Get Your CertAI-300PlayCompete
‹ All AI-300 questions

AI-300 Practice Question 93: Online Endpoint Entra Auth

Microsoft Machine Learning Operations Engineer Associate (AI-300) · Test 10 · question 3 of 10

Implement machine learning model lifecycle and operationshard

Client applications call a managed online endpoint by using managed identities. Security forbids shared keys, and wants the scoring permission to be checked by Azure RBAC and granted or revoked per identity. Which authentication mode should the endpoint use?

Select one answer
Show answer and explanation

Answer:

  • B. auth_mode: aad_token, with a scoring role assigned to each client identity

Managed online endpoints support key, Azure Machine Learning token, and Microsoft Entra token (aad_token) authentication. Only aad_token is checked against an RBAC scoring permission at the endpoint, so access can be granted or revoked per managed identity with role assignments (option B).

- A is wrong because the keys are still shared secrets that do not carry the caller's identity, and access cannot be managed per identity through RBAC. - C is wrong because an aml_token is issued by the workspace to anyone holding the token permission, and the token itself is not checked against an RBAC scoring permission when the endpoint is called. - D is wrong because a private endpoint restricts network paths, but the callers would still authenticate with a shared key.

Reference: Authenticate clients for online endpoints

Practice Test 10 ›

Study guides for AI-300

AI-200 exam guide: Azure AI Cloud Developer AssociateAI-200 replaced AZ-204: what the Azure AI Cloud Developer exam tests, how it differs from AI-103, price in USD and INR, format and how to prepare.
How AI Is Changing Software Jobs: Where to PrepareHow AI is changing software jobs: what history shows, the evidence on junior developers, what Klarna learned, new AI roles and five domains to prepare for.
Best MLOps certifications 2026: which test real MLOpsThe best MLOps certifications in 2026 from Microsoft, Databricks, Google and AWS, ranked by how much each exam tests MLOps, with cost and order.
Best AI certifications 2026: AWS, Google, Microsoft, ClaudeThe best AI certifications in 2026 from AWS, Google, Microsoft, Claude and Databricks, by level, with price, status and which one to take first.
Microsoft AI certification path 2026: which exam firstMicrosoft AI certification path for 2026 - AI-901, AB-730, AI-103, AI-200, AI-300, AB-100, AI-500 and GH-300 by role, and which exam to take first.
What Is RAG? How Retrieval-Augmented Generation WorksWhat RAG is and how it works: chunking, embeddings, vector search, hybrid search, reranking, GraphRAG and agentic RAG on AWS, Google and Azure.