Discuss Microsoft AI-300 Exam Topic 1 Question 5

A company's platform engineers manage the resource settings and governance of Microsoft Foundry.

Developers must be able to create and update project assets but must not be able to change resource-level configurations.

You need to enforce least privilege access for the engineers and developers.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Choose two.

AAssign a resource-level Azure AI Administrator role to the platform engineers.

BDisable Microsoft Entra ID authentication for the Microsoft Foundry resource.

CAssign the Azure AI Developer role to the developers.

DShare a single API key across all teams.

Suggested Answer: A, C

Get Premium AI-300 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

Vicky 1 month ago

I feel confident about this solution.

Brock 1 month ago

Exactly! A and C keep it secure and functional.

Nana 1 month ago

True, B disables security, and D is risky for sharing keys.

Vicky 2 months ago

Right! B and D don’t help with least privilege at all.

Brock 2 months ago

It’s about managing roles properly. They need access to do their jobs.

Nana 2 months ago

I'm not sure about A. What if it gives too much power?

Vicky 2 months ago

Agreed! A gives engineers control, while C lets developers create assets without changing settings.

Brock 2 months ago

I think A and C are the best choices. Engineers need admin roles, and developers should have limited access.

Stevie 3 months ago

Least privilege is key, but D) seems off.

Alonso 3 months ago

Wait, sharing an API key? That sounds risky!

Latricia 3 months ago

I don't think B) is a good idea, we need authentication.

Linwood 3 months ago

C) makes sense for developers too!

Gwenn 3 months ago

A) is definitely the right move for platform engineers.

Werner 3 months ago

Disabling Microsoft Entra ID authentication seems risky; I don't think that's the right approach for maintaining security.

Latrice 4 months ago

I practiced a similar question where we had to enforce least privilege access, and I think sharing a single API key is definitely not a good idea.

Cordelia 4 months ago

I'm not entirely sure, but I feel like the Azure AI Developer role could be a good fit for the developers since they need to create and update project assets.

Dalene 4 months ago

I remember that the Azure AI Administrator role is more about managing resources, so I think that might be the right choice for the engineers.

Microsoft AI-300 Exam - Topic 1 Question 5 Discussion