PrepAway - Latest Free Exam Questions & Answers

Which tool should you use?

You are the Azure administrator for your company. The company has developed a mobile application used to
support sales people in the field.
The application uses Azure Active Directory (Azure AD) accounts for authentication. The application sends and
receives HTTP requests on publicly accessible endpoints.
You need to provide the ability to authenticate the application using Azure.
Which tool should you use?

PrepAway - Latest Free Exam Questions & Answers

A.
OAuth 2.0 authorization code grant

B.
Azure AD Connect

C.
Azure Portal

D.
Azure AD Graph API

Explanation:
Azure Active Directory (Azure AD) uses OAuth 2.0 to enable you to authorize access to web applications and
web APIs in your Azure AD tenant.
Note: The authorization code grant type is used to obtain both access tokens and refresh tokens and is
optimized for confidential clients. Since this is a redirection-based flow, the client must be capable of interacting
with the resource owner’s user-agent (typically a web browser) and capable of receiving incoming requests (via
redirection) from the authorization server.

https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-protocols-oauth-code
https://tools.ietf.org/html/rfc6749#section-4.1

8 Comments on “Which tool should you use?

  1. Rinie says:

    Indeed OAuth is not a tool, Potentially D, although it has been replaced with ‘Microsoft Graph’

    https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-graph-api

    The Azure Active Directory Graph API provides programmatic access to Azure AD through REST API endpoints. Applications can use Azure AD Graph API to perform create, read, update, and delete (CRUD) operations on directory data and objects. For example, Azure AD Graph API supports the following common operations for a user object:

    Create a new user in a directory
    Get a user’s detailed properties, such as their groups
    Update a user’s properties, such as their location and phone number, or change their password
    Check a user’s group membership for role-based access
    Disable a user’s account or delete it entirely




    0



    0

Leave a Reply