AZ-204 Research & Evidence-Based Practice 4

Question 1

In Azure API Management, which policy scope applies to every API across all products within the APIM instance?

Accepted Answer

Global scope

Answer

Policies set at the global scope execute for every inbound and outbound call, making them the broadest applicable scope.

Question 2

Which Azure Key Vault object type manages the full lifecycle of an X.509 certificate, including its associated private key?

Accepted Answer

Certificate

Answer

The Key Vault Certificate object handles issuance, renewal, and storage of X.509 certificates along with their private keys.

Question 3

What is the key advantage of a user-assigned managed identity compared to a system-assigned managed identity?

Accepted Answer

It can be shared across multiple Azure resources simultaneously

Answer

A user-assigned managed identity has an independent lifecycle and can be attached to multiple resources, enabling identity reuse across services.

Question 4

Which OAuth 2.0 grant type is appropriate for a daemon or background service that must authenticate to an API without any user interaction?

Accepted Answer

Client credentials

Answer

The client credentials flow lets a service authenticate using its own credentials (client ID and secret/certificate), with no user involved.

Question 5

Which Azure API Management policy limits the number of calls a subscription can make within a specified time window to prevent abuse?

Accepted Answer

rate-limit-by-key

Answer

The rate-limit-by-key policy enforces a call-rate ceiling keyed on a value such as subscription ID, blocking requests that exceed the quota.

AZ-204 - Microsoft Azure Developer Associate Practice Test