Examkin

Question

Difficulty: MediumProvision and Configure Azure API Management

You are configuring an existing Azure API Management instance to be deployed inside an Azure Virtual Network in Internal mode. You need to ensure that internal clients can successfully resolve and access the API gateway. Which sequence of steps should you perform?

  1. 1Create a dedicated subnet in the Virtual Network and configure Network Security Group (NSG) rules to allow required inbound and outbound management and dependency traffic.
  2. 2In the API Management service, set the Virtual Network type to Internal, select the target Virtual Network and subnet, and save the configuration.
  3. 3Wait for the deployment update to complete, then retrieve the private Virtual IP (VIP) address of the API Management instance.
  4. 4Create DNS records in a Private DNS Zone to map the API Management gateway and portal endpoints to the private Virtual IP (VIP) address.

Answer

To configure API Management in an internal virtual network, first create the subnet and configure NSG rules. Next, update the API Management network settings to Internal and select the subnet. After the deployment updates, retrieve the private Virtual IP (VIP) address. Finally, configure DNS records in a Private DNS Zone pointing to the VIP.
The correct sequence ensures that prerequisites (subnet and NSG rules) are satisfied first to prevent deployment failures. Then, the API Management configuration is updated. After the private VIP is allocated and retrieved, the DNS records are created to enable hostname resolution.

Step-by-Step Solution

1
Prepare the subnet and NSG rules.
A dedicated subnet is created with rules allowing traffic on necessary ports (like port 3443 for management).
API Management checks for network connectivity to dependencies during subnet association; incorrect NSG rules cause deployment failure.
2
Associate API Management with the subnet.
The connectivity status changes to Internal, initiating the deployment update.
This updates the configuration and deploys the gateway components inside the virtual network.
3
Obtain the private Virtual IP.
The private VIP address is retrieved from the API Management properties.
The VIP is needed to configure DNS routing to the internal gateway.
4
Configure DNS records.
DNS resolution is configured using an Azure Private DNS Zone.
Azure does not host DNS for private VIPs automatically, so manual records are required for resolution.

Key Concept

Internal Virtual Network Integration for Azure API Management
Estimated Time:2m 0s
Rate this question

Topics

Provision and Configure Azure API Management