AZ-204 Develop for Azure storage Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Register an application in Azure AD, then configure API Management to use OAuth 2.0, then add the validate-jwt policy to the API, then configure the product to require OAuth 2.0, then test the setup.

  Why this is correct

  This is the correct order because the app must be registered first to obtain the necessary credentials and endpoints. Then API Management must be configured to trust that app as an OAuth authority. The validate-jwt policy is added to enforce token validation. The product is configured to require OAuth to control access. Finally, testing verifies the entire flow.

• ✗

  Configure API Management to use OAuth 2.0, then register an application in Azure AD, then add the validate-jwt policy to the API, then configure the product to require OAuth 2.0, then test the setup.

  Why it's wrong here

  This sequence is incorrect because configuring API Management's OAuth 2.0 provider necessitates specific details obtained from an Azure AD application registration. Essential parameters like the Client ID (Application ID), Authorization endpoint URL, and Token endpoint URL are generated when the application is registered in Azure AD. Attempting to configure API Management's OAuth settings before these values exist would lead to an incomplete or invalid configuration, preventing successful token acquisition and validation.

• ✗

  Register an application in Azure AD, then add the validate-jwt policy to the API, then configure API Management to use OAuth 2.0, then configure the product to require OAuth 2.0, then test the setup.

  Why it's wrong here

  This is incorrect because the validate-jwt policy requires the OAuth configuration to be in place, as it references the issuer and audience values that are set during the API Management OAuth configuration. Adding the policy before configuring OAuth would result in invalid or missing parameters.

• ✗

  Register an application in Azure AD, then configure API Management to use OAuth 2.0, then configure the product to require OAuth 2.0, then add the validate-jwt policy to the API, then test the setup.

  Why it's wrong here

  This is incorrect because the validate-jwt policy must be added before testing, as it is the mechanism that actually validates the OAuth token. Without it, the API would not enforce token validation, and the test would not reflect the secure configuration. Additionally, the product configuration typically comes after the policy is in place.

Go deeper

Related to this question