試験AI-300 トピック1 問題43 スレッド
Microsoft AI-300のリアル試験問題集
問題 #: 43
トピック #: 1
問題 #: 43
トピック #: 1
A company ' s platform engineers manage the resource settings and governance of Microsoft Foundry.
Developers must be able to create and update project assets but must not be able to change resource-level configurations.
You need to enforce least privilege access for the engineers and developers.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Choose two .
Developers must be able to create and update project assets but must not be able to change resource-level configurations.
You need to enforce least privilege access for the engineers and developers.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Choose two .
おすすめの解答：A,C 解答を投票する
Microsoft ' s Azure AI Foundry documentation defines built-in roles scoped to the resource hierarchy. The Azure AI Administrator role grants permissions to manage the Azure AI Hub resource itself - including network settings, shared connections, quota, and governance configuration - which is appropriate for platform engineers who configure resource-level settings. The Azure AI Developer role grants permissions to create, update, and manage project-level assets such as deployments, prompt flows, fine-tuning jobs, and evaluations, without access to resource-level configuration. This precisely matches the developer requirement and enforces least privilege. Disabling Entra ID authentication (option B) violates security policy and removes the identity-based access control that makes RBAC possible. Sharing a single API key (option D) violates the least-privilege principle - all users would have identical, undifferentiated access with no audit trail.
Microsoft Learn Reference Topic: Manage access to Azure AI Foundry - Built-in roles: Azure AI Administrator and Azure AI Developer
Microsoft Learn Reference Topic: Manage access to Azure AI Foundry - Built-in roles: Azure AI Administrator and Azure AI Developer
千叶** 2026-07-04 09:50:33
コメント
他人の解答コメントを賛成するのも、その解答に一票を入れることになります。したがって、すでに同じ意見の投票コメントが存在する場合、新規コメントをする代わりに賛成することもできます。
コメントを通報する
コメント中
今すぐ 新規登録 / ログイン （無料です）。