AI-300 Mlops Infrastructure Practice Question
You are setting up an Azure Machine Learning workspace and need to ensure that the workspace is not accessible from the public internet. Which networking feature should you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Private Endpoint
A Private Endpoint allows you to access your workspace securely via a private IP address within your virtual network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Bastion
Why it's wrong here
Azure Bastion is for secure RDP/SSH access to VMs, not workspace network isolation.
- ✗
Application Gateway
Why it's wrong here
Application Gateway is a web traffic load balancer, not a networking isolation tool for ML workspaces.
- ✓
Private Endpoint
Why this is correct
A Private Endpoint provides a private IP address for the workspace, blocking public access.
- ✗
Service Tags
Why it's wrong here
Service Tags are used in Network Security Groups to allow/deny traffic, not for private connectivity.
About these practice questions
Courseiva writes every AI-300 question from scratch — 204 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-300 exam.