You have published an API through Azure API Management (APIM). You want to ensure that API consumers cannot make more than 100 calls per minute per subscription key to prevent abuse and protect the backend service. Which APIM policy should you configure?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Apply the rate-limit-by-key policy at the product or API level, keyed on the subscription key

The rate-limit-by-key policy in APIM enforces a call rate limit per a specified counter key (e.g., subscription key) over a rolling time window. This is ideal for per-client thrott...

๐Ÿ“‹Part of Microsoft Certified: Azure Developer Associate (AZ-204) ยท Azure Certification Practice
Real Exam ScenarioAzure API Management

You have published an API through Azure API Management (APIM). You want to ensure that API consumers cannot make more than 100 calls per minute per subscription key to prevent abuse and protect the backend service. Which APIM policy should you configure?

โœ“ Correct Answer & ExplanationAzure API Management

Correct Answer

Apply the rate-limit-by-key policy at the product or API level, keyed on the subscription key

Why This Answer Is Correct

The rate-limit-by-key policy in APIM enforces a call rate limit per a specified counter key (e.g., subscription key) over a rolling time window. This is ideal for per-client throttling and backend protection.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Azure API Management โ€” a core concept tested in Microsoft Certified: Azure Developer Associate (AZ-204). Understanding Azure API Management is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.