AZ-203 Exam QuestionsBrowse all questions from this exam

AZ-203 Exam - Question 72


DRAG DROP -

You develop a gateway solution for a public facing news API.

The news API back end is implemented as a RESTful service and hosted in an Azure App Service instance.

You need to configure back-end authentication for the API Management service instance.

Which target and gateway credential type should you use? To answer, drag the appropriate values to the correct parameters. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Show Answer
Correct Answer:

Since the news API is hosted in an Azure App Service instance, the correct target should be 'Azure Resource'. The most secure authentication method suitable for this scenario would be 'Client cert'. Using client certificates ensures that both the client and server authenticate each other, thus providing a high level of security. Therefore, the appropriate selection for configuring back-end authentication for the API Management service instance would be 'Azure Resource' for the target and 'Client cert' for the gateway credential type.

Discussion

12 comments
Sign in to comment
sho1
Jan 30, 2020

it should be Https endoint and client cert https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-mutual-certificates

rrongcheng
Jul 23, 2020

To use Client Cert, you need 'upload a new client certificate' or 'use a certificate stored in the Azure Key Vault'. But in this question, the news API is the public face, so it needs to use Basic

dkaps06
Aug 7, 2020

The API is hosted on an Azure App Service. So target could be Azure resource

Juanlu
Nov 30, 2020

Agree and here (@an26 link) a good explanation, even if the HTTP Rest is an App Service: https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-mutual-certificates#-configure-an-api-to-use-a-client-certificate-for-gateway-authentication

Juanlu
Mar 1, 2021

Ref: https://docs.microsoft.com/es-es/azure/api-management/api-management-howto-mutual-certificates And and specific image that show us we are looking for: https://docs.microsoft.com/es-es/azure/api-management/media/api-management-howto-mutual-certificates/apim-client-cert-enable-select.png

Juanlu
Mar 1, 2021

Ref: https://docs.microsoft.com/es-es/azure/api-management/api-management-howto-mutual-certificates And and specific image that show us we are looking for: https://docs.microsoft.com/es-es/azure/api-management/media/api-management-howto-mutual-certificates/apim-client-cert-enable-select.png

bulve
Apr 20, 2020

Options: https://pasteboard.co/J4HpWE3.png

NaliniTomar
Aug 26, 2020

https://docs.microsoft.com/en-us/azure/api-management/media/api-management-howto-mutual-certificates/apim-client-cert-enable-select.png

Cornholioz
Dec 28, 2020

an26 and NaliniTomar and many others who are pasting the list ot configure an api to use a client certificate for gateway authentication : What you are referring is just an example/steps to configure to use client certs. It doesn't answer this question. I just checked it in the portal for the sample APIs I have. You can choose either an Azure Resource (in my case it's an Azure Logic App and it gives that radio button besides/before the HTTPS endpoint radiobutton). It also enables None/Basic/Client Certs choices. So this link doesn't say anything to answer. Unfortunately, I don't know the answer for sure because the if a REST service is not an Azure Resource (because it wasn't deplyoed as a Function), then the answer is HTTPs endpoint. And now, the cert can be basic or Client. I'm inclined to saying that it's HTTPS and Client Cert simply because it's a RESTful service which will need these to authenticate.

Khang
Feb 7, 2020

Should be : Https Endpoint and Client Cert

connorhoehn
Feb 12, 2020

Not sure about HTTPS endpoint... In the portal, the wizard applies a Resource configuration.

hmirko
Apr 2, 2020

I also think it is Azure Resource, since REST service is hosted in an Azure App Service instance

an26
Jun 11, 2020

https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-mutual-certificates#-configure-an-api-to-use-a-client-certificate-for-gateway-authentication

altafpatel1984
Nov 25, 2021

As per this reference, confirmed answer is HTTP(s) endpoint, Client cert.

Rishi_22
Apr 5, 2020

options please

KK_uniq
Feb 25, 2020

Hope this is still valid

Vinod777
Mar 3, 2020

Https endoint and client cert

AK89
May 26, 2020

Should be : Https Endpoint and Client Cert

Namco04
Jan 13, 2021

The given answer here is good

namco23
Jan 21, 2021

1.Azure Resource 2.Client Cert