Implement Azure API Management AZ-204 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company exposes a public API through Azure API Management (APIM). The API is used by external developers who have subscription keys. The company wants to block a specific developer who has violated the terms of service. The developer's subscription key is known. What should the developer do to block this developer?

   • AAdd an IP filter policy to block the developer's IP address.
   • BDelete the developer's account in APIM.
   • CSuspend the developer's subscription in APIM.
   • DChange the subscription key for the product.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A developer is troubleshooting an API in Azure API Management that is returning 500 errors. The backend is healthy. The developer suspects that a policy is causing the issue. What is the best way to diagnose the problem?

   • AReview the Azure Monitor metrics for the API to see if there are any spikes.
   • BEnable tracing on the API and review the trace logs to see which policy fails.
   • CDisable all policies and test the API to see if it works.
   • DCheck the API Management logs in the Azure portal for any error messages.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company exposes a legacy SOAP service to partners. They are migrating to Azure API Management and want to expose the same operations as a RESTful API while keeping the SOAP backend unchanged. Partners must authenticate with an OAuth 2.0 token issued by Azure AD. What should the developer configure in API Management?

   • AImport the SOAP service as a pass-through API and configure an OAuth 2.0 server in the developer portal.
   • BCreate a SOAP-to-REST API by importing the WSDL and adding a validate-jwt policy.
   • CCreate a REST API with a mock response and set the subscription key requirement to OAuth 2.0.
   • DCreate a REST API and attach a set-backend-service policy pointing to the SOAP endpoint.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A developer is adding a new endpoint to an existing API in Azure API Management. The endpoint returns a JSON object with a property that is not documented in the OpenAPI definition. The team wants the developer portal to show accurate documentation for this endpoint. What should the developer do?

   • AAdd a description to the API in the Azure portal and save it.
   • BCreate a new API and import the updated OpenAPI definition, then delete the old API.
   • CEdit the OpenAPI definition in API Management to include the new property and republish the API.
   • DUse the test console to call the endpoint and then click 'Save as documentation'.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An API in Azure API Management is used by a partner application. The partner occasionally sends requests with an invalid API key, and the backend still processes them because the API does not currently validate the key. The developer wants to ensure that requests with invalid subscription keys are rejected before reaching the backend. What should they do?

   • AAdd a validate-subscription-key policy to the API's inbound processing.
   • BEnable the 'Require subscription' setting on the API.
   • CAdd a check-header policy to verify the Ocp-Apim-Subscription-Key header exists.
   • DConfigure the backend to validate the subscription key.
   Reveal Solution Discussion Select an answer first