Exam AI-102 topic 1 question 49 discussion

Correct https://learn.microsoft.com/en-us/azure/cognitive-services/cognitive-services-virtual-networks?tabs=portal

Appeared on Oct/29/2023.

the virtual network settings for ta1 is CORRECT because configuring the virtual network settings for the Language service resource ta1 will ensure that it can only be accessed by resources within vnet1. This setup restricts access to the service based on the virtual network, providing a secure way to limit access. Answer is C

The correct choice is C. the virtual network settings for ta1. To ensure that only resources in vnet1 can access the Language service resource (ta1), you need to configure private endpoint access by setting up the virtual network settings for ta1. This will allow ta1 to be accessible only from resources within the specified virtual network, ensuring network isolation and security. A. Network Security Group (NSG) manages traffic rules within a virtual network but doesn't limit access to specific Azure resources like Language services. B. Azure Firewall can filter traffic but is not needed for restricting access to a single resource in this scenario. D. A Language service container is not relevant to restricting access via virtual networks.

I went with C and got 100% so that's definitely correct.

We can use virtual network.

C is right.

C. the virtual network settings for ta1

configure vent1 as "trustworthy network" for Language service Ta1, so no resource except from trustworthy network Vnet1 can access ta1.

correct answer

C is the answer. https://learn.microsoft.com/en-us/azure/cognitive-services/cognitive-services-virtual-networks?tabs=portal#grant-access-from-a-virtual-network You can configure Cognitive Services resources to allow access only from specific subnets. The allowed subnets may belong to a VNet in the same subscription, or in a different subscription, including subscriptions belonging to a different Azure Active Directory tenant.