AI-102 Question 83
Select 2You are developing an application that uses Azure Cognitive Services to perform sentiment analysis. You want to secure the Azure AI Service resource by using authentication methods that minimize the risk of unauthorized access. Which of the following authentication methods should you implement?
- A
Use Azure Active Directory (Azure AD) for role-based access control (RBAC).
- B
Generate API keys and distribute them to application developers.
- C
Enable Managed Identity for the application interacting with the Azure AI Service resource.
- D
Use anonymous access to allow flexibility in testing and development.
- E
Configure a Virtual Network (VNet) to restrict access to the Azure AI Service resource.
Show answer and explanation
Correct answers: A, C
Explanation
To manage authentication securely for an Azure AI Service resource, the best approaches are using Azure Active Directory (Azure AD) for role-based access control (RBAC) and enabling Managed Identity. Azure AD ensures proper user and application-level access management, while Managed Identity removes the need for hardcoding credentials. Other options, like API keys and anonymous access, are less secure, and VNets are focused on network-level security rather than authentication.
- A. Correct.
Azure Active Directory (Azure AD) is a highly secure and scalable authentication method. Using RBAC allows you to grant least-privileged access, ensuring only authorized users and applications can access the resource.
- B. Incorrect.
While API keys can be used for authentication, distributing them to developers increases the risk of leakage. API keys are less secure compared to Managed Identity or Azure AD-based authentication.
- C. Correct.
Managed Identity simplifies authentication and eliminates the need to store credentials in the code. It provides a secure way for Azure resources to authenticate with Azure AI Service resources without requiring explicit credentials.
- D. Incorrect.
Anonymous access is not a secure option and is not recommended for production environments. It increases the risk of unauthorized access to the Azure AI Service resource.
- E. Incorrect.
While configuring a Virtual Network (VNet) enhances security by restricting network-level access, it is not an authentication method. It complements authentication mechanisms but does not replace them.