AZ-204 Azure Security & Identity 2

Question 1

What Azure AD object represents an application's identity and is used to authenticate against Azure AD to obtain tokens?

Accepted Answer

Service principal

Answer

A service principal is the local representation of an Azure AD application registration within a tenant, used for authentication and authorization.

Question 2

Which Microsoft Authentication Library (MSAL) method acquires a token silently from cache before making a network request?

Accepted Answer

AcquireTokenSilent

Answer

AcquireTokenSilent attempts to retrieve a valid token from the MSAL token cache without user interaction or a new network call.

Question 3

Which Azure Key Vault object type stores asymmetric cryptographic keys used for signing and encryption operations?

Accepted Answer

Key

Answer

Azure Key Vault Keys store RSA or EC cryptographic key material and support operations such as encrypt, decrypt, sign, and verify.

Question 4

Which Azure service enables you to centrally manage, rotate, and audit access to secrets across multiple applications and environments?

Accepted Answer

Azure Key Vault

Answer

Azure Key Vault provides centralized secret management with access logging, automated rotation, and RBAC-based access control.

Question 5

What header must a client include when calling an Azure AD-protected API to prove it has a valid access token?

Accepted Answer

Authorization: Bearer {token}

Answer

APIs protected by Azure AD expect the access token in the HTTP `Authorization` header using the `Bearer` scheme.

AZ-204 - Microsoft Azure Developer Associate Practice Test