Microsoft Identity Platform and MSAL · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
A background Azure App Service must call a protected Azure resource without a signed-in user. The service is registered as a confidential client and…
Practice question from Microsoft Identity Platform and MSAL (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
medium · MCQ · Q-04C40D
A background Azure App Service must call a protected Azure resource without a signed-in user. The service is registered as a confidential client and has been granted application permission to the resource. Which MSAL.NET call and scope format should it use?
- A.AcquireTokenInteractive(new[] { "https://resource-api/.default" })
- B.AcquireTokenForClient(new[] { "https://resource-api/.default" })Correct answer
- C.AcquireTokenOnBehalfOf(new[] { "https://resource-api/.default" }, userAssertion)
- D.AcquireTokenSilent(new[] { "https://resource-api/User.Read" }, null)
Solution
The client-credentials flow is used when a daemon or service acts without a user. In MSAL.NET, a confidential client calls AcquireTokenForClient, and the resource/.default scope requests the statically configured application permissions for that resource.
More from Microsoft Identity Platform and MSAL
- A .NET desktop application needs to sign a user in interactively and call Microsoft Graph on that user's behalf. The application is registe…
- An ASP.NET Core API receives an access token for the signed-in user and must call a downstream API while preserving that user's identity an…
- A web application signs in a user with Microsoft Identity Platform and receives both an ID token and an access token. The application must…
- An app registration is configured to allow accounts in any Microsoft Entra organization, but not personal Microsoft accounts. Which Microso…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed