Plan and manage an Azure AI solution →mediumMultiple ChoiceObjective-mapped

AI-102 Plan and manage an Azure AI solution Practice Question

Exhibit

{
  "properties": {
    "displayName": "My Custom Vision project",
    "description": "Classify product images",
    "projectType": "Classification",
    "domainId": "general",
    "exportModelContainerUri": "https://mystorageaccount.blob.core.windows.net/models",
    "notificationQueueUri": null,
    "trainingData": {
      "imageData": {
        "sasUri": "https://mystorageaccount.blob.core.windows.net/training-images?sv=2022-11-02&ss=b&srt=o&sp=rw&se=2024-12-31T23:59:59Z&st=2024-01-01&spr=https&sig=..."
      }
    }
  }
}

Refer to the exhibit. You are creating a Custom Vision project using the Azure AI Custom Vision API. The training data is stored in Azure Blob Storage with a SAS URI. The project creation fails with an authorization error. What is the most likely reason?

⚠ Common exam trap

Candidates often confuse a SAS authorization error with a missing container URI or an invalid domain, when in fact the SAS token's expiry or insufficient permissions is the direct cause of the 403 error during blob access.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The SAS token is expired or has insufficient permissions

The Custom Vision project creation fails because the SAS URI used to access training data in Azure Blob Storage has an expired token or lacks sufficient permissions (e.g., read/list). Custom Vision requires a valid SAS token with at least read and list permissions to import images from the container. An expired or under-permissioned SAS token results in an authorization error when the service attempts to access the blob storage.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The domain 'general' is invalid
Why it's wrong here
General domain is valid.
✗
The exportModelContainerUri is missing
Why it's wrong here
Export container is optional.
✓
The SAS token is expired or has insufficient permissions
Why this is correct
The SAS token expiry may be past or missing read permission.
✗
The project type 'Classification' is not supported
Why it's wrong here
Classification is supported.

Quick reference

Azure Blob Storage Tier Comparison

Tier	Storage Cost	Retrieval Cost	Latency	Use Case
Hot	Highest	Lowest	Immediate	Active data, frequent reads
Cool	Lower	Higher	Immediate	Data accessed < once / month
Cold	Lower still	Higher	Immediate	Data accessed < once / quarter
Archive	Lowest	Highest + rehydration delay	Hours	Long-term compliance retention

Go deeper

AI-102 Plan and manage an Azure AI solution Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Azure Blob Storage Tier Comparison

Related to this question