recommended practice is to reuse a singleton SDK client in the application.

The correct answers are Send commands to a queue for asynchronous processing, Use competing consumers to distribute work, and Make handlers idempotent and settle messages explicitly.

A Service Bus queue provides durable brokered messaging and load leveling, with competing consumers receiving messages under at-least-once delivery semantics. The selected practices support a secure and operable implementation; the remaining choices introduce incorrect assumptions or avoidable risk.

The correct answer is Follow correlated operation or trace identifiers.

Correlated request and dependency telemetry helps identify which downstream call contributes latency or failures across a distributed application. Specifically, follow correlated operation or trace identifiers. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Make task processing safe for retries.

Container Apps jobs are designed for finite executions and support manual, scheduled, and event-driven trigger types with execution history and logging. Specifically, make task processing safe for retries. The other choices describe unsafe or incorrect implementation patterns.

The correct answers are Filter on supported event fields and operators, Keep event contracts stable for subscribers, and Test included and excluded event samples.

Event Grid supports subject and advanced filtering so subscriptions receive only matching events, reducing unnecessary invocations and consumer-side filtering. The selected practices support a secure and operable implementation; the remaining choices introduce incorrect assumptions or avoidable risk.

The correct answer is Avoid long-lived registry credentials in deployment files.

A managed identity combined with the AcrPull role provides passwordless, least-privilege access for pulling images from a private registry. Specifically, avoid long-lived registry credentials in deployment files. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is True.

RAG retrieval should combine semantic similarity with metadata and authorization filters so only relevant, permitted records become model context. The statement is correct; the recommended practice is to apply authorized tenant or document predicates with retrieval.

The correct answer is Use tags or digests to identify image versions.

Azure Container Registry provides private repositories for container images and supports image tags, immutable digests, RBAC, and integrations with Azure compute services. Specifically, use tags or digests to identify image versions. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Remove an unready pod from Service endpoints.

A readiness probe controls whether a pod is eligible for Service traffic. Unlike a liveness probe, a readiness failure does not by itself restart the container. Specifically, remove an unready pod from Service endpoints. The other choices describe unsafe or incorrect implementation patterns.

The correct answers are Record a meaningful dead-letter reason and description, Monitor dead-letter counts and age, and Provide a controlled replay process after fixing the cause.

Each Service Bus entity has a dead-letter subqueue for messages that expire, exceed delivery attempts, or are explicitly dead-lettered; operations must monitor and remediate it. The selected practices support a secure and operable implementation; the remaining choices introduce incorrect assumptions or avoidable risk.

The correct answer is Include the partition key in common point reads and queries.

A suitable Cosmos DB partition key distributes data and RU consumption and supports efficient routing for the workload’s common access patterns. Specifically, include the partition key in common point reads and queries. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Register the sentinel to trigger refresh.

A sentinel key can signal that a coordinated set of App Configuration values is ready, reducing partial refreshes while controlling polling frequency. Specifically, register the sentinel to trigger refresh. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is True.

Cache-aside loads data into Redis on demand while retaining the authoritative source and requires a deliberate freshness, invalidation, and failure strategy. The statement is correct; the recommended practice is to invalidate or refresh affected keys after source updates.

The correct answer is Scan images and rebuild when base images are patched.

A digest identifies exact image content, while scanning, controlled rebuilds, and least-privilege registry access reduce container supply-chain risk. Specifically, scan images and rebuild when base images are patched. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Exclude large properties that are never queried when appropriate.

Cosmos DB indexing policies affect query capability, latency, and RU cost; indexing only required paths can reduce write and storage overhead. Specifically, exclude large properties that are never queried when appropriate. The other choices describe unsafe or incorrect implementation patterns.

The correct answers are Configure a storage dead-letter destination where supported, and Monitor delivery failures and dead-lettered events.

Event Grid retries transient delivery failures with backoff and can dead-letter events after policy limits when a destination is configured. The selected practices support a secure and operable implementation; the remaining choices introduce incorrect assumptions or avoidable risk.

The correct answer is Store vectors with the configured dimensionality and data type.

Cosmos DB for NoSQL vector search requires a vector policy and compatible vector index whose path, dimensions, data type, and distance function match stored embeddings. Specifically, store vectors with the configured dimensionality and data type. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Use exponential backoff with jitter and a maximum attempt or time budget.

Production clients should retry only transient failures with bounded exponential backoff and jitter, while protecting side effects through idempotency and surfacing exhaustion. Specifically, use exponential backoff with jitter and a maximum attempt or time budget. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is True.

Vector workload sizing depends on index type, dimensions, row count, concurrency, recall targets, cache behavior, and storage or I/O characteristics. The statement is correct; the recommended practice is to monitor CPU, memory, IOPS, connections, and storage growth.

The correct answer is False.

HNSW is an approximate nearest-neighbor index supported by pgvector and commonly trades memory and build cost for strong query performance and recall. The statement is incorrect; the recommended practice is to tune search parameters against recall and latency targets.

The correct answer is Use task steps for multi-step build workflows.

ACR Tasks runs cloud-based container build and maintenance workflows and can trigger builds from source changes, base-image updates, schedules, or manual execution. Specifically, use task steps for multi-step build workflows. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Plan for client or platform caching behavior.

A versionless secret identifier resolves to the current version, but applications must account for caching, refresh timing, and safe credential overlap. Specifically, plan for client or platform caching behavior. The other choices describe unsafe or incorrect implementation patterns.

The correct answers are Process while the broker lock is held, and Complete only after successful durable side effects.

Peek-Lock separates receiving from settlement, allowing failed or abandoned messages to become available again and requiring idempotent processing. The selected practices support a secure and operable implementation; the remaining choices introduce incorrect assumptions or avoidable risk.

The correct answer is Configure authentication for the scaler without exposing secrets.

Azure Container Apps integrates KEDA scalers to adjust replicas based on event-source metrics while allowing minimum and maximum replica limits. Specifically, configure authentication for the scaler without exposing secrets. The other choices describe unsafe or incorrect implementation patterns.

The correct answers are Populate stable event type, source, id, and time metadata, Version the event data contract deliberately, and Validate content type and schema at the consumer.

CloudEvents defines interoperable envelope attributes such as id, source, type, specversion, time, and data while applications still own payload contracts. The selected practices support a secure and operable implementation; the remaining choices introduce incorrect assumptions or avoidable risk.

The correct answer is Assign a percentage of ingress traffic to selected active revisions.

Container Apps revisions provide immutable deployment snapshots and, in multiple-revision mode, support weighted traffic splitting for canary releases and rollback. Specifically, assign a percentage of ingress traffic to selected active revisions. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is False.

Azure Managed Redis can index vector fields for similarity search; schema, algorithm, dimensions, metric, memory, and filtering choices affect correctness and performance. The statement is incorrect; the recommended practice is to choose an index algorithm appropriate for scale and latency.

The correct answer is Use a Service to provide stable access to selected pods.

In AKS, a Deployment manages replicated pods and rollouts, while a Service provides stable discovery and networking for matching pods. Specifically, use a Service to provide stable access to selected pods. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Keep the application process listening on the configured port.

For a custom Linux container, App Service routes incoming traffic to the container port identified by the relevant port app setting and exposes configuration through environment variables. Specifically, keep the application process listening on the configured port. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is True.

The change feed processor balances feed ranges across workers and stores progress in a lease container; handlers should tolerate retries and duplicate delivery. The statement is correct; the recommended practice is to make handlers idempotent because processing can repeat.

The correct answer is Select consistency based on correctness and latency requirements.

Cosmos DB session consistency provides monotonic reads and read-your-writes within a session, with session-token propagation important across client instances. Specifically, select consistency based on correctness and latency requirements. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Refresh configuration at a controlled interval.

App Configuration feature flags externalize operational switches and can support targeted or gradual behavior changes without a new build. Specifically, refresh configuration at a controlled interval. The other choices describe unsafe or incorrect implementation patterns.

The correct answers are Use the trigger to start execution from an HTTP request, and Use bindings for declarative service integration where appropriate.

Azure Functions triggers start executions, while input and output bindings provide declarative access to supported services without replacing validation or reliability design. The selected practices support a secure and operable implementation; the remaining choices introduce incorrect assumptions or avoidable risk.

The correct answer is Mark settings as deployment-slot settings when they must not swap.

Function deployment slots support staged validation and swapping, while slot-specific app settings keep selected configuration attached to an environment. Specifically, mark settings as deployment-slot settings when they must not swap. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Store ordinary settings and feature flags in App Configuration.

Key Vault is designed for secrets, keys, and certificates, while App Configuration centralizes nonsecret settings and can reference Key Vault values. Specifically, store ordinary settings and feature flags in App Configuration. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is True.

The pgvector extension adds a vector type, distance operators, and vector indexes for similarity search in Azure Database for PostgreSQL. The statement is correct; the recommended practice is to use a vector column with the intended dimensions.

The correct answer is Assign only required roles at the narrowest practical scope.

Separate managed identities and narrowly scoped RBAC permissions reduce credential management and limit the impact of a compromised component. Specifically, assign only required roles at the narrowest practical scope. The other choices describe unsafe or incorrect implementation patterns.

The correct answers are Set the same SessionId on related messages, Use a session-aware receiver, and Keep session state small and design for lock renewal.

Service Bus sessions group related messages and provide an exclusive session lock, enabling ordered processing within a session rather than across the entire entity. The selected practices support a secure and operable implementation; the remaining choices introduce incorrect assumptions or avoidable risk.

The correct answer is Grant that identity access to the required secret.

App Service can resolve a Key Vault reference by using its managed identity, keeping secret values out of source code and normal configuration files. Specifically, grant that identity access to the required secret. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is False.

Redis key expiration limits staleness and memory growth, but TTL selection must reflect source volatility, sensitivity, and acceptable freshness. The statement is incorrect; the recommended practice is to use namespaced keys that identify version and tenant.

The correct answer is Validate name resolution and routing from the workload.

Private endpoints expose a service through a private IP, while correct DNS-zone links and access controls are required for clients to use that path reliably. Specifically, validate name resolution and routing from the workload. The other choices describe unsafe or incorrect implementation patterns.

The correct answers are Assign stable message identifiers for retried sends, and Configure an appropriate duplicate-detection window.

Duplicate detection can discard repeated sends with the same MessageId inside its configured window, while consumer idempotency protects downstream side effects. The selected practices support a secure and operable implementation; the remaining choices introduce incorrect assumptions or avoidable risk.

The correct answer is Read current and previous container logs.

Pod descriptions, Kubernetes events, current or previous logs, endpoints, and connectivity tests provide evidence for systematic AKS troubleshooting. Specifically, read current and previous container logs. The other choices describe unsafe or incorrect implementation patterns.

The correct answer is Create spans for important operations and dependencies.

Distributed tracing depends on propagating trace context so spans from multiple components form one end-to-end trace. Specifically, create spans for important operations and dependencies. The other choices describe unsafe or incorrect implementation patterns.

AI-200 Practice Test 3 – 50 Questions and Answers (Azure AI Cloud Developer)

AI-200 practice test questions

The correct answers are Publish once to the topic, and Create subscriptions for independent consumer groups.

Related Microsoft Learn topic

The correct answer is Grant only the required Key Vault data-plane role.

Related Microsoft Learn topic

The correct answer is Use project to select or derive columns.

Related Microsoft Learn topic

The correct answer is False.

Related Microsoft Learn topic

The correct answer is Tune concurrency to downstream capacity.

Related Microsoft Learn topic

The correct answer is Retain error and high-latency traces when supported.

Related Microsoft Learn topic

The correct answer is False.

Related Microsoft Learn topic

The correct answers are Send commands to a queue for asynchronous processing, Use competing consumers to distribute work, and Make handlers idempotent and settle messages explicitly.

Related Microsoft Learn topic

The correct answer is Follow correlated operation or trace identifiers.

Related Microsoft Learn topic

The correct answer is Make task processing safe for retries.

Related Microsoft Learn topic

The correct answers are Filter on supported event fields and operators, Keep event contracts stable for subscribers, and Test included and excluded event samples.

Related Microsoft Learn topic

The correct answer is Avoid long-lived registry credentials in deployment files.

Related Microsoft Learn topic

The correct answer is True.

Related Microsoft Learn topic

The correct answer is Use tags or digests to identify image versions.

Related Microsoft Learn topic

The correct answer is Remove an unready pod from Service endpoints.

Related Microsoft Learn topic

The correct answers are Record a meaningful dead-letter reason and description, Monitor dead-letter counts and age, and Provide a controlled replay process after fixing the cause.

Related Microsoft Learn topic

The correct answer is Include the partition key in common point reads and queries.

Related Microsoft Learn topic

The correct answer is Register the sentinel to trigger refresh.

Related Microsoft Learn topic

The correct answer is True.

Related Microsoft Learn topic

The correct answer is Scan images and rebuild when base images are patched.

Related Microsoft Learn topic

The correct answer is Exclude large properties that are never queried when appropriate.

Related Microsoft Learn topic

The correct answers are Configure a storage dead-letter destination where supported, and Monitor delivery failures and dead-lettered events.

Related Microsoft Learn topic

The correct answer is Store vectors with the configured dimensionality and data type.

Related Microsoft Learn topic

The correct answer is Use exponential backoff with jitter and a maximum attempt or time budget.

Related Microsoft Learn topic

The correct answer is True.

Related Microsoft Learn topic

The correct answer is False.

Related Microsoft Learn topic

The correct answer is Use task steps for multi-step build workflows.

Related Microsoft Learn topic

The correct answer is Plan for client or platform caching behavior.

Related Microsoft Learn topic

The correct answers are Process while the broker lock is held, and Complete only after successful durable side effects.

Related Microsoft Learn topic

The correct answer is Configure authentication for the scaler without exposing secrets.

Related Microsoft Learn topic

The correct answers are Populate stable event type, source, id, and time metadata, Version the event data contract deliberately, and Validate content type and schema at the consumer.

Related Microsoft Learn topic

The correct answer is Assign a percentage of ingress traffic to selected active revisions.

Related Microsoft Learn topic

The correct answer is False.

Related Microsoft Learn topic

The correct answer is Use a Service to provide stable access to selected pods.

Related Microsoft Learn topic

The correct answer is Keep the application process listening on the configured port.

Related Microsoft Learn topic

The correct answer is True.

Related Microsoft Learn topic

The correct answer is Select consistency based on correctness and latency requirements.

Related Microsoft Learn topic

The correct answer is Refresh configuration at a controlled interval.

Related Microsoft Learn topic

The correct answers are Use the trigger to start execution from an HTTP request, and Use bindings for declarative service integration where appropriate.

Related Microsoft Learn topic