Configuring Back-End Authentication for API Management | Microsoft Azure Exam AZ-204

Configure Client Cert Gateway Credentials for HTTP(s) Endpoint

Question

Note: The question is included in a number of questions that depicts the identical set-up.

However, every question has a distinctive result.

Establish if the solution satisfies the requirements.

You are developing a solution for a public facing API.

The API back end is hosted in an Azure App Service instance.

You have implemented a RESTful service for the API back end.

You must configure back-end authentication for the API Management service instance.

Solution: You configure Client cert gateway credentials for the HTTP(s) endpoint.

Does the solution meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

B.

The API back end is hosted in an Azure App Service instance.

It is an Azure resource and not an HTTP(s) endpoint.

https://docs.microsoft.com/en-us/rest/api/apimanagement/apimanagementrest/azure-api-management-rest-api-backend-entity

The solution described in the question involves configuring client certificate authentication for the HTTP(s) endpoint of the API Management service instance. Client certificate authentication is a form of mutual authentication, where the client (in this case, the API Management service instance) presents a digital certificate to the server (the App Service instance) to prove its identity, and the server presents a digital certificate to the client to prove its identity.

In this scenario, the API Management service instance is acting as a client to the App Service instance, and the client certificate authentication ensures that only authorized clients can access the App Service instance. This approach provides an additional layer of security by verifying the identity of the client before granting access to the API back end hosted in the App Service instance.

Therefore, the solution of configuring client cert gateway credentials for the HTTP(s) endpoint meets the goal of configuring back-end authentication for the API Management service instance.

Therefore, the answer is: A. Yes