Practice question 51 of 498 · medium
An AI workload uses private endpoints but its managed identity can read every department database. What is the best finding?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Network isolation is present, but data permissions must be reduced to the approved workload scope
Network isolation is present, but data permissions must be reduced to the approved workload scope: Private endpoints do not narrow the identity authorization boundary. Private endpoints make the broad identity assignment harmless: An authorized private connection can still access excessive data. Remove identity authentication and embed a shared key in prompts: This weakens credential handling and access governance. Use only content filtering to authorize individual database rows: Content classification does not replace database authorization.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.