Data Residency & Governance — AI-300 Practice Question
A representative Microsoft Machine Learning Operations Engineer Associate (AI-300) exam question on Data Residency & Governance. Work through it below, then read why each option is right or wrong.
This question is part of the free Microsoft Machine Learning Operations Engineer Associate practice test.
Short answer
The correct answer is D. Configure Azure Policy to enforce that all resources are deployed in the required region and audit deployments that violate the policy.
Azure Policy enforces resource location compliance and provides audit trails for governance. It is the standard control for data residency requirements across multiple services. Encryption at rest does not enforce geographic boundaries. Row-level security filters data but does not control where processing occurs. VNet isolation is a network control but does not prevent cross-region API calls if endpoints are multi-region.
The Question
Your organization requires that all generative AI agents comply with data residency regulations and must not send customer data outside a specific geographic region. You are deploying an agent that uses Azure OpenAI, Azure AI Search, and a custom model endpoint. What is the primary governance control you should implement?
Why D is correct
Azure Policy enforces resource location compliance and provides audit trails for governance. It is the standard control for data residency requirements across multiple services. Encryption at rest does not enforce geographic boundaries. Row-level security filters data but does not control where processing occurs. VNet isolation is a network control but does not prevent cross-region API calls if endpoints are multi-region.
Why the other options are wrong
Option A does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (D) is the only one that fully meets every constraint stated in the question.
Option B does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (D) is the only one that fully meets every constraint stated in the question.
Option C does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (D) is the only one that fully meets every constraint stated in the question.
Key idea: Data Residency & Governance
Azure Policy enforces resource location compliance and provides audit trails for governance. It is the standard control for data residency requirements across multiple services. Encryption at rest does not enforce geographic boundaries. Row-level security filters data but does not control where processing occurs. VNet isolation is a network control but does not prevent cross-region API calls if endpoints are multi-region. On the AI-300 exam, questions in the "Design and implement a GenAIOps infrastructure" domain test whether you can map a scenario's constraints to the right choice. Read the requirement carefully, eliminate options that violate any single constraint, and pick the one that satisfies all of them with the least operational overhead.
Ready to see how you'd score?
Take the free practice quiz and find out which Microsoft Machine Learning Operations Engineer Associate domains you need to focus on. No signup required.
Practice 5 similar questions
Same cert, same or adjacent domain. Use these after reviewing the explanation.
Related Microsoft Machine Learning Operations Engineer Associate Practice Questions
Official sources used
Verify program and exam details at the source before scheduling.