A single-page application uses the Microsoft identity platform authorization code flow. Which setup is recommended by Microsoft for this scenario?

AUse the implicit flow with a web redirect URI

BUse the authorization code flow with PKCE and a redirect URI of type spa

CUse a client secret in the browser with the authorization code flow

DUse only the resource owner password flow

Related Questions

An Azure-hosted application must call another Azure service without storing credentials in code or c...

easy

Which Azure service is designed to store and control access to secrets, keys, and certificates?...

easy

A team wants centralized nonsecret configuration values, feature flags, and the ability to change se...

medium

A browserless client authenticates with an external provider and then submits the token to App Servi...

medium

A daemon application uses the Microsoft Graph SDK with the client credentials flow. Which scope valu...

medium

View all Implement Azure security questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.