Implement Azure security
Practise only this domain. 40 questions with explanations, 20 at a time.
Start implement Azure securitySample questions
- An iOS field-service app lets technicians sign in with Microsoft Entra ID and then calls a protected Azure Functions HTTP API. The app is a public client and has no back-end component of its own. Which MSAL flow should it use to acquire tokens for the API?Medium
- A React single-page app hosted on a static site needs users to sign in with Entra ID and then call a protected REST API. Which OAuth 2.0 grant should the SPA's client registration use?Medium
- A mobile backend issues short-lived download links for private blobs. Your security team has banned storing account keys in application configuration. Which signing approach satisfies this rule?Medium
- One Azure Function app runs three functions, each calling a different service: a database, a message queue, and a storage account. The team wants each service's identity to hold only the permissions that service needs. What should they create?Easy