Exam AZ-204 topic 2 question 9 discussion

Actual exam question from Microsoft's AZ-204

Question #: 9
Topic #: 2

HOTSPOT -
You are developing an Azure Web App. You configure TLS mutual authentication for the web app.
You need to validate the client certificate in the web app. To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Accessing the client certificate from App Service.
If you are using ASP.NET and configure your app to use client certificate authentication, the certificate will be available through the HttpRequest.ClientCertificate property. For other application stacks, the client cert will be available in your app through a base64 encoded value in the "X-ARR-ClientCert" request header. Your application can create a certificate from this value and then use it for authentication and authorization purposes in your application.
Reference:
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth

by 27close at Nov. 14, 2020, 12:20 p.m.

Comments

Submit Cancel

mlantonis

Highly Voted 3 years, 8 months ago

Box 1: HTTP request header If you are using ASP.NET and configure your app to use client certificate authentication, the certificate will be available through the HttpRequest.ClientCertificate property. Box 2: Base64 For other application stacks, the client cert will be available in your app through a base64 encoded value in the "X-ARR-ClientCert" request header. Your application can create a certificate from this value and then use it for authentication and authorization purposes in your application. Reference: https://docs.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth

upvoted 67 times

...

27close

Highly Voted 4 years, 2 months ago

With client certificates enabled, App Service injects an X-ARR-ClientCert request header with the client certificate.

upvoted 16 times

...

shane0909

Most Recent 2 weeks, 2 days ago

Explanation: Client certificate location = HTTP request header In Azure App Service, when TLS mutual authentication is enabled, the platform places the client certificate into the X-ARR-ClientCert HTTP header for your application to inspect. Encoding type = Base64 The client certificate is encoded in Base64 format in the X-ARR-ClientCert header. You must Base64 decode it to extract and validate the certificate.

upvoted 1 times

...

neelkanths

9 months, 1 week ago

Got it on 20 April 2024...Marks > 950...answer is correct.... Box 1: HTTP request header Box 2: Base64

upvoted 6 times

...

Nihilist11

1 year ago

Jan-21-2024 - This was in my exam, went with selected answer Score 740 Contosso case study [Couldnt find here]

upvoted 3 times

...

bgbgvfvf

1 year, 1 month ago

Answer is correct.Base64

upvoted 1 times

...

NightshadeRC

1 year, 6 months ago

Had this question today: 2023-07-26

upvoted 4 times

...

ucskips

1 year, 11 months ago

why is it base64?

upvoted 3 times

yyandrakk

1 year, 1 month ago

"or other application stacks (Node.js, PHP, etc.), the client cert is available in your app through a base64 encoded value in the X-ARR-ClientCert request header."

upvoted 1 times

...