You are securing an Azure OpenAI deployment. The security team requires that traffic to the AI service
must not traverse the public internet.
What should you configure?
Correct Answer: C
Explanation:
A private endpoint allows the Azure OpenAI resource to be accessed through a private IP address from within an Azure virtual network. This prevents traffic from traversing the public internet and supports network-level isolation. Public network access should be disabled when private connectivity is required. Azure Front Door is useful for global application delivery but does not by itself make the Azure OpenAI service private. Anonymous endpoint access is not appropriate for secure AI workloads.
Question 2
You are configuring identity access for an AI workload. The application must access Azure Key Vault
without storing client secrets in application code.
Which authentication method should you use?
Correct Answer: A
Explanation:
Managed identity allows Azure resources to authenticate to other Azure services without storing credentials in application code or configuration files. For an AI workload that needs to access Azure Key Vault, managed identity is the recommended approach because it reduces secret exposure and supports role-based access control. Shared access signatures and access keys are harder to govern and rotate securely. Local administrator credentials should not be used for cloud service authentication
Question 3
You are designing a secure AI application that uses Azure OpenAI Service. Users must not access the
Azure OpenAI endpoint directly. All requests must be authenticated, logged, and inspected before being
sent to the model.
Which component should you place between the users and Azure OpenAI Service?
Correct Answer: B
Explanation:
A secured backend API should be used as the controlled access layer between users and Azure OpenAI Service. This allows the organization to authenticate users, authorize requests, inspect prompts, log activity, and apply business rules before calling the AI model. Direct access from client applications to Azure OpenAI increases the risk of key exposure, unauthorized use, and weak governance. A backend API also supports managed identity and centralized security monitoring.
Demo Practice Mode
You are viewing only the questions marked as Demo.