Microsoft Azure AI Engineer Associate AI-102 Practice Question
Your company is containerizing a line-of-business application in Azure Kubernetes Service (AKS). The application must call an Azure AI Foundry Service endpoint at runtime, but security standards forbid embedding or storing access keys. All calls must be authenticated through Azure AD and credentials must rotate automatically. What should you configure to satisfy these requirements?
Configure Azure AD workload identity by assigning a user-assigned managed identity to the AKS cluster and granting it the Cognitive Services User role on the Azure AI Foundry resource.
Enable the AI Foundry service firewall and allow traffic only from the AKS virtual network.
Create a shared access signature (SAS) token for the AI Foundry endpoint and distribute it to the application at deployment time.
Generate an API key for the AI Foundry resource, store the key in Azure Key Vault, and inject it into the pods as an environment variable.
Using a user-assigned managed identity lets the AKS workload obtain an OAuth 2.0 access token from Azure AD without storing any secrets. After you assign the identity to the AKS cluster and grant it the Cognitive Services User role on the Azure AI Foundry resource, the application can request tokens and call the endpoint. Keys, SAS tokens, or IP firewalls do not meet the requirement to avoid static credentials or provide automatic rotation.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a user-assigned managed identity in Azure?
Open an interactive chat with Bash
How does Azure AD OAuth 2.0 access tokens work with Azure services?
Open an interactive chat with Bash
What is the Cognitive Services User role in Azure?
Open an interactive chat with Bash
Microsoft Azure AI Engineer Associate AI-102
Plan and manage an Azure AI solution
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .