Microsoft Graph · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
A background .NET worker uses Microsoft Graph to list all users in a tenant. It runs without a signed-in user and uses the client credentials flow. T…
Practice question from Microsoft Graph (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
medium · MCQ · Q-B71F13
A background .NET worker uses Microsoft Graph to list all users in a tenant. It runs without a signed-in user and uses the client credentials flow. The application should follow least privilege. Which configuration is required?
- A.Delegated User.Read permission and an interactive user sign-in
- B.Application User.Read.All permission with tenant administrator consentCorrect answer
- C.Delegated Directory.Read.All permission without administrator consent
- D.Application Mail.Read permission with tenant administrator consent
Solution
A worker without a user context must use application permissions. User.Read.All allows the application to read user profiles and requires administrator consent. Delegated permissions cannot provide the required app-only authorization.
More from Microsoft Graph
- A signed-in user uses an ASP.NET Core web application to read their own Microsoft Graph profile through the /me endpoint. Which permission…
- A single-page application calls a protected middle-tier API with an access token. The middle tier must call the Microsoft Graph /me endpoin…
- A mobile application allows a signed-in employee to view the employee's upcoming calendar events. The application does not need to access c…
- An Azure Function runs nightly without a signed-in user and uses the Microsoft Graph .NET SDK with a service principal. The required Micros…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed