AI-102 Question 72
Single answerYou are managing an Azure Cognitive Services account that uses keys for authentication. One of your team members reports that an account key might have been exposed. What is the best course of action to secure the account?
- A
Regenerate the exposed key and update your applications to use the new key.
- B
Delete the Azure Cognitive Services account and create a new one.
- C
Disable the exposed key temporarily while investigating.
- D
Switch to using Azure Active Directory (Azure AD) authentication instead of account keys.
Show answer and explanation
Correct answer: A
Explanation
If an account key is exposed, regenerating the key is the most effective and immediate way to secure the account. It invalidates the compromised key and provides a new one that can be updated in your applications. While transitioning to Azure AD authentication is a best practice for enhanced security, it does not mitigate the current risk associated with the exposed key.
- A. Correct.
Regenerating the exposed key is the recommended way to secure the account because it invalidates the old key and provides a new one that applications can use.
- B. Incorrect.
Deleting and recreating the account is unnecessary and inefficient, as it would disrupt services and require reconfiguration.
- C. Incorrect.
Azure Cognitive Services does not provide an option to temporarily disable a specific account key. This option is not feasible.
- D. Incorrect.
Switching to Azure AD authentication is a good long-term solution but does not address the immediate issue of securing the exposed key.