nerdexam
Microsoft

AZ-204 · Question #58

You are a developer tot a SaaS company that otters many web services. All web services tot the company must meet the following requirements: - Use API Management to access the services - Use OpenID…

The correct answer is A. validate-jwt. Add the validate-jwt policy to validate the OAuth token for every incoming request. Incorrect Answers: B: The jsonp policy adds JSON with padding (JSONP) support to an operation or an API to allow cross-domain calls from JavaScript browser-based clients. JSONP is a method used…

Submitted by tarun92· Mar 30, 2026Implement Azure security

Question

You are a developer tot a SaaS company that otters many web services. All web services tot the company must meet the following requirements: - Use API Management to access the services - Use OpenID Connect for authentication. - Prevent anonymous usage A recent security audit found that several web services can be called without any authentication. Which API Management policy should you implement?

Options

  • Avalidate-jwt
  • Bauthentication-certificate
  • Ccheck-header
  • Djsonp

How the community answered

(29 responses)
  • A
    83% (24)
  • B
    3% (1)
  • C
    10% (3)
  • D
    3% (1)

Explanation

Add the validate-jwt policy to validate the OAuth token for every incoming request. Incorrect Answers: B: The jsonp policy adds JSON with padding (JSONP) support to an operation or an API to allow cross-domain calls from JavaScript browser-based clients. JSONP is a method used in JavaScript programs to request data from a server in a different domain. JSONP bypasses the limitation enforced by most web browsers where access to web pages must be in the same JSONP - Adds JSON with padding (JSONP) support to an operation or an API to allow cross- domain calls from JavaScript browser-based clients. protect-backend-with-aad

Topics

#API Management#OpenID Connect#validate-jwt#authentication policy

Community Discussion

No community discussion yet for this question.

Full AZ-204 Practice