AI-200 Security And Observability Practice Question
You need to ensure that all data sent to Azure OpenAI Service is encrypted at rest using a custom encryption key that your organization controls and rotates. Which feature must you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Customer-managed keys (CMK) stored in Azure Key Vault
Customer-managed keys (CMK) with Azure Key Vault allow you to use your own keys to encrypt data stored in Azure AI services.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Client-side encryption using PGP keys before sending HTTP payloads
Why it's wrong here
Incorrect. Azure OpenAI requires standard JSON payloads and does not natively process PGP-encrypted application bodies.
- ✓
Customer-managed keys (CMK) stored in Azure Key Vault
Why this is correct
Correct. CMK integration allows organizations to manage their own encryption keys for compliance and security.
- ✗
Azure Information Protection sensitivity labels applied via Microsoft Purview
Why it's wrong here
Incorrect. Information protection labels classify documents, not service-level data at rest for AI models.
- ✗
Transparent Data Encryption (TDE) configured via SQL Server Management Studio
Why it's wrong here
Incorrect. TDE applies to Azure SQL databases, not Azure OpenAI endpoints.
About these practice questions
This AI-200 question is part of Courseiva's 507-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.