AI-102 Question 438
Select 3You are tasked with provisioning an Azure OpenAI Service resource for your organization. The solution must comply with organizational policies that require controlled access to the resource, cost management, and the ability to scale the service as needed. Which steps should you take to correctly provision the Azure OpenAI Service?
- A
Assign a role-based access control (RBAC) role to users who need access to the Azure OpenAI Service resource.
- B
Select an appropriate pricing tier during the provisioning process to meet performance and scalability requirements.
- C
Deploy the Azure OpenAI Service resource in a region that supports OpenAI models and matches the organization's compliance needs.
- D
Enable the 'Always Encrypted' feature to secure data transfers between the Azure OpenAI Service and client applications.
- E
Create a managed identity for the Azure OpenAI Service resource to securely access other Azure services.
Show answer and explanation
Correct answers: A, B, C
Explanation
To provision an Azure OpenAI Service resource effectively, you must ensure controlled access through RBAC, select a pricing tier that aligns with performance and scalability needs, and deploy the service in a region that supports OpenAI models while meeting compliance requirements. Features like 'Always Encrypted' and managed identities are unrelated to the core provisioning process for this service.
- A. Correct.
Correct: Assigning RBAC roles ensures that only authorized users have access to the Azure OpenAI Service resource, helping to meet organizational policies for controlled access.
- B. Correct.
Correct: Selecting an appropriate pricing tier is essential to managing costs and ensuring the service can scale to meet performance requirements.
- C. Correct.
Correct: Deploying the service in a supported region ensures compliance with organizational and regulatory requirements and ensures that OpenAI models can be used.
- D. Incorrect.
Incorrect: 'Always Encrypted' is not a feature applicable to the Azure OpenAI Service resource; it's typically used for securing SQL Server data in transit and at rest.
- E. Incorrect.
Incorrect: While managed identities are useful for securely accessing other Azure services, they are not required for provisioning the Azure OpenAI Service resource itself.