Implement natural language processing solutions →mediumMultiple ChoiceObjective-mapped

AI-102 Practice Question: Implement natural language processing solutions

Exhibit

Refer to the exhibit.

{
  "apiVersion": "2024-01-01",
  "type": "Microsoft.CognitiveServices/accounts",
  "name": "myAIServices",
  "location": "eastus",
  "sku": {
    "name": "S0"
  },
  "properties": {
    "apiProperties": {
      "statisticsEnabled": true
    },
    "networkAcls": {
      "defaultAction": "Deny",
      "ipRules": []
    }
  }
}

You deploy an Azure AI Services resource using the ARM template shown in the exhibit. You need to test the Language service API from your local machine. What should you do first?

⚠ Common exam trap

Many exam-takers assume changing `defaultAction` to `Allow` is the simplest fix, but the question tests understanding that the resource is already deployed and the firewall is blocking traffic—so the correct first step is to explicitly permit your specific IP, not to open the resource to the entire internet.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Add your public IP address to the ipRules array in the networkAcls

The ARM template in the exhibit sets `defaultAction` to `Deny`, which blocks all traffic not explicitly allowed by the `ipRules` array. To test the Language service API from your local machine, you must add your public IP address to the `ipRules` array so that the resource's network firewall permits inbound requests from your IP. Without this step, all API calls from your local machine will be rejected with a 403 Forbidden error.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Configure a managed identity for the resource
Why it's wrong here
Managed identity doesn't bypass network restrictions.
✓
Add your public IP address to the ipRules array in the networkAcls
Why this is correct
This allows your IP to access the resource.
✗
Change the defaultAction to Allow
Why it's wrong here
Allowing all traffic is not secure and not the first step.
✗
Use Azure CLI to enable the resource
Why it's wrong here
The resource is already enabled; network access is blocked.

Go deeper

AI-102 Practice Question: Implement natural language processing solutions

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question