sc-500 Practice Question 1999
Exam: sc-500
Domain: Secure cloud apps and AI environments
Topic: Implement security controls for AI endpoints
Difficulty: medium
In a scenario where you need to secure an Azure AI service endpoint to ensure that data is only accessible through a private network, which of the following actions should you take?
Answer Options
A
Enable encryption on the AI service.
B
Create a Private Endpoint for the AI service.
C
Enable Network Isolation for the AI service.
D
Use Customer-Managed Keys (CMK) for the AI service.
Correct Answer
B: Create a Private Endpoint for the AI service.
Explanation
Creating a Private Endpoint ensures that traffic between the AI service and the virtual network is routed over a private connection, enhancing security by isolating the service from the public internet. Customer-Managed Keys (CMK) provide control over encryption keys, but they do not isolate the service from the public internet. Network Isolation can be achieved through Virtual Networks, but it does not create a private endpoint. Directly enabling encryption on the AI service does not provide network isolation.