Manage, Monitor, and Secure a Microsoft Foundry Service AI-102 Practice Questions (Page 1)

Questions 1–5

1. 1expert · medium

   You are the Azure administrator for a company that uses a Microsoft Foundry Service resource. The security team has mandated that all access must use Azure AD authentication and that account keys must be disabled. However, a critical production application currently uses an account key and cannot be updated until the next release cycle, which is three months away. You need to comply with the security policy as much as possible without causing downtime. What should you do?

   • AUse Azure Policy to deny account key access and configure an exception for the critical application.
   • BKeep the account key enabled for the critical application but restrict its use with a network security group and monitor for unauthorized access.
   • CDisable the account keys immediately and update the application to use Azure AD authentication on an emergency basis.
   • DCreate a SAS token with the same permissions as the account key and provide it to the application.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A developer reports that their application is receiving 401 Unauthorized errors when calling your Foundry service. The application uses a system-assigned managed identity. You have verified that the managed identity is enabled and that the application is running in Azure. You need to resolve the issue. What should you check first?

   • AVerify that the managed identity has the correct role assignment on the Foundry service.
   • BEnsure that the Foundry service's firewall is not blocking the application's IP address.
   • CCheck that the Foundry service's account keys have not been regenerated recently.
   • DConfirm that the application is using the correct endpoint URL for the Foundry service.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   Your Foundry service is used by a data science team that runs experiments. The team often leaves experiments running overnight, which consumes significant resources and increases costs. You need to implement a solution that automatically stops idle experiments and alerts the team when costs are high. What should you do?

   • AUse Azure Monitor alerts to notify the team when an experiment has been running for more than 8 hours, and let them manually stop it.
   • BSet up an Azure Automation runbook that checks for idle experiments and stops them, and create a budget alert on the Foundry service.
   • CUse Azure Policy to deny the creation of experiments that run longer than 8 hours.
   • DCreate a schedule in the Foundry service to automatically shut down the service during off-hours.
   Reveal Solution Discussion Select an answer first
5. 4expert · medium

   You are responsible for a Microsoft Foundry Service resource that is used for both batch and real-time inference. You need to set up monitoring to detect anomalies in the real-time inference latency, but you also want to minimize the cost of monitoring. You have a limited budget and cannot afford to store large volumes of logs. What should you do?

   • AUse Azure Monitor metrics for latency and set up alerts on the metric, without enabling diagnostic logs.
   • BUse Azure Application Insights to monitor the resource and set up alerts on latency.
   • CCreate a custom application that monitors latency and sends alerts via email.
   • DEnable diagnostic settings to send all logs to Log Analytics and set up alerts on latency metrics.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security audit requires that all access to your Foundry service be authenticated and that no long-lived secrets be used. You need to configure access for a server-side application that runs in Azure. What should you use?

   • AA certificate-based service principal with a manually managed certificate that is renewed annually.
   • BA system-assigned managed identity for the application, with role-based access control (RBAC) assigned to the Foundry service.
   • CA shared access signature (SAS) token with a long expiry, stored in the application's configuration.
   • DAn account key from the Foundry service, stored in Azure Key Vault.
   Reveal Solution Discussion Select an answer first