Skip to Content

AI-102: What is the First Step to Securely Authenticate Azure AI Speech with Microsoft Entra?

By: Author Alex Lim

Posted on

Categories Exam

Learn the essential first step to securely authenticate Azure AI Speech services using Microsoft Entra ID. Follow best practices for creating a custom subdomain.

Table of Contents

Question

Your organization, Xerigon Corporation, has a Microsoft Entra environment. They are developing an app that will use Azure AI Speech. As part of the implementation, you need to ensure that the application can securely authenticate to the Azure AI Speech service using Microsoft Entra.

You are configuring a Speech resource and creating a Speech SDK configuration object. Both the resource and the object will use Microsoft Entra ID for authentication.

What would be the first step when implementing authentication for the Azure AI Speech service using Microsoft Entra?

A. Get a Microsoft Entra access token.
B. Create the Speech SDK configuration object.
C. Assign a role to a service principal.
D. Create a resource with a custom subdomain.

Answer

D. Create a resource with a custom subdomain.

Explanation

In the given scenario, your first step would be to create a resource with a custom subdomain. The custom subdomain uniquely identifies your Speech service instance and is necessary for setting up authentication and configuring the service. It establishes the Speech service resource with a unique identifier, allowing further configuration. To create a resource, you would follow the below outlined steps:

  1. Log in to the Azure portal.
  2. Navigate to Create a resource.
  3. Search for “Speech,” and select the Speech service.
  4. Fill in the necessary details, including the custom subdomain name, subscription, resource group, and region.
  5. Click Review + Create, and then Create to deploy the resource.

You would assign roles to configure the Speech resource for Microsoft Entra authentication. You can create a custom domain to configure your Speech resource with Microsoft Entra authentication from Azure AI services using the Azure portal, PowerShell, or CLI. To create a custom domain name using the Azure portal:

  1. Log in to the Azure portal.
  2. Navigate to the required Speech resource you created.
  3. In the Resource Management group on the left pane, click Networking.
  4. On the Firewalls and virtual networks tab, click Generate Custom Domain Name.
  5. In the Generate Custom Domain Name box, mention a custom domain name. The custom domain will be similar to the following: https://{yourcustomame}.cognitiveservices.azure.com.
  6. Select Keys and Endpoint in the Resource management group.

After creating the custom domain, assign a role to a service principal. You would assign either the Cognitive Services Speech Contributor or Cognitive Services Speech User role for Microsoft Entra authentication for Speech services.

Getting a Microsoft Entra access token is not the first step in the given scenario. This step happens once you have assigned the roles. The access token is used to authenticate and authorize requests to the Speech service. Obtaining a Microsoft Entra access token is crucial for authenticating API requests to the Azure AI Speech service. This step involves acquiring a token using the Microsoft Authentication Library (MSAL) once the resource and permissions have been set up.

Creating the Speech SDK configuration object is not the first step in the given scenario. This step is necessary for integrating the Speech service into your application. However, it requires that the Speech resource and authentication settings are already in place.

Microsoft Azure AI Engineer Associate AI-102 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Azure AI Engineer Associate AI-102 exam and earn Microsoft Azure AI Engineer Associate AI-102 certification.