Microsoft Azure Architect Design (AZ-304) Practice Test

How can the AspNet-Version header be removed from published API responses in Azure API Management?

1. a new product

2. a modification to the URL scheme

3. a new policy

4. a new revision

The correct answer is: a new policy

Removing the AspNet-Version header from published API responses in Azure API Management is achieved by implementing a new policy. Azure API Management allows for customization of API behavior through policies, which are sets of instructions that can modify and control the request and response flow. By creating a custom policy, you can specifically target the response headers generated by your API. The policy can be configured to remove specific headers, including the AspNet-Version. This approach is beneficial for security reasons, as it helps to obscure underlying technology details, thereby reducing the attack surface of the API. The other options do not effectively address the need to modify response headers directly. Introducing a new product or a new revision could involve changes at a broader level but would not specifically target header modification. A modification to the URL scheme also does not pertain to response headers and would not remove the AspNet-Version header. Therefore, utilizing a new policy is the targeted and effective method for this requirement.