AI-200 practice: Build and run images by using Azure Container Registry Tasks

Question 1

A machine-learning platform team maintains a shared base Docker image containing CUDA drivers and Python dependencies that several inference-service teams build on top of. The platform team wants any downstream image to be rebuilt and re-pushed to Azure Container Registry automatically whenever the shared base image receives a security patch, without anyone manually starting a build, and they want the rebuilt image scanned for vulnerabilities before it becomes available to pull.

Which ACR Tasks configuration satisfies both requirements?

Accepted Answer

Configure a base image update trigger on the ACR Task, and enable Microsoft Defender for Cloud container image scanning on the registry

Answer

Configure an ACR Task with a source-repository commit trigger only, then use Azure Policy to deny pulls of non-compliant images after publish

Answer

Configure a scheduled cron ACR Task that rebuilds nightly from the base tag, then manually run az acr repository show-manifests after each rebuild

Answer

Configure a webhook from Azure DevOps that starts an ACR build on release approval, and scan images with a custom container scan step in the CI pipeline

Question 2

You want to build a container image in the cloud without maintaining local Docker tooling, and have the resulting image pushed automatically to your registry. Which ACR feature should you use?

Accepted Answer

ACR Tasks cloud builds

Answer

ACR Repositories storage

Answer

ACR Webhooks event notify

Answer

ACR Content Trust signing

Question 3

A development team wants an ACR Task that automatically rebuilds and pushes an image whenever the base image (e.g., a Python runtime image) receives a security patch. What should they configure?

Accepted Answer

Base image update trigger on an ACR Task

Answer

Manual az acr build on a fixed schedule

Answer

Event Grid subscription to Blob Storage

Answer

Container Apps revision traffic weights

Question 4

Which command builds a container image using ACR's cloud build compute and pushes it directly to the registry, without requiring a local Docker daemon?

Accepted Answer

az acr build --registry myregistry --image myapp:v1 .

Answer

docker build -t myregistry.azurecr.io/myapp:v1 .

Answer

az acr login --name myregistry --expose-token

Answer

az acr repository list --name myregistry -o tsv

Question 5

What is the primary purpose of Azure Container Registry Tasks (ACR Tasks) in an AI development workflow?

Accepted Answer

Automate image build, test, and push triggers

Answer

Run scheduled batch inference jobs at scale

Answer

Store vector embeddings for semantic search

Answer

Manage secrets for containerized applications

Question 6

You are automating the build process for a containerized AI model. You want to trigger a build in Azure Container Registry (ACR) every time a base image is updated. Which ACR feature should you use?

Accepted Answer

ACR Tasks

Answer

ACR Webhooks

Answer

ACR Replicas

Answer

ACR Cache

Question 7

You are using ACR Tasks to build a container image. Which file name does ACR Tasks look for by default if no file is specified in the build command?

Accepted Answer

Dockerfile (default name)

Answer

Containerfile (Podman name)

Answer

build.yaml (custom task)

Answer

Taskfile (task runner)

Question 8

You are using ACR Tasks to build an image from a GitHub repository. You want the build to happen automatically every time you push code to the main branch. What is this called in ACR Tasks?

Accepted Answer

Source trigger

Answer

Image trigger

Answer

Timer trigger

Answer

Webhook sync

Question 9

Which Azure CLI command shows the current status (running, failed, succeeded) of an ACR Task run, useful when a build appears stuck?

Accepted Answer

az acr task list-runs --registry myregistry --output table

Answer

az acr task show --registry myregistry --name buildTask -o json

Answer

az acr repository show --name myregistry --repository myapp -o json

Answer

az acr run --registry myregistry --cmd "echo status" /dev/null

Question 10

Which Azure CLI command creates an ACR Task that automatically rebuilds an image whenever the associated Git repository receives a new commit?

Accepted Answer

az acr task create --registry myregistry --name buildTask --image myapp:{{.Run.ID}} --context https://github.com/org/repo.git --file Dockerfile --git-access-token <token>

Answer

az acr build --registry myregistry --image myapp:v1 --file Dockerfile --platform linux --timeout 3600 --context https://github.com/org/repo.git

Answer

az acr task run --registry myregistry --name buildTask --set myapp.tag=manual --context https://github.com/org/repo.git --file Dockerfile

Answer

az acr task update --registry myregistry --name buildTask --image myapp:latest --context https://github.com/org/repo.git --file Dockerfile --git-access-token <token>

10 questions