Exam SC-300 topic 3 question 57 discussion

Actual exam question from Microsoft's SC-300

Question #: 57
Topic #: 3

You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains a registered app named App1.

You have a partner organization that has a Microsoft Entra tenant. The tenant contains a registered app named App2.

You need to ensure that App1 can access App2.

Which two types of credentials can App1 use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. certificate
B. managed identity
C. secret
D. user account
E. one-time password

Show Suggested Answer

Suggested Answer: AC 🗳️

by armid at Feb. 15, 2025, 1:03 a.m.

Comments

Submit Cancel

Obi_Wan_Jacoby

1 month, 3 weeks ago

Selected Answer: AC

A&C as explained by "Shingie"

upvoted 1 times

...

armid

3 months, 3 weeks ago

Selected Answer: AC

correcting to ac

upvoted 2 times

...

Shingie

3 months, 3 weeks ago

Selected Answer: AC

Answer: A. Certificate & C. Secret Explanation: To allow App1 in your Azure tenant to authenticate and access App2 in the partner organization's Azure tenant, you typically use app-to-app authentication with OAuth 2.0 client credentials flow. The two valid credential types for this authentication are: ✅ A. Certificate – Apps can use a public-private key pair (certificate) for authentication, which is considered more secure than secrets. ✅ C. Secret – Apps can use a client secret (a password-like string) to authenticate, though it's less secure than certificates. Why not the others? ❌ B. Managed Identity – Managed identities are used only within a single tenant and cannot be used across different Microsoft Entra tenants. ❌ D. User Account – The client credentials flow does not involve interactive user authentication. Instead, App1 authenticates as itself. ❌ E. One-time password – OTPs are for human users, not for app-to-app authentication.

upvoted 4 times

...

armid

3 months, 4 weeks ago

Selected Answer: AD

teachically you could use guest user account, no? Not sure if "secret" alone represents a "complete" solution

upvoted 2 times

Obi_Wan_Jacoby

1 month, 3 weeks ago

While a user account can be used for authentication, it's not typically recommended for app-to-app communication due to security and management concerns. Using a user account would require storing and managing user credentials, which can be less secure and more complex compared to using certificates or secrets designed for application authentication

upvoted 1 times

...