Courseiva
Implement computer vision solutionseasyMultiple ChoiceObjective-mapped

AI-102 Implement computer vision solutions Practice Question

A healthcare organization uses Azure AI Health Insights to extract medical insights from unstructured clinical notes. The solution must comply with HIPAA. Which configuration is required?

⚠ Common exam trap

A common mix-up: candidates confuse authentication mechanisms (like managed identities or Azure AD) with network security controls, mistakenly believing that identity-based access alone satisfies HIPAA's data protection requirements.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Configure the Azure AI services resource to use a private endpoint and disable public network access

HIPAA compliance for Azure AI Health Insights requires network isolation to prevent unauthorized access to protected health information (PHI). A private endpoint assigns the Azure AI services resource a private IP address within the customer's virtual network, and disabling public network access ensures all traffic stays within the Microsoft backbone, eliminating exposure to the public internet. This configuration meets the HIPAA Security Rule's requirement for technical safeguards, specifically access control and transmission security.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Store the clinical notes in Azure Storage with Azure AD authentication only

    Why it's wrong here

    Does not address network isolation for the cognitive service.

  • Enable public network access but use a firewall rule to restrict IP addresses

    Why it's wrong here

    Public network access is not HIPAA compliant for protected health information.

  • Configure the Azure AI services resource to use a private endpoint and disable public network access

    Why this is correct

    Ensures data is not exposed over the public internet.

  • Use a system-assigned managed identity for authentication

    Why it's wrong here

    Identity alone does not ensure network security.

About these practice questions

One of 945 original AI-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AI-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-102 exam.