Exam AI-102 All QuestionsBrowse all questions from this exam
Go to Exam
Question 15

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You create a web app named app1 that runs on an Azure virtual machine named vm1. Vm1 is on an Azure virtual network named vnet1.

You plan to create a new Azure Cognitive Search service named service1.

You need to ensure that app1 can connect directly to service1 without routing traffic over the public internet.

Solution: You deploy service1 and a public endpoint, and you configure an IP firewall rule.

Does this meet the goal?

    Correct Answer: B

    To ensure that app1 can connect directly to service1 without routing traffic over the public internet, deploying service1 with a public endpoint and configuring an IP firewall rule would not meet the goal. This would still involve routing traffic over the public internet. Instead, you should deploy service1 with a private endpoint and utilize Azure Private Link, which enables secure access to the service from within the virtual network without exposing it to the public internet.

Discussion
acsomaOption: B

appeared in august exam

zellckOption: B

B is the answer. https://learn.microsoft.com/en-us/azure/search/service-create-private-endpoint#why-use-a-private-endpoint-for-secure-access Private Endpoints for Azure Cognitive Search allow a client on a virtual network to securely access data in a search index over a Private Link. The private endpoint uses an IP address from the virtual network address space for your search service. Network traffic between the client and the search service traverses over the virtual network and a private link on the Microsoft backbone network, eliminating exposure from the public internet.

Ab_SOption: B

Answer is correct. Instead created private end point and private link.

timmayy54Option: B

Correct Answer is B. No. this scenario routes over public internet, to do this without touching public internet you would use a private endpoint on a vnet then private link to access it.

nanaw770Option: B

B is the correct answer.

EltoothOption: B

B is correct answer : No.

mikegsmOption: B

SEEMS NO

AouatefOption: B

the answer is B because the traffic should not be routed over internet. "By default, Azure AI Search is configured to allow connections over a public endpoint. Access to a search service through the public endpoint is protected by authentication and authorization protocols, but the endpoint itself is open to the internet at the network layer for data plane requests." https://learn.microsoft.com/en-us/azure/search/service-configure-firewall#when-to-configure-network-access

gary_cooperOption: B

B seems correct

takaimomoGcupOption: B

This answer is no.

rdemontisOption: B

correct answer

mohamedbaOption: B

Again NO

sumanshuOption: B

Vote for 'B'. Private Link is sufficient

RavnitOption: B

Was on exam 27/11/2021

dinesh_tngOption: A

Yes, is the answer.