Implement Azure security Questions
Practice questions for Implement Azure security topic in Microsoft Certified: Azure Developer Associate. 42 questions covering this domain.
An Azure-hosted application must call another Azure service without storing credentials in code or configuration. Which approach should the developer ...
A production App Service app uses built-in authentication, and a staging deployment slot is used for pre-release testing. How should Microsoft Entra a...
An App Service app is behind Azure Front Door, and the authentication flow keeps redirecting users to the app's original azurewebsites.net hostname in...
A daemon application uses the Microsoft Graph SDK with the client credentials flow. Which scope value should it request?
A security team wants App Service built-in authentication to manage provider tokens for later Microsoft Graph calls instead of storing and refreshing ...
A browserless client authenticates with an external provider and then submits the token to App Service built-in authentication for validation. Which h...
Which Azure service is designed to store and control access to secrets, keys, and certificates?
A team wants centralized nonsecret configuration values, feature flags, and the ability to change settings without redeploying the app. Which service ...
A single-page application uses the Microsoft identity platform authorization code flow. Which setup is recommended by Microsoft for this scenario?
Several Azure resources need to share the same identity, and the identity must continue to exist even if one of those resources is deleted. Which mana...
A developer signs in users with MSAL and gets InteractionRequired errors when calling acquireTokenSilent for a downstream API. Which response is corre...
A developer caches App Configuration values and wants the app to refresh values when changes occur. Which feature should be enabled in the .NET config...
Which Azure Key Vault object stores arbitrary text data such as passwords or connection strings?
A multi-tenant Microsoft Entra app should let users from any verified Microsoft Entra organization sign in. What audience setting is appropriate?
A team must protect Azure Storage data with customer-managed keys stored in Azure Key Vault and rotate them on a schedule. Which feature combination s...
An ASP.NET Core web app uses the Microsoft.Identity.Web library and needs to call a downstream API on behalf of the signed-in user. Which OAuth flow i...
A developer needs to allow App Service to read a Key Vault secret using a managed identity. Which Key Vault access model is recommended for new deploy...
A developer must request multiple Azure resource scopes (e.g., Storage and Key Vault) on behalf of a signed-in user. How should MSAL be used?
A developer wants a managed identity scoped to a single Azure Function app and removed automatically when the function is deleted. Which identity type...
Which protocol is used by Microsoft Entra ID to issue ID tokens for sign-in?
Sign in to see all 42 questions
Create a free account to browse all questions — completely free during our launch phase.