AI-103: Developing AI Apps and Agents on Azure

Question

You have a web app that uses Azure AI Search.

While reviewing activity, you notice greater than expected search query volumes and suspect that the query key has been compromised.

You need to prevent unauthorized access to the search endpoint while ensuring that users retain read-only access to the documents collection. The solution must minimize app downtime.

Which three actions should you perform, in sequence? Move the appropriate actions from the list into the answer area and arrange them in the correct order.

Drag & Drop

1

2

3

Explanation

Azure AI Search query keys (unlike admin keys) cannot be regenerated in place — there is no primary/secondary rotation mechanism for them. To replace a suspected compromised query key without causing downtime, you first provision a new query key, update the application configuration to use that new key so the app continues functioning, and finally delete the compromised key to revoke its access. Query keys are inherently read-only, so this approach satisfies the requirement that users retain read-only access to the documents collection while eliminating the exposed key.

Learn more

Create and manage api keys - Azure AI Search

AI-103: Developing AI Apps and Agents on Azure

AstroTutor

Notes

Readiness

QuestionQ110

Community Discussion