AZ-204 Practice Question: Connect to and consume Azure services and third-party services
A company uses Azure API Management (APIM) to expose APIs to external partners. They need to enforce rate limiting per subscription key. Which APIM policy should be configured?
⚠ Common exam trap
Candidates often confuse the 'quota' policy (which enforces total call volume over a long period) with 'rate-limit' (which enforces call frequency over a short window), or mistakenly think 'throttling' is a valid policy name when it is actually a deprecated term replaced by 'rate-limit' in Azure API Management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
rate-limit
The rate-limit policy in Azure API Management is specifically designed to enforce rate limiting per subscription key, preventing individual API consumers from exceeding a defined number of calls within a specified time window (e.g., per second or per minute). This policy operates on a sliding window counter, ensuring fair usage across partners without affecting other subscribers. It is the correct choice because it directly targets subscription-based throttling at the API gateway level.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
quota
Why it's wrong here
The "quota" policy in Azure API Management is designed to enforce a total consumption limit over an extended period, such as a month or year, for a given subscription or user. It tracks the cumulative number of calls or total bandwidth used, resetting only after the specified long duration. This policy is not suitable for controlling the *rate* of requests within a short, sliding time window, as it permits bursts of calls until the overall long-term limit is reached, potentially overwhelming backend systems in the short term.
- ✓
rate-limit
Why this is correct
The "rate-limit" policy in Azure API Management is specifically engineered to restrict the number of API calls a client can make within a precise, short time interval, such as per second or per minute. This policy can be effectively scoped to a `subscription-key`, ensuring that individual API consumers are prevented from making excessive requests and thereby protecting backend services from overload. It operates using a sliding or fixed window counter, rejecting requests that exceed the defined threshold until the window resets.
- ✗
ip-filter
Why it's wrong here
The "ip-filter" policy in Azure API Management serves to control access to APIs based solely on the source IP address of the incoming request. It functions as a network-level security measure, allowing administrators to explicitly permit or deny requests originating from specific IP addresses or predefined IP ranges. This policy does not evaluate or utilize the subscription key or any other client-specific identifier, rendering it incapable of managing the *rate* of requests from authenticated clients.
- ✗
throttling
Why it's wrong here
While "throttling" is a general concept for limiting request rates, the specific policy in Azure API Management that directly addresses the requirement of limiting calls per subscription key is `rate-limit`. Other policies like `rate-limit-by-key` can also achieve this by using the subscription key as the key value. The term "throttling" itself isn't a distinct APIM policy name for this specific purpose, and the `rate-limit` policy is the precise, explicit mechanism for enforcing per-subscription-key rate limits.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AZ-204 question from scratch — 881 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.