PrepAway - Latest Free Exam Questions & Answers

How should you complete the request?

DRAG DROP
You are developing a web application that integrates with Azure Active Directory (AD). The application uses
the OAuth 2.0 protocol to authorize secure connections to a web service that is at https://service.adatum.com.
The application must request an access token to invoke the web service methods.
You need to submit an HTTP request to the Azure AD endpoint.

How should you complete the request? To answer, drag the appropriate code segments to the correct
locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split
bar between panes or scroll to view content.

PrepAway - Latest Free Exam Questions & Answers

Answer:

4 Comments on “How should you complete the request?

  1. Jason Wilson says:

    Is correct and here is why:

    There are a few of ways of using OAuth with AAD
    1) Authorization Code Grant:
    well documented and recommended
    2) Resourse Owner Password Credentials Grant
    security risk, only for inhouse trusted implements
    3) Implicit Grant
    designed for javascript, also has security risks, not recommended except for native applications
    4) Client Credentials Grant
    for service applications, the service uses its own credentials (shared secret or certificate) instead of those of the user
    https://blogs.msdn.microsoft.com/wushuai/2016/09/25/resource-owner-password-credentials-grant-in-azure-ad-oauth/

    This question is an example of Client Credentials Grant.
    The request requires 4 parts
    1) grant_type – set to “client_credentials”
    2) client_id – the ID assigned to the service when registered with AAD
    3) client_secret or client_assertion – the shared password or the token generated from the certificate
    3b) client_assertiaon_type – only if 3 was client_assertion, must be “urn:ietf:params:oauth:client-assertion-type:jwt-bearer”
    4) resource – the URI of the resource to be accessed
    https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-protocols-oauth-service-to-service

    In this instance 1,2,4 are shown. 3 is behind ellipses




    0



    0

Leave a Reply