AI-200 Security And Observability Practice Question
You are troubleshooting a scenario where an Azure App Service hosting an AI frontend cannot communicate with an Azure OpenAI endpoint secured by a private endpoint in a different virtual network. Which THREE of the following networking configurations should you verify? (Choose three)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Virtual network peering between the App Service VNet and the private endpoint VNet.
Virtual network peering, private DNS zone integration, and App Service VNet integration must be correctly configured for private endpoint communication across VNets.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Front Door geo-filtering rules blocking all international DNS queries.
Why it's wrong here
Incorrect. Front Door geo-filtering does not resolve VNet private endpoint routing issues.
- ✓
Virtual network peering between the App Service VNet and the private endpoint VNet.
Why this is correct
Correct. VNets must be peered so traffic can flow between the client app and the private endpoint.
- ✓
App Service VNet integration enabled so outbound application traffic can route into the VNet.
Why this is correct
Correct. App Service must have VNet integration enabled to reach resources inside the private VNet.
- ✗
Local admin passwords on the App Service worker instances.
Why it's wrong here
Incorrect. App Service is a PaaS offering where customers do not manage OS-level local admin passwords.
- ✓
Private DNS zone integration (e.g., privatelink.openai.azure.com) linked to the virtual networks.
Why this is correct
Correct. Correct DNS resolution is required so the hostname resolves to the private IP of the private endpoint.
About these practice questions
One of 503 original AI-200 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.