Exam AI-102 All Questions

View all questions & answers for the AI-102 exam

Exam AI-102 topic 1 question 14 discussion

Actual exam question from Microsoft's AI-102

Question #: 14
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You create a web app named app1 that runs on an Azure virtual machine named vm1. Vm1 is on an Azure virtual network named vnet1.
You plan to create a new Azure Cognitive Search service named service1.
You need to ensure that app1 can connect directly to service1 without routing traffic over the public internet.
Solution: You deploy service1 and a public endpoint to a new virtual network, and you configure Azure Private Link.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by guruaws2021 at Aug. 21, 2021, 11:23 a.m.

Comments

Submit Cancel

WynterTsai

Highly Voted 3 years, 10 months ago

Answer is no. you should create a private link with private endpoint

upvoted 39 times

Mll1975

3 years, 8 months ago

I agree https://docs.microsoft.com/en-us/azure/cognitive-services/cognitive-services-virtual-networks?tabs=portal#use-private-endpoints

upvoted 1 times

...

gyaansastra

Most Recent 4 months, 2 weeks ago

Selected Answer: B

The solution specifies deploying service1 with a public endpoint. To ensure app1 can connect directly to service1 without routing traffic over the public internet, you should deploy service1 with a private endpoint instead. The private endpoint will allow secure connectivity through Azure Private Link, enabling app1 on vnet1 to communicate directly with service1 over the private network. Here’s the correct approach: - Deploy service1 to a virtual network (preferably the same vnet1 or a peered network). - Use a private endpoint for service1. - Configure Azure Private Link to enable secure, direct access. This configuration ensures that the connection does not use the public internet.

upvoted 1 times

...

syupwsh

4 months, 2 weeks ago

Selected Answer: B

"without routing traffic over the public internet" Private endpoints provide a privately accessible IP address for the Azure service, but don't necessarily restrict public network access to it. No for sure

upvoted 1 times

...

d6d5b56

5 months ago

Selected Answer: A

Answer is A,YES. This core of any cloud network facing public internet to private interface. Solution says: "deploy service1 and a public endpoint to a new virtual network, and you configure Azure Private Link"---Virtual networks are configured with private IP/endpoint which will then be recognizable under Azure Private Link

upvoted 2 times

...

Bindu93

5 months, 1 week ago

Selected Answer: A

Yes is the correct answer. By deploying service1 and configuring a public endpoint within a new virtual network, and then enabling Azure Private Link, you ensure that the connection between app1 (on vm1) and the search service (service1) happens over a private network.

upvoted 2 times

...

JakeCallham

10 months, 1 week ago

Selected Answer: A

This is so stupid and confusing. If you deploy the service first with public endpoint and after you configure a private link endpoint for it, it will automaticly close don the public endpoint. So yes its does meet the goal. But these questions are there to trick you.

upvoted 3 times

...

takaimomoGcup

1 year, 1 month ago

Selected Answer: B

This answer is No.

upvoted 1 times

...

nanaw770

1 year, 1 month ago

Selected Answer: B

This is correct answer is no. All but M7, T20, and T25 graduates must give a silly answer of yes.

upvoted 1 times

...

demonite

1 year, 1 month ago

Answer is a big YES. Like other PaaS services in Azure, you can deploy your service with public access (i.e. in this case they just call it public endpoint) and configure your private access after with a private endpoint. Doing so, the private endpoint will block the public access. Private endpoints for your search service enable you to: Block all connections on the public endpoint for your search service. https://learn.microsoft.com/en-us/azure/search/service-create-private-endpoint#why-use-a-private-endpoint

upvoted 1 times

...

natgurulearning

1 year, 7 months ago

A is correct! That solution would work perfectly. Here's why: By deploying the search service and the endpoint to the same virtual network, you create a private, secure connection between the web app and the search service. And by using Azure Private Link, you're creating a private, dedicated connection between the two services, which means traffic doesn't have to go over the public internet. This not only increases security but also improves performance and reliability. So, deploying the service to a new virtual network and configuring Azure Private Link would definitely meet the goal of connecting app1 directly to service1 without using the public internet.

upvoted 3 times

Ody

1 year, 3 months ago

I think you are correct. On the similar questions in the scenario the answer is definitely no. The question just says you need to ensure you "can connect". It doesn't say anything at all about preventing connectivity from the Internet. It does not appear that you can create the service without a public endpoint.

upvoted 1 times

Ody

1 year, 3 months ago

I misread. I think B is correct. When deploying the search service it lets you pick public or private endpoint.

upvoted 1 times

...

rdemontis

1 year, 8 months ago

Selected Answer: B

correct. If you need a private link you should create a private enpoint

upvoted 1 times

...

trashbox

1 year, 8 months ago

Selected Answer: B

Not a public endpoint but a private endpoint. "You can use private endpoints for your Azure AI services resources to allow clients on a virtual network to securely access data over Azure Private Link. " https://learn.microsoft.com/en-us/azure/ai-services/cognitive-services-virtual-networks?tabs=portal#use-private-endpoints

upvoted 1 times

...

acsoma

1 year, 11 months ago

appeared in august exam

upvoted 3 times

...

zellck

2 years ago

Selected Answer: B

B is the answer. https://learn.microsoft.com/en-us/azure/search/service-create-private-endpoint#why-use-a-private-endpoint-for-secure-access Private Endpoints for Azure Cognitive Search allow a client on a virtual network to securely access data in a search index over a Private Link. The private endpoint uses an IP address from the virtual network address space for your search service. Network traffic between the client and the search service traverses over the virtual network and a private link on the Microsoft backbone network, eliminating exposure from the public internet.

upvoted 4 times

...