AI-102 Question 89
Single answerYou are designing an Azure AI solution that involves sensitive customer data being exchanged between your application and an Azure OpenAI Service deployment. To ensure secure and private communication between your application and the Azure OpenAI Service, what should you implement?
- A
Enable Azure Virtual Network (VNet) integration for the Azure OpenAI Service.
- B
Use HTTP communication instead of HTTPS to simplify network configuration.
- C
Enable Private Endpoint for the Azure OpenAI Service.
- D
Store sensitive data in Azure Blob Storage without encryption.
Show answer and explanation
Correct answer: C
Explanation
To ensure private and secure communication with the Azure OpenAI Service, enabling a Private Endpoint is the best solution. Private Endpoints allow traffic between your application and the Azure service to remain entirely within the Azure network, avoiding exposure to public internet. While other options may improve security, they either do not specifically address private communication or introduce vulnerabilities.
- A. Incorrect.
Azure Virtual Network (VNet) integration is a good practice for ensuring network isolation, but it does not directly ensure communication with the Azure OpenAI Service is private. Private Endpoints are more specific for this purpose.
- B. Incorrect.
HTTP communication is insecure as it transmits data in plaintext, making it unsuitable for sensitive data. HTTPS should always be used for encrypted communication.
- C. Correct.
Enabling Private Endpoint ensures private and secure communication between your application and the Azure OpenAI Service by routing traffic through a private IP address.
- D. Incorrect.
Storing sensitive data in Azure Blob Storage without encryption is a security risk, as unencrypted data can be accessed if storage is compromised. This does not address private communication.