Configuring Client Cert Gateway Credentials for Azure Resource | AZ-204 Exam Question Answer | Microsoft Azure

Configuring Client Cert Gateway Credentials

Question

Note: The question is included in a number of questions that depicts the identical set-up.

However, every question has a distinctive result.

Establish if the solution satisfies the requirements.

You are developing a solution for a public facing API.

The API back end is hosted in an Azure App Service instance.

You have implemented a RESTful service for the API back end.

You must configure back-end authentication for the API Management service instance.

Solution: You configure Client cert gateway credentials for the Azure resource.

Does the solution meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

A.

API Management allows to secure access to the back-end service of an API using client certificates.

https://docs.microsoft.com/en-us/rest/api/apimanagement/apimanagementrest/azure-api-management-rest-api-backend-entity

The solution provided for configuring back-end authentication for the API Management service instance is to configure Client cert gateway credentials for the Azure resource.

In this solution, the client certificates are used for authentication, which means that the client must possess a valid client certificate that matches the public key in the server's trusted root store. The client certificate is used to authenticate and authorize the client to access the resources protected by the server.

If the Azure resource is configured with the client certificate authentication, the API Management service instance can use this authentication mechanism to authenticate the requests sent to the back end hosted in an Azure App Service instance. This ensures that only authorized clients with valid client certificates can access the API back end.

Therefore, the solution meets the goal of configuring back-end authentication for the API Management service instance, by using the client certificate authentication mechanism to authenticate and authorize the clients accessing the API back end.

Therefore, the answer is A. Yes.