Your company has a Foundry service that is accessed by both internal applications and external partners. Internal applications use Microsoft Entra ID authentication, while external partners use API keys. A security review requires that you eliminate API keys and use a more secure authentication method for external partners. You need to migrate external partners to a new authentication method without disrupting their access. What should you do?

Use Azure API Management (APIM) as a front-end to the Foundry service and configure OAuth 2.0 with Microsoft Entra ID for external partners.

Issue shared access signatures (SAS) tokens to external partners with a long expiry and require them to use the SAS token instead of API keys.

Create a new account key for each external partner and rotate them monthly.

Create Microsoft Entra ID guest accounts for external partners and assign them the 'Contributor' role on the Foundry service.

You are responsible for a Microsoft Foundry Service resource that is used for production AI workloads. You need to be notified immediately if the service becomes unavailable or if error rates exceed a threshold. You also want to track historical availability for reporting. What should you configure?

Create a dashboard in the Azure portal that displays the current status of the resource.

Use Azure Service Health to monitor the resource and receive alerts for service incidents.

Set up Azure Monitor alerts on the availability and error rate metrics, and enable diagnostic settings to send logs to Log Analytics.

Configure a budget alert to notify you when costs exceed a threshold.

You need to grant a user permission to call an Azure AI resource using Microsoft Entra ID. What should you assign to the user?

The Owner role on the subscription

The Reader role on the resource

The Contributor role on the resource group

A role that includes the Cognitive Services User role

A developer accidentally posted a Foundry service account key to a public GitHub repository. You have already regenerated the key, but you need to prevent this from happening again. What should you implement?

Add a policy to the GitHub repository that blocks commits containing the string 'account-key'.

Store the account key in Azure Key Vault and provide the Key Vault URL to developers for use in their code.

Create a new account key and share it only with the development team through a secure channel.

Require all applications to use Microsoft Entra ID authentication and disable the account keys for the Foundry service.

Which Azure tool provides a centralized view of costs across all Azure AI resources and allows you to set budgets and alerts?

Azure Cost Management + Billing

Microsoft Certified:Azure AI Engineer Associate

Domain 1Objective 3

Manage, Monitor, and Secure a Microsoft Foundry Service AI-102 Practice Questions (Page 5)

Part of the Plan and manage an Azure AI solution domain, which accounts for 20-25% of the AI-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

4concepts

20-25%of the exam

Questions 21–25

21expert · hard
Your company has a Foundry service that is accessed by both internal applications and external partners. Internal applications use Microsoft Entra ID authentication, while external partners use API keys. A security review requires that you eliminate API keys and use a more secure authentication method for external partners. You need to migrate external partners to a new authentication method without disrupting their access. What should you do?
Select an answer first
22application · medium
You are responsible for a Microsoft Foundry Service resource that is used for production AI workloads. You need to be notified immediately if the service becomes unavailable or if error rates exceed a threshold. You also want to track historical availability for reporting. What should you configure?
Select an answer first
23foundation · easy
You need to grant a user permission to call an Azure AI resource using Microsoft Entra ID. What should you assign to the user?
Select an answer first
24application · medium
A developer accidentally posted a Foundry service account key to a public GitHub repository. You have already regenerated the key, but you need to prevent this from happening again. What should you implement?
Select an answer first
25foundation · easy
Which Azure tool provides a centralized view of costs across all Azure AI resources and allows you to set budgets and alerts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AI-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AI-102” is a trademark of its owner, used for identification only.

Manage, Monitor, and Secure a Microsoft Foundry Service AI-102 Practice Questions (Page 5)

Questions 21–25

You need to grant a user permission to call an Azure AI resource using Microsoft Entra ID. What should you assign to the user?

A developer accidentally posted a Foundry service account key to a public GitHub repository. You have already regenerated the key, but you need to prevent this from happening again. What should you implement?

Which Azure tool provides a centralized view of costs across all Azure AI resources and allows you to set budgets and alerts?

Keep studying — Plan and manage an Azure AI solution