Crucial Exams

Microsoft Azure Security Engineer Associate AZ-500 Practice Question

Contoso publishes several internal REST APIs through a single Azure API Management (APIM) instance. The security team issues the following requirements for one of the APIs:

  1. Client applications must authenticate with Microsoft Entra ID, and APIM-not the backend-must validate the issued access tokens.
  2. Any request whose payload exceeds 128 KB must be rejected before it reaches the backend service.
  3. Business analysts who use the APIM developer portal must be able to obtain test tokens without exposing a client secret in the browser.

Which APIM configuration meets all of these requirements?

  • Require mutual TLS on the API, add an IP-filter policy that allows only APIM gateway IP addresses, and add a rate-limit-by-key policy that limits each caller to 50 requests per minute.

  • Enable the implicit-grant flow for the developer portal, add an enforce-https policy, and add a validate-jwt policy that references the Microsoft Entra ID metadata endpoint.

  • Deploy the APIM instance in internal VNet mode, enable static IP whitelisting on the backend, and add a set-body policy that replaces any request body larger than 128 KB with an error message.

  • Create an OAuth 2.0 authorization server in APIM that uses the authorization-code grant, add a validate-azure-ad-token inbound policy to the API, and add a validate-content inbound policy that sets a 128-KB maximum body size.

Microsoft Azure Security Engineer Associate AZ-500
Secure compute, storage, and databases
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot