Explanation: Box 1: Https(s) endpoint Box 2: Client cert API Management allows to secure access to the back-end service of an API using client certificates. References: https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-mutual-certificates#configure-an-api-to-use-client-certificate-for-gateway-authentication