QUESTION: 7 Exam Topic: Implement Azure security questions

You are developing an ASP.NET Core website that uses Azure FrontDoor. The website is used to build custom weather data sets for researchers. Data sets are downloaded by users as Comma Separated Value (CSV) files. The data is refreshed every 10 hours.

Specific files must be purged from the FrontDoor cache based upon Response Header values. You need to purge individual assets from the Front Door cache.
Which type of cache purge should you use?

single path
wildcard
root domain

Answer(s): A

Explanation:

These formats are supported in the lists of paths to purge:
-Single path purge: Purge individual assets by specifying the full path of the asset (without the protocol and domain), with the file extension, for example, /pictures/strasbourg.png;
-Wildcard purge: Asterisk (*) may be used as a wildcard. Purge all folders, subfolders, and files under an endpoint with /* in the path or purge all subfolders and files under a specific folder by specifying the folder followed by /*, for example, /pictures/*.
-Root domain purge: Purge the root of the endpoint with "/" in the path.

Reference:

https://docs.microsoft.com/en-us/azure/frontdoor/front-door-caching

Reveal Solution Next Question

QUESTION: 8 Exam Topic: Implement Azure security questions

Your company is developing an Azure API.
You need to implement authentication for the Azure API. You have the following requirements:
-All API calls must be secure.
-Callers to the API must not send credentials to the API.

Which authentication mechanism should you use?

Basic
Anonymous
Managed identity
Client certificate

Answer(s): C

Explanation:

Use the authentication-managed-identity policy to authenticate with a backend service using the managed identity of the API Management service. This policy essentially uses the managed identity to obtain an access token from Azure Active Directory for accessing the specified resource. After successfully obtaining the token, the policy will set the value of the token in the Authorization header using the Bearer scheme.

Reference:

https://docs.microsoft.com/bs-cyrl-ba/azure/api-management/api-management-authentication-policies

Reveal Solution Next Question

QUESTION: 9 Exam Topic: Implement Azure security questions

You are a developer for a SaaS company that offers many web services. All web services for the company must meet the following requirements:
-Use API Management to access the services
-Use OpenID Connect for authentication
-Prevent anonymous usage

A recent security audit found that several web services can be called without any authentication. Which API Management policy should you implement?

jsonp
authentication-certificate
check-header
validate-jwt

Answer(s): D

Explanation:

Add the validate-jwt policy to validate the OAuth token for every incoming request.

Incorrect Answers:
A: The jsonp policy adds JSON with padding (JSONP) support to an operation or an API to allow cross-domain calls from JavaScript browser-based clients. JSONP is a method used in JavaScript programs to request data from a server in a different domain. JSONP bypasses the limitation enforced by most web browsers where access to web pages must be in the same domain.

JSONP - Adds JSON with padding (JSONP) support to an operation or an API to allow cross-domain calls from JavaScript browser-based clients.

Reference:

https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad

Reveal Solution Next Question

QUESTION: 10 Exam Topic: Implement Azure security questions

DRAG DROP (Drag & Drop is not supported)
Contoso, Ltd. provides an API to customers by using Azure API Management (APIM). The API authorizes users with a JWT token.

You must implement response caching for the APIM gateway. The caching mechanism must detect the user ID of the client that accesses data for a given location and cache the response for that user ID.

You need to add the following policies to the policies file:

-a set-variable policy to store the detected user identity
-a cache-lookup-value policy
-a cache-store-value policy
-a find-and-replace policy to update the response body with the user profile information

To which policy section should you add the policies? To answer, drag the appropriate sections to the correct policies. Each section may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Inbound.
A set-variable policy to store the detected user identity.
Example:
<policies>
<inbound>

<set-variable
name="enduserid"
value="@(context.Request.Headers.GetValueOrDefault("Authorization","").Split(' ')[1].AsJwt()?.Subject)" />

Box 2: Inbound
A cache-lookup-value policy
Example:
<inbound>
<base />
<cache-lookup vary-by-developer="true | false" vary-by-developer-groups="true | false" downstream-caching-type="none | private | public" must-revalidate="true | false">
<vary-by-query-parameter>parameter name</vary-by-query-parameter> 
</cache-lookup>
</inbound>

Box 3: Outbound
A cache-store-value policy.
Example:
<outbound>
<base />
<cache-store duration="3600" />
</outbound>

Box 4: Outbound
A find-and-replace policy to update the response body with the user profile information.
Example:
<outbound>

<find-and-replace
from='"$userprofile$"'
to="@((string)context.Variables["userprofile"])" />
<base />
</outbound>

Reference:

https://docs.microsoft.com/en-us/azure/api-management/api-management-caching-policies https://docs.microsoft.com/en-us/azure/api-management/api-management-sample-cache-by-key

Reveal Solution Next Question

Free AZ-204 Exam Braindumps (page: 24)

QUESTION: 7 Exam Topic: Implement Azure security questions

Explanation:

Reference:

QUESTION: 8 Exam Topic: Implement Azure security questions

Explanation:

Reference:

QUESTION: 9 Exam Topic: Implement Azure security questions

Explanation:

Reference:

QUESTION: 10 Exam Topic: Implement Azure security questions

Explanation:

Reference: