Implement knowledge mining and information extraction solutions →mediumMultiple SelectObjective-mapped
AI-102 Practice Question: Implement knowledge mining and information extraction solutions
Which TWO actions should you take to ensure that an Azure AI Search indexer can access data from an Azure Storage account that contains sensitive data?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the search service to use a system-assigned managed identity
To ensure that an Azure AI Search indexer can access data from an Azure Storage account containing sensitive data, you should use a system-assigned managed identity for the search service (Option C) and allow the search service's IP address in the storage account firewall (Option D). Using a managed identity eliminates the need for keys and provides secure authentication. Allowing the search service's IP ensures that the indexer can connect through the firewall. Option A is incorrect because a private endpoint is for accessing the storage from a virtual network, not for indexer access. Option B is incorrect because shared access keys are less secure and expose the storage account. Option E is incorrect because disabling the firewall entirely is insecure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a private endpoint in the storage account for the search service
Why it's wrong here
Private endpoint is for inbound connections to search, not outbound.
- ✗
Use a shared access key (SAS) in the data source definition
Why it's wrong here
SAS keys are less secure and can expire.
- ✓
Configure the search service to use a system-assigned managed identity
Why this is correct
Managed identity provides secure access without keys.
- ✓
Allow the search service's IP address in the storage account firewall
Why this is correct
IP restriction allows access while blocking others.
- ✗
Disable the storage account firewall entirely
Why it's wrong here
Disabling firewall exposes the storage.
Go deeper
Related to this question
About these practice questions
One of 945 original AI-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-102 exam.