AZ-200 Azure Security & Identity 2

Question 1

What is an Azure AD application registration used for in development?

Accepted Answer

Representing an application in Azure AD to enable authentication and authorization via OAuth2/OIDC

Answer

An app registration creates an identity for an application in Azure AD, enabling it to authenticate users or other services using OAuth2 and OpenID Connect protocols.

Question 2

Which Azure AD token type should be validated by a resource API to authorize incoming requests?

Accepted Answer

Access token

Answer

An API should validate the access token, which is issued by Azure AD and contains the caller's identity, roles, and scopes for authorization decisions.

Question 3

What is the purpose of Azure AD Conditional Access policies for application developers?

Accepted Answer

Enforce additional security requirements (MFA, compliant device) when accessing applications

Answer

Conditional Access policies enforce security requirements like MFA or compliant device when users sign into applications, protecting against compromised credentials.

Question 4

How should a developer rotate a secret stored in Azure Key Vault with zero downtime?

Accepted Answer

Create a new secret version, update the app to read the new version, then deactivate the old version

Answer

Best practice is to create a new version of the secret in Key Vault, deploy the application with the new version reference, then disable the old version after validation.

Question 5

What Azure feature allows developers to verify that a request comes from a specific Azure service without checking credentials?

Accepted Answer

Managed Identity with Azure AD token validation

Answer

Using managed identity, a service obtains an Azure AD access token that the receiving service can validate cryptographically to confirm the caller's identity.

AZ-200 - Microsoft Azure Developer Practice Test

AZ-200 - Microsoft Azure Developer Practice Test

AZ-200 Azure Security & Identity 2