nerdexam
Microsoft

AZ-500 · Question #620

Hotspot Question You have an Azure subscription that contains a third-party ecommerce app named App1. You need to share the REST interface of App1 with external partners. The solution must meet the…

The correct answer is Share the interface by using:: Azure API Management; Apply rate limits by using [answer choice] policies:: Inbound. This question tests knowledge of Azure API Management (APIM) as the solution for exposing, securing, and rate-limiting REST APIs to external partners.

Submitted by manish99· Mar 6, 2026Secure networking

Question

Hotspot Question You have an Azure subscription that contains a third-party ecommerce app named App1. You need to share the REST interface of App1 with external partners. The solution must meet the following requirements: - Ensure that the partners can connect to the interface from remote networks. - Ensure that specific rate limits can be applied to each partner. - Use a minimum of TLS 1.2. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:

Exhibit

AZ-500 question #620 exhibit

Answer Area

  • Share the interface by using:Azure API Management
    Azure API ManagementAzure FirewallMicrosoft Defender for APIs
  • Apply rate limits by using [answer choice] policies:Inbound
    BackendInboundOutbound

Explanation

This question tests knowledge of Azure API Management (APIM) as the solution for exposing, securing, and rate-limiting REST APIs to external partners.

Approach. You should deploy Azure API Management (APIM) and import/expose App1's REST interface through it. APIM allows external partners to connect from remote networks via a public endpoint, supports per-subscription or per-product rate limiting using policies (rate-limit and quota policies), and can enforce a minimum TLS 1.2 requirement through custom domain and protocol settings. For the specific selections: (1) Use Azure API Management to share the REST interface - APIM is the designated Azure service for API gateway scenarios with external consumers; (2) Apply rate-limit-by-key or quota policies per subscription/partner to enforce specific rate limits per partner; (3) Configure the APIM instance's custom domain TLS settings or use the built-in minimum TLS 1.2 enforcement under the Security settings of APIM to meet the TLS requirement.

Concept tested. Azure API Management (APIM) capabilities including external connectivity, per-partner rate limiting via policies, and TLS 1.2 enforcement for secure API sharing with external partners.

Reference. https://learn.microsoft.com/en-us/azure/api-management/api-management-key-concepts

Topics

#Azure API Management#rate limiting#inbound policies#TLS 1.2

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice