Azure API Manager Flashcards

1
Q

For Azure API Management what tiers do you have available?

A

Developer (None)
Basic (99.95%)
Standard (99.95%)
Premium (99.95 % or 99.99%)
Standard v2 (99.95%)
Premium v2 (99.95%
Consumption (pay-as-you-go)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

For Azure API Management, how dose it integrate with Azure log Analytics?

A

Azure API Management integrates with Azure Log Analytics by sending diagnostic data, including request and response logs, latency, and error details, to a Log Analytics workspace. This allows for real-time monitoring, troubleshooting, and analysis of API usage and performance. With the data in Log Analytics, you can create custom dashboards, set up alerts, and perform advanced queries to gain insights into API health and usage trends.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

For Azure API Management, how dose it integrate with Application Insights?

A

Azure API Management integrates with Application Insights to provide real-time monitoring of API calls. By enabling the integration, you can track performance metrics, request and response data, dependencies, and exceptions. This helps in diagnosing issues, understanding usage patterns, and improving API reliability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

For Azure API Management, how dose it integrate with Defender for APIs in Microsoft Defender for Cloud (Boost your API security)?

A

Azure API Management integrates with Defender for APIs in Microsoft Defender for Cloud by automatically identifying APIs managed by API Management and monitoring them for potential security threats. Defender for APIs enhances security by detecting anomalies, protecting against malicious activities, and offering insights to improve API configurations. This integration helps enforce security policies, ensuring better protection across Azure environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

For Azure API Management, how can i privately connect to the API management services from a vNET hosting a VM?

A

You can connect to Azure API Management using Azure Service endpoint.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the three core components making up Azure API Management?

A

API Gateway
Developer Portal
API Management Plane

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

When using Azure API Management, is there one or more API Gateways?

A

You can add API Gateways

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the purpose of API gateway?

A

API Gateway component of Azure API management is responsible for handling incoming requests and routing them to the backend. Applying rate limiting, auth and authorization an,, transformations, load balancing, caching,.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Can you have multiple gateways in the Azure APIU Services?

A

Isolating: environment for separate testing, deployments, etc.
Scalability: The ability to separate to handle load
Custom configurations
Compliance requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the data plane or runtime in reference to Azure API Management?

A

Azure API Management is also known as the runtime or data plane

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

For Azure API Management is it a global, regional, zonal service?

A

Azure API Management, the API gateway is deployed across zones in a single region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is a Azure API Management service unit?

A

Azure API Management service unit is a unit of scale for Azure API Management, it defines how much capacity your Azure API Management has to service requests.

Basic Tier:
Estimated Throughput: Approximately 1,000 requests per second per unit.
Features: Suitable for entry-level production use cases.

Standard Tier:
Estimated Throughput: Approximately 2,500 requests per second per unit.
Features: Designed for medium-volume production use cases.

Premium Tier:
Estimated Throughput: Approximately 4,000 requests per second per unit.
Features: Supports high-volume or enterprise production use cases, including multi-region deployments and virtual network integration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the tiers for Azure API Management?

A

Consumption (pay-as-you-go)
Basic Tier
Standard Tier
Premium Tier
Isolated Tier (preview)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is an Azure API Management policy?

A

An Azure API Management (APIM) gateway policy is a set of rules that modify the behavior of APIs at runtime. Policies allow administrators to control aspects such as request/response format, security, and performance.

Access Control: Restrict access based on IP, authentication, or API keys.

Rate Limiting: Limit API call frequency to manage traffic and prevent abuse.

Caching: Cache responses to reduce load on backend services.

Transformation: Modify requests and responses (e.g., changing formats).

Logging and Monitoring: Track requests and responses for analysis.

Error Handling: Customize error responses for client-friendly communication.

Security: Add security layers like token validation and IP filtering.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What would i use to restrict access when using Azure API Management?

A

The Azure API Management Gateway policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What would i use to rate limit when using Azure API Management?

A

The Azure API Management Gateway policy

15
Q

What would i use to set up caching when using Azure API Management?

A

The Azure API Management Gateway policy

16
Q

When using Azure API Management can i configure and use caching?

A

Yes, caching is supported and can be configured using policies

17
Q

When using Azure API Management can i configure and use rate limiting?

A

Yes, rate limiting is supported and can be configured using policies

18
Q

When using Azure API Management can i configure and use transformation of the incoming request?

A

Yes, request transformation is supported and can be configured using policies

19
Q

Are both External and Internal VNet integration modes supported for the developer tier?

A

Yes

20
Q

Are both External and Internal VNet integration modes supported for the premium tier?

A

Yes

21
Q

Are both External and Internal VNet integration modes supported for the standard tier?

A

Standard v2 Tier: This tier supports VNet Integration, which allows APIM to access resources within a VNet. However, the APIM endpoints remain publicly accessible; fully private deployments (Internal mode) are not supported in this tier

22
Q

Are External and Internal VNet integration modes supported for the primary and standard tiers?

A

No

23
Q

I have a VM scale set deployed in a vNET, and I want to have API Manager access through the internal application gateway already deployed and working with the VM muscle set. I only wnat internal developers access to the portal using the internal network. How can I do this?

A

Internal VNet Mode: Here, APIM is deployed within a VNet, and its endpoints are accessible only from within the VNet or through connected networks like on-premises systems via VPN or ExpressRoute. This mode is ideal for scenarios requiring heightened security, where APIs should not be exposed to the public internet.
MICR

24
Q

I have a VM scale set deployed in a vNET, and I want to have API Manager access through the internal application gateway already deployed and working with the VM muscle set. I only wnat internal developers access to the portal using the internal network. How can I do this?

A

External VNet Mode: In this configuration, APIM is deployed within a VNet, allowing it to access resources inside the network. However, its endpoints—such as the API gateway and developer portal—remain accessible from the public internet. This setup is beneficial when you want to expose your APIs publicly while still accessing internal resources securely.