AI-102 Question 71
Select 3You are managing access keys for an Azure Cognitive Services resource in a production environment. To minimize the risk of key compromise while maintaining uninterrupted service, which actions should you perform?
- A
Regenerate one of the keys and immediately update the application to use the new key
- B
Delete one of the keys to enforce single-key usage for better security
- C
Regenerate both keys simultaneously to ensure they are secure
- D
Periodically rotate keys and update the application configuration accordingly
- E
Use Azure Key Vault to securely store and manage the keys
Show answer and explanation
Correct answers: A, D, E
Explanation
Managing account keys for Azure Cognitive Services requires careful planning to balance security and service continuity. Best practices include periodically rotating keys, regenerating one key at a time to avoid downtime, and leveraging Azure Key Vault for secure storage and management. Deleting keys or regenerating both keys simultaneously in a production environment can disrupt services and are not recommended. Following these practices ensures that your application remains secure and operational.
- A. Correct.
Regenerating one of the keys ensures you have a fresh key while the other key remains active for the application, allowing uninterrupted service. This is a best practice for minimizing disruption during key rotation.
- B. Incorrect.
Deleting a key without proper planning can lead to service interruptions, especially if the application relies on the deleted key. This is not recommended.
- C. Incorrect.
Regenerating both keys simultaneously will cause immediate service downtime as the application will lose access. This approach is not suitable for production environments.
- D. Correct.
Periodically rotating keys ensures that keys are refreshed regularly, reducing the risk of compromise over time. It is a fundamental security practice.
- E. Correct.
Using Azure Key Vault provides a secure and centralized way to manage and store keys, improving security and simplifying key management.