StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Application architecture

Practice question 292 of 400 · medium

An APIM gateway must call a supported Azure backend without long-lived embedded credentials. Which mechanism should it use?

Choose the single best answer.

  1. A.Managed identity with appropriate backend authorization
  2. B.A service tag as the backend user identity
  3. C.A subscription key reused as every backend's Entra password
  4. D.A public IP address as proof of application authorization
Show the answer and explanation

✓ Correct answer

  • Managed identity with appropriate backend authorization

A managed identity obtains supported backend credentials without embedded passwords and still needs permissions. Subscription keys do not become universal Entra passwords, service tags represent network prefixes, and public IP reachability is not identity authorization. Source guide: PDF page(s) 52.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.