AI-102 Plan and manage an Azure AI solution Practice Question
You are planning a multi-region deployment of Azure AI services to ensure high availability and low latency for global users. You need to decide how to manage API keys and endpoint URLs across regions. What is the recommended approach?
⚠ Common exam trap
Many exam-takers assume a single global resource or direct regional calls are sufficient, overlooking the need for a centralized gateway like API Management to handle routing, failover, and key management at scale.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Azure API Management to expose a single endpoint that routes to regional Azure AI services resources, each with its own key stored in Key Vault.
It combines Azure API Management as a unified gateway with regional Azure AI Services resources, each secured by individual keys stored in Azure Key Vault. This architecture provides global load balancing, regional failover, and centralized key management without exposing keys in application code. API Management can route requests based on latency or geography, ensuring high availability and low latency while Key Vault rotates keys securely.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create separate Azure AI services resources per region and hardcode the keys in application configuration.
Why it's wrong here
Hardcoding keys is insecure and not scalable.
- ✗
Create a single Azure AI services resource in one region and share the key across all applications.
Why it's wrong here
Single region does not provide low latency globally.
- ✓
Use Azure API Management to expose a single endpoint that routes to regional Azure AI services resources, each with its own key stored in Key Vault.
Why this is correct
API Management provides routing, failover, and key management.
- ✗
Use Microsoft Entra ID authentication with managed identities and have each application call the region-specific endpoint directly.
Why it's wrong here
Does not provide centralized routing or failover.
Go deeper
Related to this question
About these practice questions
This AI-102 question is part of Courseiva's 945-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-102 exam.