exam questions

Exam AI-102 All Questions

View all questions & answers for the AI-102 exam

Exam AI-102 topic 1 question 14 discussion

Actual exam question from Microsoft's AI-102
Question #: 14
Topic #: 1
[All AI-102 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You create a web app named app1 that runs on an Azure virtual machine named vm1. Vm1 is on an Azure virtual network named vnet1.
You plan to create a new Azure Cognitive Search service named service1.
You need to ensure that app1 can connect directly to service1 without routing traffic over the public internet.
Solution: You deploy service1 and a public endpoint to a new virtual network, and you configure Azure Private Link.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
WynterTsai
Highly Voted 3 years, 7 months ago
Answer is no. you should create a private link with private endpoint
upvoted 37 times
Mll1975
3 years, 5 months ago
I agree https://docs.microsoft.com/en-us/azure/cognitive-services/cognitive-services-virtual-networks?tabs=portal#use-private-endpoints
upvoted 1 times
...
...
gyaansastra
Most Recent 1 month, 3 weeks ago
Selected Answer: B
The solution specifies deploying service1 with a public endpoint. To ensure app1 can connect directly to service1 without routing traffic over the public internet, you should deploy service1 with a private endpoint instead. The private endpoint will allow secure connectivity through Azure Private Link, enabling app1 on vnet1 to communicate directly with service1 over the private network. Here’s the correct approach: - Deploy service1 to a virtual network (preferably the same vnet1 or a peered network). - Use a private endpoint for service1. - Configure Azure Private Link to enable secure, direct access. This configuration ensures that the connection does not use the public internet.
upvoted 1 times
...
syupwsh
1 month, 4 weeks ago
Selected Answer: B
"without routing traffic over the public internet" Private endpoints provide a privately accessible IP address for the Azure service, but don't necessarily restrict public network access to it. No for sure
upvoted 1 times
...
d6d5b56
2 months, 1 week ago
Selected Answer: A
Answer is A,YES. This core of any cloud network facing public internet to private interface. Solution says: "deploy service1 and a public endpoint to a new virtual network, and you configure Azure Private Link"---Virtual networks are configured with private IP/endpoint which will then be recognizable under Azure Private Link
upvoted 2 times
...
Bindu93
2 months, 2 weeks ago
Selected Answer: A
Yes is the correct answer. By deploying service1 and configuring a public endpoint within a new virtual network, and then enabling Azure Private Link, you ensure that the connection between app1 (on vm1) and the search service (service1) happens over a private network.
upvoted 2 times
...
JakeCallham
7 months, 3 weeks ago
Selected Answer: A
This is so stupid and confusing. If you deploy the service first with public endpoint and after you configure a private link endpoint for it, it will automaticly close don the public endpoint. So yes its does meet the goal. But these questions are there to trick you.
upvoted 3 times
...
takaimomoGcup
10 months, 3 weeks ago
Selected Answer: B
This answer is No.
upvoted 1 times
...
nanaw770
10 months, 3 weeks ago
Selected Answer: B
This is correct answer is no. All but M7, T20, and T25 graduates must give a silly answer of yes.
upvoted 1 times
...
demonite
10 months, 4 weeks ago
Answer is a big YES. Like other PaaS services in Azure, you can deploy your service with public access (i.e. in this case they just call it public endpoint) and configure your private access after with a private endpoint. Doing so, the private endpoint will block the public access. Private endpoints for your search service enable you to: Block all connections on the public endpoint for your search service. https://learn.microsoft.com/en-us/azure/search/service-create-private-endpoint#why-use-a-private-endpoint
upvoted 1 times
...
natgurulearning
1 year, 4 months ago
A is correct! That solution would work perfectly. Here's why: By deploying the search service and the endpoint to the same virtual network, you create a private, secure connection between the web app and the search service. And by using Azure Private Link, you're creating a private, dedicated connection between the two services, which means traffic doesn't have to go over the public internet. This not only increases security but also improves performance and reliability. So, deploying the service to a new virtual network and configuring Azure Private Link would definitely meet the goal of connecting app1 directly to service1 without using the public internet.
upvoted 3 times
Ody
1 year ago
I think you are correct. On the similar questions in the scenario the answer is definitely no. The question just says you need to ensure you "can connect". It doesn't say anything at all about preventing connectivity from the Internet. It does not appear that you can create the service without a public endpoint.
upvoted 1 times
Ody
1 year ago
I misread. I think B is correct. When deploying the search service it lets you pick public or private endpoint.
upvoted 1 times
...
...
...
rdemontis
1 year, 5 months ago
Selected Answer: B
correct. If you need a private link you should create a private enpoint
upvoted 1 times
...
trashbox
1 year, 5 months ago
Selected Answer: B
Not a public endpoint but a private endpoint. "You can use private endpoints for your Azure AI services resources to allow clients on a virtual network to securely access data over Azure Private Link. " https://learn.microsoft.com/en-us/azure/ai-services/cognitive-services-virtual-networks?tabs=portal#use-private-endpoints
upvoted 1 times
...
acsoma
1 year, 8 months ago
appeared in august exam
upvoted 3 times
...
zellck
1 year, 9 months ago
Selected Answer: B
B is the answer. https://learn.microsoft.com/en-us/azure/search/service-create-private-endpoint#why-use-a-private-endpoint-for-secure-access Private Endpoints for Azure Cognitive Search allow a client on a virtual network to securely access data in a search index over a Private Link. The private endpoint uses an IP address from the virtual network address space for your search service. Network traffic between the client and the search service traverses over the virtual network and a private link on the Microsoft backbone network, eliminating exposure from the public internet.
upvoted 4 times
...
Eltooth
2 years, 9 months ago
Selected Answer: B
B is correct answer : No.
upvoted 2 times
...
mohamedba
2 years, 9 months ago
Public endpoint means the traffic is going to Internet, so answer is a big 'NO'
upvoted 2 times
...
arpitexam
3 years ago
Selected Answer: B
private link with private endpoint required
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago