AI-102 Question 90
Select 3You are designing an Azure AI solution for a healthcare provider that needs to ensure private communication between its on-premises systems and an Azure-hosted bot. The solution must comply with strict data privacy regulations, prevent exposure of sensitive data on the public internet, and minimize latency. Which of the following steps should you take to ensure secure and private communication?
- A
Configure the bot to use Azure Private Endpoint for communication.
- B
Enable Azure Front Door to route bot traffic.
- C
Establish a VPN connection between the on-premises network and Azure.
- D
Use Azure Application Gateway with Web Application Firewall (WAF) for bot traffic.
- E
Implement Azure Bot Service Direct Line App Service Extension with a private link.
Show answer and explanation
Correct answers: A, C, E
Explanation
To ensure private communication in compliance with strict data privacy regulations, you should leverage Azure Private Endpoint to restrict bot communication to the private network, establish a VPN connection for secure on-premises-to-Azure traffic, and use the Direct Line App Service Extension with a private link to manage bot communication securely. Other options like Azure Front Door or Application Gateway with WAF focus on performance or security at the public edge rather than enabling private communication.
- A. Correct.
Using Azure Private Endpoint ensures that the bot communicates through a private IP address, avoiding exposure to the public internet, which is essential for private communication.
- B. Incorrect.
Azure Front Door is primarily used for global traffic routing and acceleration but does not ensure private communications or restrict exposure to the public internet.
- C. Correct.
Establishing a VPN connection creates a secure and private network tunnel between the on-premises systems and Azure, which aligns with the requirement of private communication.
- D. Incorrect.
Azure Application Gateway with WAF adds protection against web vulnerabilities but does not ensure private communication as it can still expose traffic to the public internet.
- E. Correct.
The Direct Line App Service Extension with a private link enables secure communication between the bot and on-premises systems by using private network connectivity.