HOTSPOT You need to create the API page according to the requirements. How should you complete the code segment? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. 
DATAACCESSINTENT = READONLY, EDITABLE = FALSE
Pretty sure I ran into a similar one in exam. on a practice test and the right combo is DATAACCESSINTENT = READONLY and EDITABLE = FALSE. Setting EDITABLE = FALSE is what truly locks the page in read-only mode, not just inserts but all edits. Pretty sure that's what Microsoft expects for this scenario.
Would setting Editable = false alone make the API page fully read-only, or do we still need to set InsertAllowed or ModifyAllowed separately?
Looks like it should be DataAccessIntent = ReadOnly and Editable = false. That covers both the API page using a read-only replica and blocking all data changes. InsertAllowed isn’t needed if you want the whole thing non-editable, pretty sure on this.