StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 438 of 498 · hard

A financial API exposes sensitive data and must control resource use without assuming one tool solves everything. Which three measures are appropriate? Select three.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Onboard supported APIs to Defender for APIs and route actionable detections
  2. B.Rely on encryption at rest to prevent valid users from reading unauthorized objects
  3. C.Remove identity checks once a subscription key is presented
  4. D.Apply suitable request validation and usage limits at the gateway
  5. E.Restrict direct backend access and enforce object/function authorization
Show the answer and explanation

✓ Correct answers

  • Onboard supported APIs to Defender for APIs and route actionable detections
  • Apply suitable request validation and usage limits at the gateway
  • Restrict direct backend access and enforce object/function authorization

Validation and limits reduce malformed or excessive requests, protected backend authorization controls business access, and Defender for APIs adds detection. At-rest encryption does not enforce caller object rights, and a subscription key does not replace user identity.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.