AI-300 Certification Practice Question #7

Question

An Azure Machine Learning workspace processes sensitive training data.
The workspace must NOT be accessible from the public internet.
You need to restrict network access.
Which configuration should you implement?

Accepted Answer

To make an Azure ML workspace unreachable from the public internet, you attach a **private endpoint** (Azure Private Link) and disable public network access — the workspace is then reached only through the VNet. Firewall rules and NSGs filter traffic but still leave a public endpoint; service endpoints secure the path to a service but don't privatize the workspace itself.

More AI-300 practice questions