AZ-900 Describe Azure architecture and services Practice Question
Which Azure service provides a secure, scalable API gateway that manages access to backend services?
⚠ Common exam trap
Test-takers frequently confuse Azure API Management with Azure Application Gateway or Azure Front Door because both handle HTTP traffic, but only API Management provides full API lifecycle management, policy enforcement, and developer onboarding features.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure API Management
Azure API Management is the correct service because it provides a secure, scalable API gateway that manages access to backend services. It handles API publishing, versioning, rate limiting, authentication (e.g., OAuth 2.0, JWT validation), and request/response transformation, acting as a centralized facade between clients and backend APIs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Application Gateway
Why it's wrong here
Azure Application Gateway is a regional Layer 7 load balancer that distributes HTTP/HTTPS traffic across backend pools using URL-based routing, session affinity, and its own WAF. It does not provide API lifecycle features such as a developer portal, API keys, products, or per-API rate limiting. Its focus is traffic distribution and delivery, not the management and governance of APIs.
- ✗
Azure Front Door
Why it's wrong here
Azure Front Door is a global, scalable entry point that provides load balancing, traffic acceleration, SSL offload, and WAF protection across regions. Although it can route to APIs, it operates as a CDN and load balancer at the edge, not as an API lifecycle manager. It lacks the developer portal, API product and subscription governance, and API-specific policies needed for comprehensive API management.
- ✓
Azure API Management
Why this is correct
Azure API Management is a dedicated PaaS service that creates an API gateway in front of back-end services, enabling centralized security, throttling, caching, transformation, and analytics. It includes a developer portal for onboarding consumers, plus product and subscription models to govern API access. This makes it the correct choice for full API lifecycle management.
- ✗
Azure Service Bus
Why it's wrong here
Azure Service Bus is a fully managed enterprise message broker that provides queues and publish/subscribe topics for decoupling applications via asynchronous messaging. It does not expose or manage HTTP APIs, and it lacks API gateway capabilities such as policies, authentication schemes, rate limiting, or a developer portal. Therefore, it is not the correct service for API management.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.