AI-102 Plan and manage an Azure AI solution Practice Question
Which TWO actions are required to enable private endpoint connectivity for an Azure AI Language resource?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Disable public network access on the AI resource
To enable private endpoint connectivity for an Azure AI Language resource, you must disable public network access on the AI resource (Option A) to ensure all traffic goes through the private endpoint. You also need to create the private endpoint in a subnet of a virtual network (Option B) to establish the private connection. Option C is not required because Azure Firewall rules are not needed for private endpoints; network policies are handled by NSG and UDR. Option D is incorrect because a private DNS zone is optional but not required—it is recommended for name resolution but not a requirement. Option E is wrong because service tags are not required for private endpoints; they are used for public network access rules.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Disable public network access on the AI resource
Why this is correct
To enforce private endpoint, public access must be disabled.
- ✓
Create the private endpoint in a subnet of a virtual network
Why this is correct
Private endpoint must be in a subnet.
- ✗
Configure an Azure Firewall rule to allow the private endpoint
Why it's wrong here
Firewall rules are not needed for private endpoint connectivity.
- ✗
Create a private DNS zone for the resource
Why it's wrong here
Private DNS zone is optional; you can use Azure-provided DNS.
- ✗
Add a service tag to the network security group
Why it's wrong here
Service tags are for network security rules, not required for private endpoints.
Visual reference
Go deeper
Related to this question
About these practice questions
This AI-102 question is part of Courseiva's 945-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-102 exam.