Connect to and consume Azure services and third-party services →mediumMultiple ChoiceObjective-mapped
AZ-204 Practice Question: Connect to and consume Azure services and third-party services
A developer exposes several backend APIs through Azure API Management. Clients must be throttled by subscription to protect the backend. What should be configured? The design must avoid adding custom operational scripts.
⚠ Common exam trap
Many candidates confuse monitoring features (Application Insights sampling) or unrelated Azure services (Blob soft delete, Private DNS) with API throttling mechanisms, overlooking the purpose-built rate-limit and quota policies in API Management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
API Management rate-limit or quota policy
Azure API Management provides built-in rate-limit and quota policies that enforce throttling at the subscription level without requiring custom code. These policies allow you to define call rates (e.g., requests per second) or quotas (e.g., requests per month) per subscription key, directly protecting backend services from overuse.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Blob soft delete
Why it's wrong here
Blob soft delete is a data protection feature for Azure Storage accounts, designed to prevent accidental or malicious deletion of blob data by retaining deleted blobs for a specified period. While crucial for data integrity and recovery, it operates exclusively at the storage layer and has absolutely no mechanism or capability to influence, reduce, or manage the volume of API requests directed at backend services exposed through Azure API Management. Its purpose is entirely distinct from controlling API traffic flow or client consumption.
- ✗
Application Insights sampling
Why it's wrong here
Application Insights sampling is a technique used to reduce the volume of telemetry data sent to Azure Application Insights, thereby optimizing monitoring costs and improving performance. This process selectively collects a subset of traces, requests, and events, but it occurs *after* the API requests have already been processed by the backend services. Consequently, sampling only affects the amount of diagnostic data collected and has no impact whatsoever on the actual number of API calls made by clients or the traffic load on the backend APIs.
- ✗
Private DNS zone only
Why it's wrong here
An Azure Private DNS zone provides a reliable and secure DNS service for virtual networks, allowing for name resolution within a private network without exposing DNS records to the public internet. While essential for internal service discovery and secure communication, its sole function is to translate hostnames into IP addresses. A Private DNS zone inherently lacks any features or policies to control, limit, or throttle the number of API requests that clients can send to a backend service, making it ineffective for managing API traffic volume.
- ✓
API Management rate-limit or quota policy
Why this is correct
Azure API Management (APIM) policies, specifically the `rate-limit` and `quota` policies, are designed precisely to control and manage the flow of API traffic. These policies allow developers to enforce limits on the number of API calls (rate limit) or the total bandwidth consumed (quota) within a specified time period, per subscription, per user, or per IP address. By applying these policies at various scopes, APIM can effectively throttle client requests, prevent abuse, ensure fair usage, and protect backend services from overload.
Go deeper
Related to this question
About these practice questions
One of 881 original AZ-204 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.