Manage, Monitor, and Secure a Microsoft Foundry Service AI-102 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   You need to track the number of requests and latency of an Azure AI resource. Which Azure service should you use to collect and visualize these metrics?

   • AAzure Monitor
   • BAzure Service Health
   • CAzure Advisor
   • DAzure Resource Manager
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   Your organization is migrating from account keys to Microsoft Entra ID authentication for a Foundry service. You have many applications that use the service, and you need to ensure that no application loses access during the migration. You also need to track which applications are still using account keys so you can prioritize the migration. What should you do?

   • AKeep account keys enabled and use Azure Monitor to track which applications are using account keys by analyzing the authentication logs.
   • BCreate a new Foundry service instance with Microsoft Entra ID authentication and migrate applications one by one.
   • CDisable account keys immediately and require all applications to switch to Microsoft Entra ID authentication at the same time.
   • DRegenerate account keys and distribute them to all applications, then plan to switch to Microsoft Entra ID later.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   You suspect that an account key for your Azure AI resource has been exposed. What should you do first to prevent unauthorized access?

   • ADelete the resource and recreate it
   • BRegenerate the compromised key
   • CChange the resource's pricing tier
   • DDisable the resource's endpoint
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   Your security team requires that all access to a Microsoft Foundry Service resource be authenticated using Azure AD and that no account keys be used. You need to ensure that existing applications that currently use account keys continue to work with minimal changes. What should you do?

   • ARegenerate the account keys and distribute them to the applications.
   • BDisable the account keys and update the applications to use Azure AD authentication with managed identities or service principals.
   • CCreate a SAS token that uses Azure AD authentication and provide it to the applications.
   • DUse Azure Policy to deny account key access and rely on the applications to fail and then be updated.
   Reveal Solution Discussion Select an answer first
6. 10expert · medium

   Your security team has detected that an account key for a Microsoft Foundry Service resource was exposed in a public code repository. You need to rotate the key immediately, but you have multiple applications that use the key. You want to minimize downtime and ensure that all applications are updated before the old key is invalidated. What should you do?

   • AUse Azure Key Vault to rotate the key automatically and update applications to reference the Key Vault secret.
   • BRegenerate the secondary key, update all applications to use the secondary key, and then regenerate the primary key.
   • CDisable the exposed key and create a new key, then update applications to use the new key.
   • DRegenerate the primary key and immediately update all applications to use the new key.
   Reveal Solution Discussion Select an answer first