Exam AZ-204 topic 4 question 25 discussion

Correct. It's validate-jwt for Open ID, API, secure authentication.

Correct Answer: D Add the validate-jwt policy to validate the OAuth token for every incoming request. Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad

The correct answer is D. validate-jwt. The validate-jwt policy in Azure API Management allows you to enforce validation of JSON Web Tokens (JWT) from the client as part of the API call. This can be used to ensure that the caller has authenticated with OpenID Connect, as OpenID Connect uses JWTs for its identity tokens. Option A, jsonp, is used for wrapping JSON responses in a JSONP callback function, and does not provide any authentication. Option B, authentication-certificate, is used for client certificate authentication, not OpenID Connect. Option C, check-header, is used for checking the existence of certain headers, and while it could be used to check for the existence of an Authorization header, it would not validate the JWT itself.

got this question today, answer D - validate-jwt - 7/30/2023, score 895/1000

On my exam 2023-02-25

correct

Got this in 09/22 , went with the most voted answer, score 927.

D is correct answer.

I think validate-jwt is the correct option.

validate-jwt, buddies

The proposed answer is correct D: validate-jwt.

Can someone let me understand why a check-header isn't a valid answer? https://docs.microsoft.com/en-us/azure/api-management/api-management-access-restriction-policies#CheckHTTPHeader Use the check-header policy to enforce that a request has a specified HTTP header. You can optionally check to see if the header has a specific value or check for a range of allowed values. If the check fails, the policy terminates request processing and returns the HTTP status code and error message specified by the policy.

correct

The answer might be correct, but in the explanation of the incorrect answers it sounds very confusing to read jsonp described 3-times in a similar way? Since I don't know and I coldn't find anything: Could someone please explain the other two answers, what it is or where to find sothing about that?

correct

correct

Answer is correct. Source: https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad