Microsoft
AZ-204 · Question #630
You are developing a set of RESTful APIs that will be consumed by external partners. You must expose the APIs securely through Azure API Management. You have the following requirements: - Only…
The correct answer is B. Use OAuth 2.0 for authentication and authorization. Use OAuth 2.0 for authentication and authorization Authentication and Authorization: Implement robust authentication and authorization mechanisms, such as OAuth 2.0 or JWT validation, to control access to your APIs. Apply rate limit policies. Rate limiting is a crucial…
Submitted by diego_uy· Mar 30, 2026Connect to and consume Azure services and third-party services
Question
You are developing a set of RESTful APIs that will be consumed by external partners. You must expose the APIs securely through Azure API Management. You have the following requirements: - Only authenticated and authorized clients must be able to access the APIs. - Control over the number of API calls to prevent abuse and ensure fair usage must be implemented. - Data transformation and validation on incoming requests and outgoing responses must be performed without modifying the back-end services. - Insights into API usage patterns, performance metrics, and anomaly detection must be gathered. You need to implement the APIs. What should you do?
Options
- AUse basic authentication over HTTPS.
- BUse OAuth 2.0 for authentication and authorization.
- CRequire clients to present client certificates.
- DUse subscription keys for authentication.
How the community answered
(28 responses)- A7% (2)
- B75% (21)
- C14% (4)
- D4% (1)
Explanation
- Use OAuth 2.0 for authentication and authorization Authentication and Authorization: Implement robust authentication and authorization mechanisms, such as OAuth 2.0 or JWT validation, to control access to your APIs. * Apply rate limit policies. Rate limiting is a crucial mechanism to control the number of API calls and prevent abuse or ensure fair usage. By implementing rate limiting policies, API providers can restrict the frequency of API requests within a given timeframe, preventing any single user or service from monopolizing resources and potentially disrupting service for others. * Use inbound and outbound policies for transformation. Azure API Management's inbound and outbound policies can be used for data transformation and validation on incoming requests and outgoing responses. These policies allow you to modify, filter, or validate data as it flows through the API gateway, before it reaches your backend or after it's returned to the client. https://datadome.co/bot-management-protection/what-is-api-rate-limiting/ https://learn.microsoft.com/en-us/azure/api-management/api-management-sample-send-request
Topics
#API Management#OAuth 2.0#rate limiting#authentication
Community Discussion
No community discussion yet for this question.