AI-200 Security And Observability Practice Question
You are auditing your Azure subscription for security best practices related to Azure AI resources. Which TWO of the following actions help enforce governance and security? (Choose two)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Azure Policy to enforce allowed deployment regions and mandatory tagging.
Applying resource locks prevents accidental deletion, and enforcing Azure Policy ensures regional and configuration compliance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Grant every user Contributor rights to the entire Azure subscription.
Why it's wrong here
Incorrect. Over-assigning permissions violates the principle of least privilege.
- ✓
Use Azure Policy to enforce allowed deployment regions and mandatory tagging.
Why this is correct
Correct. Azure Policy governs resource compliance across subscriptions.
- ✗
Share the master subscription co-administrator password with all external contractors.
Why it's wrong here
Incorrect. Sharing master credentials compromises subscription security.
- ✗
Disable all firewall rules on Azure Key Vault.
Why it's wrong here
Incorrect. Disabling firewalls exposes secrets to unauthorized networks.
- ✓
Apply 'CanNotDelete' resource locks on critical production AI resources.
Why this is correct
Correct. Resource locks prevent accidental deletion of critical infrastructure.
About these practice questions
One of 503 original AI-200 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.