AI-102 Question 84
Select 3You are implementing an Azure AI solution and need to secure access to an Azure Cognitive Services resource. The development team requires programmatic access to the resource, and you want to ensure the connection is secure and follows best practices. Which authentication method(s) should you configure to achieve this?
- A
Use API keys generated by the Azure portal
- B
Configure a managed identity for the application accessing the service
- C
Enable anonymous access to the resource for simplicity
- D
Generate a shared access signature (SAS) token for the resource
- E
Use Azure Active Directory (Azure AD) for authentication
Show answer and explanation
Correct answers: A, B, E
Explanation
To manage authentication for Azure Cognitive Services securely, you should use API keys, Azure AD, or managed identities. Managed identities and Azure AD provide enhanced security by eliminating the need for hardcoded credentials and integrating with Azure's identity management. API keys are also a valid option but require careful management to prevent misuse. Anonymous access and SAS tokens are not suitable or supported for securing Azure Cognitive Services.
- A. Correct.
API keys are a valid method for authenticating access to Azure Cognitive Services and are commonly used for programmatic access. However, they should be securely stored and managed.
- B. Correct.
Managed identities are a secure and preferred method for authenticating Azure resources without requiring credentials in the code. This is a best practice for secure access.
- C. Incorrect.
Anonymous access is not supported for Azure AI services, as it poses significant security risks. This option does not align with best practices.
- D. Incorrect.
Shared access signatures (SAS) tokens are not applicable for Azure Cognitive Services. They are typically used for resources like Azure Storage.
- E. Correct.
Azure Active Directory (Azure AD) is a secure and robust method for managing authentication and is considered a best practice for many scenarios, including user and application access.