AI-103: Developing AI Apps and Agents on AzureDemo

By Microsoft · Question Mode

QuestionQ105

Implement generative AI and agentic solutions

You have an Azure subscription. You need to create a new resource that will generate fictional stories in response to user prompts. The solution must ensure that the resource uses a customer-managed key to protect data.

How should you complete the script?

Question Image

Select
az cognitiveservices account create –n myresource -g myResourceGroup --kind  --sku S -l WestEurope  '{ "keySource": "Microsoft.KeyVault", "keyVaultProperties": { "keyName": "KeyName", "keyVersion": "secretVersion", "keyVaultUri": "https://issue23056kv.vault.azure.net/" } }'
Explanation

Generating fictional stories from prompts is a generative AI task performed by Azure OpenAI Service, so the Cognitive Services resource must be created with --kind OpenAI. To protect the resource's data with a customer-managed key, the az cognitiveservices account create command uses the --encryption parameter, which accepts a JSON payload specifying keySource as Microsoft.KeyVault along with keyVaultProperties (keyName, keyVersion, keyVaultUri) — exactly the structure shown in the script. --assign-identity only grants the resource a managed identity (needed to access Key Vault) but does not configure encryption itself, and --api-properties is unrelated to encryption configuration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!