Implement Azure API Management AZ-204 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company uses Azure API Management (APIM) to expose APIs to external partners. The company wants to ensure that only partners who have been authenticated by the company's identity provider can access the APIs. The developer has created the APIs and added them to a product. What should the developer do to enforce authentication?

   • ARequire subscription keys on the product and validate them in the APIs.
   • BConfigure the developer portal to require login before accessing the APIs.
   • CAdd a validate-jwt policy to the APIs to check the token issued by the identity provider.
   • DUse a client certificate policy to authenticate partners.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is used to control which products a developer can access in Azure API Management?

   • AAzure role-based access control (RBAC) roles
   • BAPI Management policy expressions
   • CNetwork security group (NSG) rules
   • DSubscription keys
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In the Azure portal, which of the following is a valid way to create a new Azure API Management instance?

   • AUse the 'Networking' section of a virtual network to provision an API Management instance
   • BSearch for 'API Management' in the Azure Marketplace and select 'Create'
   • CCreate a new 'API Management' resource from the 'App Services' blade
   • DDeploy an API Management instance from the 'Azure Active Directory' admin center
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of adding descriptions and examples to an API operation in Azure API Management?

   • ATo improve the generated developer documentation
   • BTo enable caching for the operation
   • CTo change the backend URL of the API
   • DTo enforce rate limits on the operation
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An organization uses Azure API Management to expose internal APIs. They want to allow only authenticated users from their Azure AD tenant to call the APIs, and they want to prevent unauthenticated requests from reaching the backend. Which combination of configurations should they implement?

   • AConfigure the backend to require a client certificate and use a validate-client-certificate policy.
   • BAdd an ip-filter policy that allows only the Azure AD service IP ranges.
   • CEnable OAuth 2.0 in the developer portal and set the API to require a subscription key.
   • DRequire a subscription key and add a validate-jwt policy that checks the Azure AD issuer and audience.
   Reveal Solution Discussion Select an answer first