Plan and manage an Azure AI solution →mediumMultiple ChoiceObjective-mapped

AI-102 Plan and manage an Azure AI solution Practice Question

Exhibit

resourceGroupName = 'rg-ai-dev'
sku = 'S0'
kind = 'TextAnalytics'
location = 'eastus'

# Deploy Azure AI Language resource
resource 'Microsoft.CognitiveServices/accounts' 'textAnalytics' = {
  name: 'myTextAnalytics'
  location: location
  sku: {
    name: sku
  }
  kind: kind
  properties: {
    customSubDomainName: 'mytextanalytics'
  }
}

Refer to the exhibit. You are reviewing a Bicep template for deploying an Azure AI Language resource. After deployment, you need to ensure that the resource uses a private endpoint to block public access. Which additional resource should you include in the template?

⚠ Common exam trap

Watch out — candidates often confuse service endpoints (which only filter source traffic but leave the public endpoint active) with private endpoints (which completely remove public accessibility), leading them to incorrectly select Option A.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

A Private Endpoint resource linked to the Cognitive Services account

A Private Endpoint resource, when linked to the Cognitive Services account via the `privateLinkServiceId` property, assigns a private IP address from a virtual network to the Azure AI Language resource. This blocks all public access by default when the resource's `publicNetworkAccess` property is set to 'Disabled', ensuring traffic only flows over the Microsoft backbone network through Azure Private Link.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
A service endpoint for Microsoft.CognitiveServices
Why it's wrong here
Service endpoints do not block public access entirely.
✗
A virtual network peering connection
Why it's wrong here
Peering does not provide private access to Cognitive Services.
✗
A virtual network gateway
Why it's wrong here
Not needed for private endpoint.
✓
A Private Endpoint resource linked to the Cognitive Services account
Why this is correct
Private endpoint enables private access and disables public access.

Go deeper

AI-102 Plan and manage an Azure AI solution Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question