Microsoft Azure Developer Associate AZ-204 Practice Question

You are building a console application that runs as a background service and must call a custom web API secured by Microsoft Entra ID. The API exposes a scope named "Tasks.Read". The console app must obtain an access token without any user interaction. What should you configure to enable the console app to receive a valid token for the API?

  • Expose "Tasks.Read" only as a delegated permission, require users to grant consent individually, and obtain the token through the authorization code flow.

  • Add the console app's managed identity to an Azure AD group that is assigned the "Tasks.Read" scope and rely on group claims in the token.

  • Register the console app as a public client, configure implicit grant, and request an access token directly from the authorization endpoint.

  • Create an application permission for "Tasks.Read", assign that permission to the console app, grant tenant-wide admin consent, and request the token by using the OAuth 2.0 client credentials flow.

Microsoft Azure Developer Associate AZ-204
Implement Azure security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot