ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 95 - AZ-204 discussion

Report
Export

You are a developer for a SaaS company that offers many web services.

All web services for the company must meet the following requirements:

Use API Management to access the services

Use OpenID Connect for authentication

Prevent anonymous usage

A recent security audit found that several web services can be called without any authentication.

Which API Management policy should you implement?

A.
jsonp
Answers
A.
jsonp
B.
authentication-certificate
Answers
B.
authentication-certificate
C.
check-header
Answers
C.
check-header
D.
validate-jwt
Answers
D.
validate-jwt
Suggested answer: D

Explanation:

Add the validate-jwt policy to validate the OAuth token for every incoming request.

Incorrect Answers:

A: The jsonp policy adds JSON with padding (JSONP) support to an operation or an API to allow cross-domain calls from JavaScript browser-based clients. JSONP is a method used in JavaScript programs to request data from a server in a different domain. JSONP bypasses the limitation enforced by most web browsers where access to web pages must be in the same domain.

JSONP - Adds JSON with padding (JSONP) support to an operation or an API to allow cross-domain calls from JavaScript browser-based clients.

Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad

asked 02/10/2024
Terence Coates
33 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first