APIM caches an authenticated user's account response using only the URL as a key. Another tenant receives that response. Which two measures address the design fault? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.Cache only responses safe for the intended reuse scope and preserve authorization
B.Use a longer TTL to increase the chance of correct reuse
C.Vary cache keys by the relevant identity and tenant context
D.Treat all responses at one URL as interchangeable regardless of caller
E.Replace TLS with a service tag

Show the answer and explanation

✓ Correct answers

Cache only responses safe for the intended reuse scope and preserve authorization
Vary cache keys by the relevant identity and tenant context

Keys must include security-sensitive variation and only safely reusable data should be cached. Longer TTL prolongs disclosure, a network prefix tag does not supply confidentiality or identity, and identical URLs can produce different authorized data. Source guide: PDF page(s) 53.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.