AI-300 Practice Question 61: Policy Disable Public Access
Microsoft Machine Learning Operations Engineer Associate (AI-300) · Test 7 · question 1 of 10
Security requires that any Azure Machine Learning workspace created in a subscription without public network access disabled is automatically changed to disable it, so that no one has to fix workspaces by hand. Which action meets the requirement?
Show answer and explanation
Answer:
Azure Machine Learning has built-in Azure Policy definitions for network access. The audit definition uses AuditIfNotExists, which only flags workspaces. The Configure Azure Machine Learning Workspaces to disable public network access definition uses DeployIfNotExists, so it modifies non-compliant workspaces to disable public access (option B).
- A is wrong because an audit effect only reports non-compliant workspaces. It does not change their configuration. - C is wrong because a lock prevents deletion of resources. It does not configure the public access setting of new workspaces. - D is wrong because removing roles blocks creation entirely for those users, and workspaces created by others would still have public access.
Reference: Audit and manage Azure Machine Learning using Azure Policy