AI-102 Question 50
Select 3You are integrating Azure AI services, specifically Azure Cognitive Services, into a CI/CD pipeline to ensure automated deployment and testing. Which steps are essential for securely managing the API keys and ensuring the AI service is properly integrated within the pipeline?
- A
Store the Azure Cognitive Services API keys in Azure Key Vault and retrieve them during pipeline execution.
- B
Embed the Azure Cognitive Services API keys directly in the pipeline YAML file for easy access.
- C
Set up automated tests in the pipeline to validate the functionality of the AI service using mock data.
- D
Use Azure DevOps service connections to authenticate with Azure Cognitive Services during deployment.
- E
Manually update the API keys in the production environment after every deployment.
Show answer and explanation
Correct answers: A, C, D
Explanation
To securely and effectively integrate Azure AI services like Azure Cognitive Services into a CI/CD pipeline, it is critical to follow best practices for managing secrets (e.g., using Azure Key Vault), automate the testing process for the AI service integration, and use Azure DevOps service connections for secure authentication. These steps ensure a secure, automated, and reliable pipeline.
- A. Correct.
Storing API keys in Azure Key Vault ensures they are securely managed and can be retrieved dynamically during pipeline execution, adhering to best practices for secure secrets management.
- B. Incorrect.
Embedding API keys directly in the pipeline YAML file exposes them to potential security risks and is not a recommended practice.
- C. Correct.
Automated tests using mock data ensure that the AI service behaves as expected during the CI/CD pipeline execution, validating its integration.
- D. Correct.
Using Azure DevOps service connections provides a secure and automated way to authenticate with Azure Cognitive Services, making the integration process seamless and secure.
- E. Incorrect.
Manually updating API keys after each deployment is error-prone and inefficient. It does not align with the principles of automation in CI/CD pipelines.