A company has a multi-region deployment of a web application. They use Azure App Configuration to store settings. They want to ensure that if the primary App Configuration store in the East US region fails, the application in West US can still read settings with minimal disruption. What should they configure?

Store all settings in both App Configuration stores and manually keep them in sync.

Create a replica of the App Configuration store in West US and configure the application to use the replica as a failover.

Use Azure Traffic Manager to route traffic to a different App Configuration store.

Use Azure Front Door to load balance between two App Configuration stores.

A company has an Azure Function app that needs to access a storage account connection string. The connection string is stored in Azure Key Vault. The function app uses a system-assigned managed identity. What is the most secure way to grant the function app access to the secret?

Add the managed identity to the Key Vault access policy with Get permission for secrets.

Use the Key Vault REST API with a client secret stored in the function app's code.

Create a shared access signature (SAS) token and store it in the function app's application settings.

Grant the function app's service principal Contributor access to the Key Vault.

What is the primary purpose of Azure Key Vault?

To store and manage application configuration settings such as connection strings and feature flags

To provide a centralized, cloud-based service for securely storing and controlling access to secrets, encryption keys, and certificates

To provide a managed identity for Azure resources to authenticate to other services

To monitor and log all network traffic entering and leaving an Azure virtual network

What is the primary role of Azure App Configuration?

To monitor application performance and generate alerts

To provide a centralized service for managing application settings and feature flags

To securely store secrets such as passwords and API keys

To build and deploy application code to Azure

Microsoft Certified:Azure AI Cloud Developer Associate

Domain 4Objective 1

Implement Secure Azure Solutions AI-200 Practice Questions (Page 2)

Part of the Secure, monitor, troubleshoot Azure solutions domain, which accounts for 20–25% of the AI-200 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–20 in this domain), expect 5–10 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

7concepts

20–25%of the exam

Questions 6–10

6expert · hard
A company has a multi-region deployment of a web application. They use Azure App Configuration to store settings. They want to ensure that if the primary App Configuration store in the East US region fails, the application in West US can still read settings with minimal disruption. What should they configure?
Select an answer first
7application · medium
A company has an Azure Function app that needs to access a storage account connection string. The connection string is stored in Azure Key Vault. The function app uses a system-assigned managed identity. What is the most secure way to grant the function app access to the secret?
Select an answer first
8foundation · easy
What is the primary purpose of Azure Key Vault?
Select an answer first
9foundation · easy
What is the primary role of Azure App Configuration?
Select an answer first
10foundation · easy
Which Azure portal service allows you to create and manage key-value pairs for application configuration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AI-200

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AI-200” is a trademark of its owner, used for identification only.

Implement Secure Azure Solutions AI-200 Practice Questions (Page 2)

Questions 6–10

A company has an Azure Function app that needs to access a storage account connection string. The connection string is stored in Azure Key Vault. The function app uses a system-assigned managed identity. What is the most secure way to grant the function app access to the secret?

What is the primary purpose of Azure Key Vault?

What is the primary role of Azure App Configuration?

Which Azure portal service allows you to create and manage key-value pairs for application configuration?

Keep studying — Secure, monitor, troubleshoot Azure solutions