Correct Answers: B, D and E
Option A is incorrect because private links provide consumer and services connectivity using Azure backbone, thereby avoiding access through public IP address. This reduced the risk to data in transit.
Option B is correct because enabling encryption using a customer managed key gives you control over the lifecycle of the key. That way you can rotate the keys in accordance with your compliance policies.
Option C is incorrect because disabling local authentication improves security. Instead you use Azure Active Directory for authentication.
Option D is correct because disabling public network access safeguards you from exposing your data over the internet. Instead use private links.
Option E is correct because it gives you control over your cognitive services data at rest.
Reference:
To learn more about Azure cognitive services built-in policies, use the link given below:
https://docs.microsoft.com/en-us/azure/cognitive-services/policy-reference