A model endpoint must not be reachable from the public internet. What do you configure?
Why D is the answer
Private networking
Private networking removes public reachability. Filters and prompts do not limit network access.
In detail
- Private networking takes the endpoint off the public internet.
- Test that public access is really closed.
Use case
An illustrative scenario, not a real incident.
A bank must keep its model endpoint off the public internet. Private networking restricts it to its own network.
See it in different ways
sequenceDiagram participant A as App participant E as Microsoft Entra ID participant F as Foundry resource A->>E: Requests a token, using its managed identity E-->>A: Token A->>F: Calls with the token F->>F: Checks the role assignment
sequenceDiagram participant P0 as Internal app participant P1 as Private endpoint participant P2 as Model P0->>P1: Private request P1->>P2: Forward P2-->>P0: Reply
Key point: Private networking removes public access.
Why the other options are wrong
- A. A higher TPM limit
- TPM controls capacity.
- B. A longer system prompt
- A prompt cannot control the network.
- C. A content filter
- A filter checks content, not access.