A retail company is moving its Foundry-hosted customer chatbot from a development subscription into production, where it will handle real customer conversation data. The security team wants to reduce the deployment's exposure to the public internet and ensure that only authorized engineers can view or rotate the encryption keys protecting stored conversation logs. (Select TWO.)
Select all correct answers, then click Submit.
Short Explanation
When you move a chatbot into production with real customer data, you need to lock down network reachability and key governance separately. Configure a private endpoint so the deployment is only reachable through the company's virtual network, and apply customer-managed keys with role-based access control so only authorized engineers can view or rotate the keys. The temperature and context-window options don't address security or key access.
Full Explanation
A private endpoint restricts network reachability to the company's own virtual network instead of the open internet, directly reducing public exposure, while customer-managed keys combined with role-based access control let the security team control exactly who is authorized to view or rotate the encryption keys protecting stored conversation logs, satisfying both stated requirements together. The temperature option is incorrect because temperature is a generation parameter that affects how varied response wording is, it has no relationship to network exposure or key management access. The larger context window option is incorrect because context window size determines how much conversation text the model can process per session, it does not control network reachability or who can manage encryption keys. Since the security team's two goals are limiting internet exposure and restricting key management access, the two controls that map directly onto those goals, network isolation through a private endpoint and key access governance through customer-managed keys with role-based access control, are the correct selections, while the generation-parameter and capacity-related options address unrelated concerns.