nerdexam
Microsoft

AZ-305 · Question #424

Hotspot Question You have an Azure subscription that contains a third-party ecommerce app named App1. You need to share the REST interface of App1 with external partners. The solution must meet the…

The correct answer is Share the interface by using:: Azure API Management; Apply rate limits by using [answer choice] policies:: Inbound. This question tests knowledge of Azure API Management (APIM) as the solution for exposing REST APIs to external partners with rate limiting and TLS enforcement.

Submitted by jaden.t· Mar 6, 2026Design infrastructure solutions

Question

Hotspot Question You have an Azure subscription that contains a third-party ecommerce app named App1. You need to share the REST interface of App1 with external partners. The solution must meet the following requirements: - Ensure that the partners can connect to the interface from remote networks. - Ensure that specific rate limits can be applied to each partner. - Use a minimum of TLS 1.2. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:

Exhibit

AZ-305 question #424 exhibit

Answer Area

  • Share the interface by using:Azure API Management
    Azure API ManagementAzure FirewallMicrosoft Defender for APIs
  • Apply rate limits by using [answer choice] policies:Inbound
    InboundBackendOutbound

Explanation

This question tests knowledge of Azure API Management (APIM) as the solution for exposing REST APIs to external partners with rate limiting and TLS enforcement.

Approach. You should deploy Azure API Management (APIM) and import App1's REST interface as an API. APIM provides a gateway that external partners can connect to from remote networks, supports per-subscription or per-product rate limiting policies (using rate-limit-by-key or quota policies), and allows enforcement of minimum TLS version (TLS 1.2) through custom domain and protocol settings in the APIM instance configuration. Each partner is given a unique subscription key, enabling individualized rate limits and usage tracking.

Concept tested. Azure API Management (APIM) capabilities: external API exposure, per-partner rate limiting via subscription keys/policies, and TLS 1.2 minimum enforcement for secure communication.

Reference. https://learn.microsoft.com/en-us/azure/api-management/api-management-key-concepts

Topics

#API Management#API Gateway#Rate limiting#Security policies

Community Discussion

No community discussion yet for this question.

Full AZ-305 Practice