AI-102 Question 436
Select 3You are tasked with provisioning an Azure OpenAI Service resource for your organization. The resource must be compliant with organizational security policies, which require network isolation and role-based access control (RBAC). Which steps should you include as part of the provisioning process?
- A
Create the Azure OpenAI Service resource in a virtual network to ensure network isolation.
- B
Assign necessary RBAC roles to users or groups requiring access to the Azure OpenAI Service resource.
- C
Select the 'Public Access Enabled' option during the resource creation to simplify access.
- D
Specify the appropriate region where Azure OpenAI Service is supported.
- E
Configure a storage account to store the outputs of the Azure OpenAI models.
Show answer and explanation
Correct answers: A, B, D
Explanation
To provision an Azure OpenAI Service resource that complies with organizational security policies, you must ensure network isolation by using a virtual network, implement RBAC for secure access control, and select a supported region for the service. Public access must be avoided to maintain security compliance, and configuring a storage account is not a required step during the provisioning process.
- A. Correct.
Creating the Azure OpenAI Service resource in a virtual network ensures network isolation, which aligns with the organization's security policies.
- B. Correct.
Assigning RBAC roles ensures that only authorized users or groups have access to the resource, meeting the security requirement.
- C. Incorrect.
Selecting 'Public Access Enabled' exposes the resource to the public internet, which violates network isolation and organizational security policies.
- D. Correct.
Specifying a supported region is necessary for successfully provisioning the Azure OpenAI Service resource as it is only available in specific regions.
- E. Incorrect.
While configuring a storage account may be useful for specific scenarios, it is not a mandatory requirement for provisioning Azure OpenAI Service.