Correct Answer: Assign the Cognitive Services OpenAI User role to the web app's managed identity in Azure RBAC
Azure OpenAI supports Microsoft Entra ID (formerly Azure AD) authentication. By assigning the 'Cognitive Services User' or 'Cognitive Services OpenAI User' role to the app's manage...
Correct Answer
Assign the Cognitive Services OpenAI User role to the web app's managed identity in Azure RBAC
Why This Answer Is Correct
Azure OpenAI supports Microsoft Entra ID (formerly Azure AD) authentication. By assigning the 'Cognitive Services User' or 'Cognitive Services OpenAI User' role to the app's managed identity, the SDK can authenticate securely using TokenCredential without key management.
This question evaluates your knowledge of Azure OpenAI Service — a core concept tested in Microsoft Certified: Azure AI Engineer Associate (AI-102). Understanding Azure OpenAI Service is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are configuring a deployment of the GPT-4 model in Azure OpenAI. You want the model to generate highly predictable, deterministic responses for a code translation application. Which parameter should you adjust?
You deploy an Azure OpenAI model. You want to restrict users from generating content that could bypass your system prompt's instructions (Prompt Injection). What is the best strategy?
You want to reduce the latencies and token billing of repetitive user queries in your chatbot that ask identical informational questions. What is the recommended application architecture pattern to implement?
You deploy an Azure OpenAI model for a chatbot. You notice that the model occasionally hallucinates facts when users ask about recent company policies. How can you ground the model's responses in your own organizational data?
You want to deploy an Azure OpenAI resource in a specific Azure region. You need to ensure that the deployment is resilient to zone failures within that region. What should you configure?