AI-103 Plan And Manage AN Azure AI Solution Practice Question
You are deploying a custom AI model using a container image stored in Azure Container Registry (ACR). How do you ensure the deployment can pull the image securely?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Assign the 'AcrPull' role to the endpoint's managed identity.
Granting the AI service's managed identity the 'AcrPull' role on the registry allows it to pull images securely without shared secrets.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use the ACR 'admin' password in the configuration.
Why it's wrong here
Using shared admin passwords is discouraged due to security risks.
- ✓
Assign the 'AcrPull' role to the endpoint's managed identity.
Why this is correct
Managed identity-based access is the most secure way to pull from ACR.
- ✗
Deploy the model from a local machine.
Why it's wrong here
This does not resolve the need for the cloud endpoint to access the image registry.
- ✗
Make the ACR public.
Why it's wrong here
This exposes the images to unauthorized access.
About these practice questions
One of 510 original AI-103 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-103 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-103 exam.