Skip to Content

AI-102: How to Securely Integrate Azure AI Search with Your Web App Using Private Endpoints?

Learn how to securely integrate Azure AI Search with your web app using private endpoints and Microsoft backbone network. Perfect for mastering AI-102 certification concepts.

Table of Contents

Question

Xerigon Corporation has created a web app, XerigonApp, that is used by their employees to track products. This app resides on a web server VM named XerigonWeb in the Azure cloud that is located on a virtual network named VNet1.

You plan to integrate XerigonApp with Azure AI Search. You create a new Azure AI Search service named XerigonAI. XerigonSearch needs to connect to XerigonAI. You need to ensure the following:

Traffic between VNet1 and XerigonAI must travel the Microsoft backbone network.
Protection against data leakage must be ensured.
What should you do? (Choose two.)

A. Configure Azure ExpressRoute.
B. Create a private endpoint on VNet1 for XerigonSearch.
C. Create a public endpoint on VNet1 for XerigonSearch.
D. Configure Azure VPN Gateway.
E. Configure Azure Private Link.

Answer

B. Create a private endpoint on VNet1 for XerigonSearch.
E. Configure Azure Private Link.

Explanation

You would create a private endpoint on VNet1, and configure Azure Private Link. Private endpoints provide secure access to a virtual network, and the Azure service can use a private IP address from the virtual network space. When you combine a private endpoint with Azure Private Link, the network traffic between the virtual network and the service traverses the Microsoft Azure backbone network, not the public Internet.

You would not configure a public endpoint. Public endpoints are exposed to the Internet, making them susceptible to data leakage.

You would not configure Azure VPN Gateway. The Azure VPN Gateway service guides encrypted traffic between on-premises locations and an Azure virtual network over the public Internet, not the Microsoft backbone.

You would not configure Azure ExpressRoute. The purpose of ExpressRoute is to configure a dedicated private connection between an on-premises Active Directory domain infrastructure and Azure datacenters. Azure ExpressRoute does not provide private connectivity between Azure VNets.

Microsoft Azure AI Engineer Associate AI-102 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Azure AI Engineer Associate AI-102 exam and earn Microsoft Azure AI Engineer Associate AI-102 certification.