Exam AZ-304 topic 5 question 57 discussion

Actual exam question from Microsoft's AZ-304

Question #: 57
Topic #: 5

You plan to deploy an API by using Azure API Management.
You need to recommend a solution to protect the API from a distributed denial of service (DDoS) attack.
What should you recommend?

A. Strip the Powered-By response header.
B. Enable rate limiting.
C. Enable quotas.
D. Create network security groups (NSGs).

Show Suggested Answer

Suggested Answer: B 🗳️

by saptati at Aug. 31, 2021, 7:15 a.m.

Comments

Submit Cancel

saptati

Highly Voted 3 years, 11 months ago

Rate limit should be correct! A rate limiting solution measures the amount of time between each request from each IP address, and also measures the number of requests within a specified timeframe. If there are too many requests from a single IP within the given timeframe, the rate limiting solution will not fulfill the IP address's requests for a certain amount of time. [Copied] Ref: https://www.examtopics.com/discussions/microsoft/view/7189-exam-az-301-topic-6-question-21-discussion/

upvoted 14 times

...

altafpatel1984

Most Recent 3 years, 5 months ago

Selected Answer: B

Based on this: https://docs.microsoft.com/en-us/azure/api-management/api-management-sample-flexible-throttling#rate-limits-and-quotas

upvoted 2 times

...

therealss

3 years, 5 months ago

I don't think this is a good question as DDoS is enabled by default. Rate limiting only works by key, so this question is assuming the attackers have limited keys at their disposal....a reasonable assumption, but again, rate limiting isn't meant to protect against DDoS.

upvoted 1 times

...