MENU
Northern Trail Outfitters needs to secure an integration with an external Microsoft Azure
API Gateway.
What integration security mechanism should be employed?
Suggested Answer: A
Get Premium ARC-101 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
HE
Helene
10 months ago
Totally agree with B, it's the industry standard now!
GL
Gladys
11 months ago
Wait, is D really necessary for just an API integration?
EL
Ellen
11 months ago
I think A is more secure with two-way SSL.
LO
Loreta
11 months ago
C sounds good, but how reliable is that external identity provider?
KE
Keneth
11 months ago
Option B is the way to go with OAuth!
TR
Tracey
11 months ago
I don't recall much about Salesforce Shield, so I'm leaning away from option D. It seems more focused on data protection rather than API integration security.
BR
Breana
12 months ago
I feel like option C could work too, especially if we're considering external identity providers. But I’m not confident about how federated access would fit in this scenario.
MA
Maile
12 months ago
I'm not entirely sure, but I remember something about two-way SSL from a practice question. Could that be option A? It might be more secure, right?
BO
Bok
1 year ago
I think option B sounds familiar since we discussed OAuth in our last study session. It seems like a solid choice for securing API integrations.
JA
Janella
1 year ago
Whoa, this is a tricky one. I'm going to need to review my notes on Azure API security before I can confidently answer this.
EM
Emerson
1 year ago
Ah, this is a good one. I remember learning about these types of Azure API security integrations in class. I think I've got a good handle on the right approach to use here.
UL
Ulysses
1 year ago
Okay, I've got a strategy here. I'll focus on the requirements - it's an external Azure API Gateway, so I need to consider authentication and authorization mechanisms that work well in that context.
RU
Rusty
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to think through the different options carefully to make sure I select the right security approach.
TH
Thaddeus
1 year ago
This looks like a pretty straightforward security integration question. I think the key is to identify the right security mechanism for an Azure API Gateway.
GA
Garry
1 year ago
I heard Azure API Gateways come with their own built-in security features. Why not just let Microsoft handle all that for us? It'll be like letting the pros take care of the heavy lifting.
KE
Keneth
1 year ago
C) Use an API only user profile and implement use an external identity provider with federated API access.
ED
Edison
1 year ago
B) I think it's important for us to have control over our own security measures.
LY
Lynelle
1 year ago
A) Configure mutual server authentication with two-way SSL using CA issued certificates.
GA
Gail
1 year ago
Implementing Salesforce Shield and encryption at rest? That's overkill, my dude. This is an Azure API Gateway, not Fort Knox.
AV
Avery
1 year ago
C) Use an API only user profile and implement use an external identity provider with federated API access.
RE
Reita
1 year ago
Implementing Salesforce Shield and encryption at rest? That's overkill, my dude. This is an Azure API Gateway, not Fort Knox.
TI
Tiffiny
1 year ago
B) Configure a connected app with an authorization endpoint of the API gateway and configure OAuth settings.
TA
Tammara
1 year ago
A) Configure mutual server authentication with two-way SSL using CA issued certificates.
MA
Maddie
2 years ago
Hold up, what about using an external identity provider? That could be a really elegant solution, especially if we already have some kind of federated access set up.
MO
Moon
1 year ago
C) Use an API only user profile and implement use an external identity provider with federated API access.
MY
Myong
1 year ago
B) Configure a connected app with an authorization endpoint of the API gateway and configure OAuth settings.
HO
Hortencia
1 year ago
A) Configure mutual server authentication with two-way SSL using CA issued certificates.
LO
Louvenia
2 years ago
Hmm, I'm not sure about that. Shouldn't we be looking at mutual server authentication with SSL certificates? That's the classic security mechanism for this kind of integration.
CE
Cecilia
1 year ago
B) Agreed, we should prioritize security when setting up integrations with external services.
AL
Almeta
1 year ago
A) Definitely, it's a reliable mechanism to ensure secure communication between systems.
AN
Annmarie
1 year ago
B) I think that's a good idea. It provides a strong level of security for the integration.
AB
Abel
2 years ago
A) Configure mutual server authentication with two-way SSL using CA issued certificates.
LI
Lizette
2 years ago
Option B seems like the way to go here. Configuring a connected app with OAuth settings is a robust and secure way to integrate with the Azure API Gateway.
TI
Tijuana
2 years ago
I'm not sure about option A, I think option B could also be a good choice as it involves configuring OAuth settings for authorization.
AL
Alline
2 years ago
I agree with Della, option A provides mutual server authentication which adds an extra layer of security to the integration.
DE
Della
2 years ago
I think option A is the best choice because it ensures secure communication between Northern Trail Outfitters and the external Microsoft Azure API Gateway.