Correct Answer: Enable Managed Identity on the Azure AI Services resource and grant it Storage Blob Data Reader RBAC permissions on the storage account
By enabling a system-assigned or user-assigned Managed Identity on the Azure AI Services resource and assigning the Storage Blob Data Reader role to it, the AI service can securely...
Correct Answer
Enable Managed Identity on the Azure AI Services resource and grant it Storage Blob Data Reader RBAC permissions on the storage account
Why This Answer Is Correct
By enabling a system-assigned or user-assigned Managed Identity on the Azure AI Services resource and assigning the Storage Blob Data Reader role to it, the AI service can securely authenticate and read blobs directly, even inside network-restricted storage accounts.
This question evaluates your knowledge of Azure AI Services Security — a core concept tested in Microsoft Certified: Azure AI Engineer Associate (AI-102). Understanding Azure AI Services Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to restrict access to an Azure AI Services resource so that only client applications deployed inside a specific Azure Virtual Network (VNet) can connect. All traffic over the public internet should be blocked. Which configuration should you implement?
You have an Azure AI Services multi-service resource. You need to rotate the access keys due to a suspected security breach. How can you minimize application downtime during the key rotation process?