Microsoft · AI-500
Security, Key Vault, and AI red teaming
AI-500 · Lesson 14 of 16 · 2:00:29
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AI-500 exam (Microsoft Certified: Multi-Agent AI Solutions Expert). In this lesson: resource access with agent identities, least-privilege RBAC, private networking, Azure Policy, and Conditional Access, authentication flows (on-behalf-of with delegated permissions, client credentials, authorization code with PKCE, API keys as a stored, rotated fallback), secrets, keys, and certificates in Azure Key Vault with rotation and customer-managed keys, and shift-left security with the AI Red Teaming Agent. Includes three original practice questions.
Preview the topics
- Contoso’s itinerary agent must read each traveler’s corporate travel policy in SharePoint, and travelers may only see their own company’s policy. Which authentication flow fits?
- A Contoso agent reads a partner API key from Key Vault, and the security team wants the key replaced every 90 days without downtime. What should the design include?
- Before launch, Contoso wants to know whether its refund agent can be talked into issuing refunds that policy forbids. What should the team run?