AI-102 Plan and manage an Azure AI solution Practice Question
You need to enforce that only users from your Microsoft Entra ID tenant can call your Azure AI Language API endpoint. Which security mechanism should you configure?
⚠ Common exam trap
Many exam-takers confuse network-level controls (IP whitelist, Azure Firewall) with identity-level controls, mistakenly thinking that restricting by IP address or network firewall is sufficient to enforce tenant-specific access, when in fact only Entra ID authentication can validate the caller's tenant membership.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID authentication
Microsoft Entra ID authentication (formerly Azure AD) allows you to enforce that only users and applications from your specific Entra ID tenant can call the Azure AI Language API. This is achieved by configuring a managed identity or service principal and assigning it the Cognitive Services User role, which ensures that tokens issued by your tenant are required for access. API keys and IP whitelists do not provide tenant-level identity enforcement, and Azure Firewall is a network-level control that does not authenticate individual users or applications.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra ID authentication
Why this is correct
Ensures only authorized tenant users can call the endpoint.
- ✗
API key authentication
Why it's wrong here
Does not enforce tenant restrictions.
- ✗
IP whitelist
Why it's wrong here
Restricts by IP address, not tenant identity.
- ✗
Azure Firewall
Why it's wrong here
Network-level control, not identity.
Go deeper
Related to this question
About these practice questions
One of 945 original AI-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-102 exam.