nerdexam
Microsoft

AI-102 · Question #88

Drag and Drop Question You have a web app that uses Azure AI Search. When reviewing billing for the app, you discover much higher than expected charges. You suspect that the query key is…

The correct answer is Add a new query key.; Change the app to use the new key.; Delete the compromised key. The correct sequence creates a new query key first, then updates the app to use it (minimizing downtime by ensuring the app never loses access), and finally deletes the compromised key to revoke unauthorized access. Query keys provide read-only access to the documents…

Submitted by kevin_r· Mar 30, 2026Implement security for AI-powered search solutions, including managing API keys and ensuring minimal-privilege access to Azure AI Search resources.

Question

Drag and Drop Question You have a web app that uses Azure AI Search. When reviewing billing for the app, you discover much higher than expected charges. You suspect that the query key is compromised. You need to prevent unauthorized access to the search endpoint and ensure that users only have read only access to the documents collection. The solution must minimize app downtime. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:

Exhibit

AI-102 question #88 exhibit

Answer Area

Drag items

Add a new query key.Regenerate the secondary admin key.Change the app to use the secondary admin key.Change the app to use the new key.Regenerate the primary admin key.Delete the compromised key.

Correct arrangement

  • Add a new query key.
  • Change the app to use the new key.
  • Delete the compromised key.

Explanation

The correct sequence creates a new query key first, then updates the app to use it (minimizing downtime by ensuring the app never loses access), and finally deletes the compromised key to revoke unauthorized access. Query keys provide read-only access to the documents collection by design, which satisfies the requirement without granting excessive admin-level permissions. This approach ensures zero-downtime rotation because the app is always authenticated before the old key is invalidated.

Topics

#Azure AI Search#Key Management#Security Best Practices#Least Privilege Access

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AI-102 Practice