Courseiva
Security And ObservabilitymediumMultiple SelectObjective-mapped

AI-200 Security And Observability Practice Question

Which THREE configuration steps are required when setting up a Private Endpoint for an Azure OpenAI resource?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Deploy the private endpoint into a subnet within your Virtual Network.

Setting up a private endpoint requires creating the endpoint itself, configuring a target sub-resource (e.g., 'account'), and updating DNS records so the FQDN resolves to the private IP.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Enable public network access on the Azure OpenAI resource with unrestricted IP ranges.

    Why it's wrong here

    Public access should be disabled or restricted when enforcing private endpoints.

  • Deploy the private endpoint into a subnet within your Virtual Network.

    Why this is correct

    The private endpoint requires an IP address allocated from a VNet subnet.

  • Integrate with a private DNS zone to resolve the Azure OpenAI FQDN to the private IP address.

    Why this is correct

    DNS resolution is necessary for clients to reach the private IP using the standard endpoint URL.

  • Assign a public IP address directly to the private endpoint network interface.

    Why it's wrong here

    Private endpoints use private IP addresses from the VNet, never public IPs.

  • Select the target sub-resource, such as 'account', for the Azure OpenAI service.

    Why this is correct

    Private endpoints require specifying the correct sub-resource type.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

One of 503 original AI-200 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Microsoft exam blueprint

This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.