Plan and manage an Azure AI solution →easyMultiple SelectObjective-mapped

AI-102 Plan and manage an Azure AI solution Practice Question

Which TWO of the following are best practices for securing Azure AI services?

⚠ Common exam trap

Candidates often think exposing endpoints publicly is acceptable for simplicity (Option A) or that sharing API keys is harmless (Option D), but Azure's security model emphasizes least privilege and credential isolation.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Enable diagnostic settings to audit usage and detect anomalies.

Enabling diagnostic settings for Azure AI services allows you to collect and analyze logs and metrics, which is essential for auditing usage, detecting anomalies, and monitoring security-related events. This aligns with the security best practice of maintaining visibility into service activity to identify potential threats or misconfigurations.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Expose endpoints publicly to simplify client access.
Why it's wrong here
Public endpoints increase attack surface.
✗
Disable diagnostic logging to reduce data exposure.
Why it's wrong here
Logging is important for security monitoring.
✓
Enable diagnostic settings to audit usage and detect anomalies.
Why this is correct
Provides visibility into usage patterns.
✗
Share API keys among multiple applications for simplicity.
Why it's wrong here
Sharing keys reduces security.
✓
Use managed identities to authenticate to Azure AI services.
Why this is correct
Eliminates the need for keys in code.

Go deeper

AI-102 Plan and manage an Azure AI solution Practice Question

Why each option matters

Option-by-option breakdown

Related to this question