Your company is developing an Azure API. You need to implement authentication for the Azure API. You have the following requirements: - All API calls must be secure. - Callers to the API must not…

The correct answer is C. Managed identity. Use the authentication-managed-identity policy to authenticate with a backend service using the managed identity of the API Management service. This policy essentially uses the managed identity to obtain an access token from Azure Active Directory for accessing the specified…

Submitted by parkjh· Mar 30, 2026Implement Azure security

Question

Your company is developing an Azure API. You need to implement authentication for the Azure API. You have the following requirements: - All API calls must be secure. - Callers to the API must not send credentials to the API. Which authentication mechanism should you use?

Options

ABasic
BAnonymous
CManaged identity
DClient certificate

How the community answered

(39 responses)

A
8% (3)
B
13% (5)
C
77% (30)
D
3% (1)

Explanation

Use the authentication-managed-identity policy to authenticate with a backend service using the managed identity of the API Management service. This policy essentially uses the managed identity to obtain an access token from Azure Active Directory for accessing the specified resource. After successfully obtaining the token, the policy will set the value of the token in the Authorization header using the Bearer scheme. https://azure.microsoft.com/en-us/blog/keep-credentials-out-of-code-introducing-azure-ad- managed-service-identity/ https://docs.microsoft.com/en-us/azure/api-management/api-management-authentication-policies

Topics

#managed identity#API authentication#service-to-service auth#Azure AD

Community Discussion

No community discussion yet for this question.

Full AZ-204 Practice