Plan and manage an Azure AI solution (15-20%)

Question 1

What settings need to be specified when deploying a container image to a host?

Answer 1

1. ApiKey - Key from your deployed Azure AI service; used for billing.
2. Billing - Endpoint URI from your deployed Azure AI service; used for billing.
3. Eula - Value of accept to state you accept the license for the container.

Question 2

What benefits exist for using a container instead of APIs?

Answer 2

1. Data is used in your container and is not shared with Microsoft.
2. If container is deployed on premises then latency will be reduced and performance can be improved.

Question 3

How can you regenerate keys for an azure ai service?

Answer 3

1. You can regenerate keys using the Azure portal,
2. or using the
   as cognitiveservices account keys regenerate
   Azure command-line interface (CLI) command.

Question 4

What steps do you take to regenerate keys for an existing ai service?

Answer 4

1. If you’re using both keys in production, change your code so that only one key is in use. For example, configure all production applications to use key 1.
2. Regenerate key 2.
3. Switch all production applications to use the newly regenerated key 2.
4. Regenerate key 1
5. Finally, update your production code to use the new key 1.

Question 5

How can you Authenticate using service principals?

Answer 5

1. create a custom subdomain in the Azure portal, Azure CLI, or PowerShell.
2. create your Azure AI services resource specifying a custom subdomain
3. register an application.
4. create a service principal and provide your application’s ID
5. assign the Cognitive Services Users role to your service principal

Question 6

How can you authenticate using managed identities?

Answer 6

1. Assign a system-assigned OR user assigned managed identity to the resource.
2. Go to the Azure AI services resource you want to grant the virtual machine’s managed identity access.
3. In the overview panel, select Access control (IAM).
4. Select Add, and then select Add role assignment.
5. In the Role tab, select Cognitive Services Contributor.
6. In the Members tab, for the Assign access to, select Managed identity. Then, select + Select members.
7. Ensure that your subscription is selected in the Subscription dropdown. And for Managed identity, select the proper resource type
8. Select your resource in the list, and select Select.
9. Finally, select Review + assign to review, and then Review + assign again to finish.

Question 7

When running code on your computer that connects to Azure AI Services, you receive an error that access is denied due to Virtual Network/Firewall rules. What configuration do you need to set in the Azure AI Services instance?

Answer 7

In Networking properties, add your client IP address to the Firewall allowed list.

Question 8

How do you define an alert rule?

Answer 8

you must specify
1. The scope of the alert rule - in other words, the resource you want to monitor.
2. A condition on which the alert is triggered. The specific trigger for the alert is based on a signal type, which can be Activity Log (an entry in the activity log created by an action performed on the resource, such as regenerating its subscription keys) or Metric (a metric threshold such as the number of errors exceeding 10 in an hour).
3. Optional actions, such as sending an email to an administrator notifying them of the alert, or running an Azure Logic App to address the issue automatically.
4. Alert rule details, such as a name for the alert rule and the resource group in which it should be defined.

Question 9

How many dashboards can you create in the Azure portal?

Answer 9

100

Question 10

You are building an app that will use an Azure AI Services resource.
You need to identify the endpoint for the resource.
From the Azure CLI, which command should you run?

Answer 10

az cognitiveservices account show –name myresource –resource-group cognitive-services-resource-group

you need to provide the name and the resource group for your Cognitive Service account to retrieve the endpoint amongst other information for the resource

Question 11

You are building an app that will use Azure AI Custom Vision. The app will be deployed to a virtual machine in Azure.
You enable firewall rules for your Azure AI Services account.
You need to ensure that the app can access the service through a service endpoint.
What should you do?

Answer 11

Grant access to a specific virtual network.

If you enable the firewall for the Azure AI Services account, you need to allow network access to the service. You can achieve this by either allowing access from a specific virtual network or adding an IP range to the firewall rules. In this situation, the app is deployed to a virtual machine in Azure, which resides in a virtual network. You can provide access to virtual networks in Azure to access specific service endpoints.

Question 12

You are building an app that will use Azure AI Custom Vision. The app will be deployed to an internet host.
You enable firewall rules for your Azure AI Services account.
You need to ensure that the app can access the Azure AI Custom Vision service over the internet.
What should you do?

Answer 12

Grant access to an internet IP range.

If you enable the firewall for the Azure AI Services account, you need to allow network access to the service. You can achieve this by either allowing access from a specific virtual network or adding an IP range to the firewall rules. In this situation, the app is deployed to the internet, and you can provide specific internet hosts access by adding an IP or range of IPs to the firewall rules.