Microsoft Azure Developer Associate AZ-204 Practice Question

You manage an Azure API Management instance that protects its operations with Azure AD-issued JWT bearer tokens. Compliance requires that every tenant, identified by the tenantId claim inside each token, be limited to at most 1 000 calls per one-hour period across the entire API. Other tenants must not be affected by a busy tenant's traffic. Which inbound policy should you implement, and how should you configure it to meet the requirement?

  • Insert a quota-by-key policy with calls="1000", renewal-period="3600", counter-key="@(context.Request.Headers["tenantId"])", applied at the API scope.

  • Declare a set-variable policy that stores tenantId, followed by a quota policy referencing that variable to cap requests at 1 000 per hour.

  • Insert a rate-limit-by-key policy with calls="1000", renewal-period="3600", counter-key="@(context.Principal.Claims["tenantId"].Value)", applied at the API scope.

  • Insert a rate-limit policy with calls="1000", renewal-period="3600" at the product scope; no key is needed because the policy counts per caller automatically.

Microsoft Azure Developer Associate AZ-204
Connect to and consume Azure services and third-party services
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot