A security engineer is configuring Azure OpenAI Service and needs to enforce that all connections use TLS 1.2 or higher. The organization also wants to disable older cipher suites. Which Azure feature controls the minimum TLS version for Azure OpenAI Service?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because Azure Cognitive Services (including Azure OpenAI Service) resources have a configurable 'Minimum TLS version' setting at the resource level that can be set to TLS 1.0, 1.1, or 1.2. Setting this to TLS 1.2 ensures that connections using older protocol versions are rejected.
Full explanation below image
Full Explanation
B is correct because Azure Cognitive Services (including Azure OpenAI Service) resources have a configurable 'Minimum TLS version' setting at the resource level that can be set to TLS 1.0, 1.1, or 1.2. Setting this to TLS 1.2 ensures that connections using older protocol versions are rejected. This configuration is available in the Azure portal under the resource's networking settings or via ARM templates. A is wrong because Azure Front Door WAF policy TLS settings apply to the Front Door endpoint if you route traffic through Front Door; they do not directly control the TLS version of the Azure OpenAI Service endpoint itself. C is wrong because Application Gateway SSL policies apply to the Application Gateway listener, not to the Azure OpenAI backend service. D is wrong because while Azure Policy can audit TLS version compliance, the actual enforcement setting is on the individual resource, not through Policy directly.