AI-300 Certification Practice Question #16

Question

A financial services company is deploying Microsoft Foundry to host generative AI workloads that process regulated customer data. The Microsoft Foundry environment must prevent any public network exposure while still allowing services managed by Microsoft Foundry to communicate with dependent Azure resources.
Security auditors require that all traffic to and from the Microsoft Foundry resource remain on private networks, with no public endpoints available.
You need to configure the Microsoft Foundry environment so that network access is restricted while maintaining full platform functionality.
Which two actions should you perform? Each correct answer presents part of the solution. Choose two.
NOTE: Each correct selection is worth one point.

Accepted Answer

The question asks for **two** actions to keep all traffic on private networks with no public endpoints, *without* breaking platform functionality. A managed virtual network (A) provides the private network backbone and lets Foundry-managed services reach dependent Azure resources privately, while disabling public network access (D) removes the public endpoints. Disabling *all* inbound access (E) would break the platform (the requirement is no *public* access, not no access); API-key auth (B) and a separate subscription (C) don't address network isolation. The Suggested Answer only flags D, but the question requires two selections and the community Most Voted (AD, 4 votes) plus MS Learn confirm A as the partner.

More AI-300 practice questions