MCSD Authentication, Authorization & Identity 1

Question 1

Which OAuth 2.0 grant type is recommended for a single-page application (SPA) that needs to obtain an access token without a backend server?

Accepted Answer

Authorization Code Flow with PKCE

Answer

Authorization Code Flow with PKCE (Proof Key for Code Exchange) is the recommended OAuth 2.0 flow for SPAs because it prevents authorization code interception attacks without requiring a client secret.

Question 2

A JSON Web Token (JWT) is composed of three Base64URL-encoded parts. Which part contains the claims about the user or entity?

Accepted Answer

Payload

Answer

The Payload is the second part of a JWT and contains the claims, which are statements about the entity (typically the user) and additional metadata.

Question 3

When registering an application in Azure Active Directory, what is the primary purpose of setting a Redirect URI?

Accepted Answer

To define where Azure AD sends the authorization response after authentication

Answer

The Redirect URI (also called reply URL) is the location where Azure AD sends the authentication response including tokens or authorization codes after successful authentication.

Question 4

In claims-based identity, what is a 'claim'?

Accepted Answer

A statement made by an identity provider about a subject, such as name or role

Answer

A claim is a key-value statement made by a trusted identity provider (issuer) about a subject, such as the user's name, email, roles, or other attributes.

Question 5

What is the key difference between OpenID Connect (OIDC) and OAuth 2.0?

Accepted Answer

OIDC adds an identity layer on top of OAuth 2.0 enabling authentication

Answer

OpenID Connect is an identity layer built on top of OAuth 2.0 that adds authentication capabilities, introducing the ID token to convey user identity information alongside OAuth's access tokens.

MCSD - Microsoft Certified Solutions Developer Practice Test

MCSD - Microsoft Certified Solutions Developer Practice Test

MCSD Authentication, Authorization & Identity 1