You need to restrict access to an Azure AI Services resource so that only client applications deployed inside a specific Azure Virtual Network (VNet) can connect. All traffic over the public internet should be blocked. Which configuration should you implement?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Configure a Private Endpoint for the Azure AI Services resource and disable public network access.

Private Endpoints allow you to secure your Azure AI Services resource by routing network traffic over a private link from the VNet. Disabling public network access blocks any inter...

๐Ÿ“‹Part of Microsoft Certified: Azure AI Engineer Associate (AI-102) ยท Azure Certification Practice
Real Exam ScenarioAzure AI Services Security

You need to restrict access to an Azure AI Services resource so that only client applications deployed inside a specific Azure Virtual Network (VNet) can connect. All traffic over the public internet should be blocked. Which configuration should you implement?

โœ“ Correct Answer & ExplanationAzure AI Services Security

Correct Answer

Configure a Private Endpoint for the Azure AI Services resource and disable public network access.

Why This Answer Is Correct

Private Endpoints allow you to secure your Azure AI Services resource by routing network traffic over a private link from the VNet. Disabling public network access blocks any internet-facing connections, ensuring only traffic from the specified VNet is permitted.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Azure AI Services Security โ€” a core concept tested in Microsoft Certified: Azure AI Engineer Associate (AI-102). Understanding Azure AI Services Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.