Courseiva
Computer VisionhardMultiple SelectObjective-mapped

AI-103 Computer Vision Practice Question

Your enterprise requires strict security and governance over your Azure AI Vision resources. Which THREE security configurations should you implement? (Choose three.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Configure Azure Private Endpoints to restrict access to your Virtual Network.

Enterprise security for Azure AI Services includes Private Endpoints, disabling local authentication in favor of Microsoft Entra ID (RBAC), and Key Vault integration for secrets.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Store API keys in plain text configuration files on public GitHub repositories.

    Why it's wrong here

    Plain text keys on GitHub represent a severe security vulnerability.

  • Disable TLS encryption to improve API response latency.

    Why it's wrong here

    Disabling TLS violates encryption-in-transit security standards.

  • Configure Azure Private Endpoints to restrict access to your Virtual Network.

    Why this is correct

    Private endpoints keep traffic off the public internet.

  • Enable diagnostic logging and stream audit records to Log Analytics.

    Why this is correct

    Diagnostic logging ensures traceability and auditing.

  • Implement Microsoft Entra ID role-based access control (RBAC) instead of relying solely on API keys.

    Why this is correct

    Entra ID RBAC provides fine-grained identity-based access control.

Quick reference

Access Control Model Comparison

ModelAcronymWho Controls Access?Best For
Discretionary Access ControlDACResource ownerSmall teams, file shares
Mandatory Access ControlMACSystem / security labelsClassified govt / military
Role-Based Access ControlRBACAdministrator (via roles)Enterprise environments
Attribute-Based Access ControlABACPolicy engine (user + resource attributes)Fine-grained, dynamic policies
Rule-Based Access ControlRuBACSystem rules / ACLsFirewall rules, network ACLs

About these practice questions

Courseiva writes every AI-103 question from scratch — 510 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Microsoft exam blueprint

This AI-103 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-103 exam.