AI-103: Developing AI Apps and Agents on Azure

By Microsoft · Question Mode

QuestionQ129

VerifiedPlan and manage an Azure AI solution

An Azure subscription contains a Microsoft Foundry Service resource named CSAccount1 and a virtual network named VNet1. CSAaccount1 is connected to VNet1.

You need to ensure that only specified resources can access CSAccount1. The solution must satisfy these requirements:

  • Prevent external access to CSAccount1.
  • Minimize administrative effort.

Which two actions should you take? Each correct answer is part of the solution.

NOTE: Each correct answer is worth one point.

Choose two
Explanation

Foundry Tools network rules can deny access by default and allow only selected virtual networks or subnets. A permitted virtual-network subnet must have the Foundry Tools (Microsoft.CognitiveServices) service endpoint enabled, which identifies the subnet to the service. Configuring the resource's virtual-network settings and enabling that service endpoint therefore restricts access without requiring separate identity permissions or unnecessary network changes.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!