Exam AI-102 topic 1 question 57 discussion

https://learn.microsoft.com/en-us/azure/ai-services/speech-service/role-based-access-control#authentication-with-keys-and-tokens

under MS Documentation link: https://learn.microsoft.com/en-us/azure/ai-services/speech-service/role-based-access-control#authentication-with-keys-and-token you will find: "To authenticate with a Microsoft Entra token, the Speech resource must have a custom subdomain and use a private endpoint. The Speech service uses custom subdomains with private endpoints only."

Create a private endpoint allows secure communication between your Azure AI Speech service and your virtual network using a private IP address. This ensures that traffic remains private and controlled while supporting Microsoft Entra ID authentication. Configure a custom subdomain is correct because Azure AI services, including Speech, often require a custom subdomain for Entra ID authentication. This enables token-based authentication to the Speech service via the subdomain. BD are the answers

To authenticate with a Microsoft Entra token, the Speech resource must have a custom subdomain and use a private endpoint. The Speech service uses custom subdomains with private endpoints only.

Options A, B, and C are not directly related to Azure AD token authentication for the Speech service. Option A (enabling a virtual network service endpoint) is about network connectivity, option B (configuring a custom subdomain) is unrelated to authentication, and option C (requesting an X.509 certificate) is not necessary for Azure AD token-based authentication. (DE)

BD. To authenticate with a Microsoft Entra token, the Speech resource must have a custom subdomain and use a private endpoint. The Speech service uses custom subdomains with private endpoints only.

To authenticate with a Microsoft Entra token, the Speech resource must have a custom subdomain and use a private endpoint. The Speech service uses custom subdomains with private endpoints only.

To authenticate with Speech resource keys, all you need is the key and region. To authenticate with a Microsoft Entra token, the Speech resource must have a custom subdomain and use a private endpoint. The Speech service uses custom subdomains with private endpoints only.

B. Configure a custom subdomain: This is necessary because Azure AD authentication requires a custom domain for the Speech service. D. Create a private endpoint: This ensures secure communication between the app and the Speech service. These actions align with the best practices for securing Azure services and enable the app to use Azure AD tokens for authentication.

When you authenticate using Microsoft Entra ID (formerly Azure Active Directory) tokens, having a private endpoint along with a custom subdomain ensures full feature access. Without a private endpoint, some features may be limited. Specifically, if your Speech resource uses a Microsoft Entra token without a custom subdomain and private endpoint, you may encounter limitations, such as not being able to use custom speech models to transcribe audio files​

B. Configure a custom subdomain: This is necessary when using Azure AD authentication with a private endpoint. However, it's also a requirement for using Azure AD authentication in general with the Speech service. C. Request an X.509 certificate: This is not needed for Azure AD token-based authentication. It's typically used for client certificate authentication. Hence, B is absolutely required. The others are optional.

Wrong again. It's frustrating.

B and D.

correct answer : B and D https://learn.microsoft.com/en-us/azure/ai-services/speech-service/role-based-access-control#authentication-with-keys-and-tokens To authenticate with a Microsoft Entra token, the Speech resource must have a custom subdomain and use a private endpoint. The Speech service uses custom subdomains with private endpoints only.

B and D is the correct answer

https://learn.microsoft.com/en-us/azure/ai-services/speech-service/role-based-access-control#authentication-with-keys-and-tokens

The correct actions, according to Microsoft's documentation, are: B. Configure a custom subdomain. Configuring a custom subdomain involves setting up a custom domain for your Speech service instance, which can help in integrating with Azure AD and managing authentication effectively. D. Create a private endpoint. Creating a private endpoint allows your app to securely connect to the Speech service without exposing it to the public internet, maintaining network security and compliance.