nerdexam
Microsoft

AZ-204 · Question #194

You provide an Azure API Management managed web service to clients. The back-end web service implements HTTP Strict Transport Security (HSTS). Every request to the backend service must include a…

The correct answer is A. Basic Authentication C. Certificate Authentication. Authenticate with Basic - Authenticate with a backend service using Basic authentication. Authenticate with client certificate - Authenticate with a backend service using client certificates. Authenticate with managed identity - Authenticate with the managed identity for the…

Submitted by noor.lb· Mar 30, 2026Connect to and consume Azure services and third-party services

Question

You provide an Azure API Management managed web service to clients. The back-end web service implements HTTP Strict Transport Security (HSTS). Every request to the backend service must include a valid HTTP authorization header. You need to configure the Azure API Management instance with an authentication policy. Which two policies can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options

  • ABasic Authentication
  • BDigest Authentication
  • CCertificate Authentication
  • DOAuth Client Credential Grant

How the community answered

(49 responses)
  • A
    80% (39)
  • B
    6% (3)
  • D
    14% (7)

Explanation

Authenticate with Basic - Authenticate with a backend service using Basic authentication. Authenticate with client certificate - Authenticate with a backend service using client certificates. Authenticate with managed identity - Authenticate with the managed identity for the API Management service. https://docs.microsoft.com/en-us/azure/api-management/api-management-authentication-policies

Topics

#API Management#authentication policy#certificate authentication#basic authentication

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-204 Practice