AI-102 Question 87
Single answerYou are designing a chatbot solution using Azure Bot Service for a healthcare organization. The chatbot needs to handle sensitive patient information and comply with data privacy regulations. You decide to implement secure communication between the bot and the Azure OpenAI Service. Which approach should you use to ensure private communications?
- A
Enable Virtual Network (VNet) integration and configure private endpoints for Azure OpenAI Service.
- B
Enable public access to Azure OpenAI Service with an API key for authentication.
- C
Use a shared access signature (SAS) token to secure the communication.
- D
Encrypt all communication between the bot and Azure OpenAI Service using SSL/TLS.
Show answer and explanation
Correct answer: A
Explanation
To manage private communications effectively, especially when handling sensitive data like patient information, it is critical to use Virtual Network (VNet) integration with private endpoints. This ensures that all communication between the bot and the Azure OpenAI Service is routed through a secure, private network and does not traverse the public internet. While authentication methods like API keys and encryption protocols like SSL/TLS are important for security, they do not provide private communication by themselves.
- A. Correct.
Enabling Virtual Network (VNet) integration and configuring private endpoints ensures that the communication between the bot and Azure OpenAI Service remains secure and does not traverse the public internet, which is essential for handling sensitive data.
- B. Incorrect.
While using an API key provides secure authentication, it does not ensure private communication, as the service may still be accessed over the public internet.
- C. Incorrect.
Shared access signatures (SAS) are typically used for granting temporary access to Azure Storage resources, not for securing communication with Azure OpenAI Service.
- D. Incorrect.
Encrypting communication with SSL/TLS is a general best practice, but it does not ensure private communication as the data may still traverse the public internet.