Medium1 markMultiple Choice
AZ-305 · Question 44 · Domain 4.2: Application Architecture
You are exposing several backend REST APIs to external developers using Azure API Management. You need to protect the backend services from being overwhelmed by too many requests from a single developer. You also want to remove the 'X-Powered-By' header from the HTTP responses before they reach the client. What should you configure in API Management?
You are exposing several backend REST APIs to external developers using Azure API Management. You need to protect the backend services from being overwhelmed by too many requests from a single developer. You also want to remove the 'X-Powered-By' header from the HTTP responses before they reach the client. What should you configure in API Management?
Answer options:
A.
Inbound and Outbound policies.
B.
Azure Web Application Firewall (WAF).
C.
API Revisions.
D.
Backend settings.
How to approach this question
Identify the API Management feature used to modify requests and responses.
Full Answer
A.Inbound and Outbound policies.✓ Correct
Azure API Management policies are a powerful capability that allows the publisher to change the behavior of the API through configuration. Rate limiting is applied in the inbound processing, and header removal is applied in the outbound processing.
Common mistakes
Thinking WAF is required for rate limiting, missing the native API Management policy capabilities.
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 6
55 questions · hints · full answers · grading
More questions from this exam
Q01Contoso Ltd is a global manufacturing company with 50,000 employees. They operate a mix of on-pre...MediumQ02A financial institution has 500 Windows Server VMs on-premises and 200 VMs in Azure. They need to...HardQ03An enterprise uses Azure Sentinel and Log Analytics. They ingest 500 GB of logs daily. The IT bud...HardQ04You are designing a monitoring strategy for a new Azure deployment consisting of App Service, Azu...EasyQ05A healthcare company uses Microsoft Entra ID (Azure AD). They need to implement a security policy...Medium
Expert