Implement computer vision solutions →mediumMultiple ChoiceObjective-mapped

AI-102 Implement computer vision solutions Practice Question

Exhibit

Refer to the exhibit.

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "resources": [
    {
      "type": "Microsoft.CognitiveServices/accounts",
      "apiVersion": "2023-05-01",
      "name": "MyVisionService",
      "location": "[resourceGroup().location]",
      "sku": {
        "name": "S1"
      },
      "kind": "ComputerVision",
      "properties": {
        "customSubDomainName": "myvision",
        "networkAcls": {
          "defaultAction": "Deny"
        }
      }
    }
  ]
}

You deploy the above ARM template to create an Azure AI Vision resource. After deployment, you try to call the Vision API from your application but receive a 403 Forbidden error. What is the most likely cause?

⚠ Common exam trap

It's easy for candidates to confuse a 403 Forbidden error with authentication issues (e.g., invalid keys or tokens) or SKU limitations, but in this scenario the error is caused by network-level blocking, which is a separate layer of access control that must be explicitly configured to allow traffic.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The network ACLs block all traffic by default

When you deploy an Azure AI Vision resource using an ARM template, the default network configuration sets the 'defaultAction' to 'Deny' for IP firewall rules, meaning all traffic is blocked unless explicitly allowed. Since you did not configure any network ACLs to permit your application's IP address or virtual network, the 403 Forbidden error occurs because the API endpoint rejects the request at the network layer before any authentication or authorization checks.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
The network ACLs block all traffic by default
Why this is correct
With defaultAction set to 'Deny', no traffic is allowed unless IP rules are added.
✗
The apiVersion in the template is incorrect
Why it's wrong here
The apiVersion 2023-05-01 is valid for Cognitive Services accounts.
✗
The custom subdomain name is not configured correctly
Why it's wrong here
The custom subdomain is configured in the template and should work.
✗
The SKU 'S1' does not support API calls
Why it's wrong here
S1 is a valid standard tier that supports API calls.

Go deeper

AI-102 Implement computer vision solutions Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question