Knowledge check

1.

You have been tasked with applying a policy to assess the state of an Azure AI Foundry deployment without interfering with its current implementation. How can you ensure the policy targets the existing Azure AI Foundry Hub?

Ensure the policy definition targets resources of type "Microsoft.MachineLearningServices/workspaces", the policy scope targets the desired Resource Group or subscription, and Policy enforcement is disabled.

Ensure the policy definition targets resources of type "Microsoft.CognitiveServices" and the policy scope targets the desired Resource Group or subscription.

Ensure the policy definition targets resources of type "Microsoft.MachineLearningServices/workspaces", the policy scope targets the desired Resource Group or subscription, and Policy enforcement is enabled.

2.

You're a cloud operations administrator responsible for ensuring compliance of AI services in Azure. You need to restrict network access to Azure AI services to enhance security. Which policy should you apply?

Azure AI Services resources should use Azure Private Link.

Azure AI Services resources should restrict network access.

Azure AI Services resources should have key access disabled (disable local authentication).

3.

You've been tasked with applying a policy that should affect an Azure OpenAI service, but not an Azure AI Search that is also deployed to the same Resource Group in an Azure subscription. How can you ensure this policy doesn't affect the Azure AI Search service?

Ensure the policy definition targets resources of type "Microsoft.Search/searchServices"

Ensure the policy definition targets resources of type "Microsoft.MachineLearningServices/workspaces"

Ensure the policy definition targets resources of type "Microsoft.CognitiveServices"

Feedback