Microsoft Azure AI Engineer Associate AI-102 Practice Question
Your Azure DevOps YAML release pipeline must promote a new version of an Azure AI Language custom question-answering model from test to production by running az cognitiveservices account deployment create. Policies state that (1) no shared keys may be stored in the repo or pipeline and (2) credentials must rotate without editing the YAML. Which authentication method meets these requirements?
Generate a user-delegation SAS token for the Azure AI endpoint, store the token in a secure files library item, and reference it from the pipeline.
Save the Azure AI resource's primary key as a secret variable in the pipeline and pass it to the CLI task with the --key argument.
Store the subscription owner's username and password in a variable group and run az login in the pipeline with those credentials.
Create an Azure DevOps service connection that uses a service principal, and assign that principal the Cognitive Services Contributor role on the target Azure AI resource so the az CLI obtains an Azure AD access token at run time.
Authenticating the az CLI through a service principal exposed in an Azure DevOps service connection avoids embedding the resource's primary or secondary keys in source control or pipeline variables. Granting the principal the Cognitive Services Contributor role on the target resource provides the least-privilege access needed to run az cognitiveservices account deployment create. When the secret, certificate, or workload-identity federation for the service principal is rotated, the service connection is updated independently of the YAML file, so the pipeline continues to work. The other approaches either store long-lived secrets directly in the pipeline, cannot be rotated transparently, or rely on user credentials rather than a dedicated principal, violating the stated policies.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a service principal in Azure?
Open an interactive chat with Bash
Why is the Cognitive Services Contributor role used here?
Open an interactive chat with Bash
How does credential rotation work with a service principal in Azure DevOps?
Open an interactive chat with Bash
Microsoft Azure AI Engineer Associate AI-102
Plan and manage an Azure AI solution
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .