Exam AZ-203 topic 24 question 8 discussion

Actual exam question from Microsoft's AZ-203

Question #: 8
Topic #: 24

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.
You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level. You need to configure authorization.
Solution: Configure the Azure Web App for the website to allow only authenticated requests and require Azure AD log on.
Does the solution meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Instead in the Azure AD application's manifest, set value of the groupMembershipClaims option to All.
References:
https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad-groups/

by kimalto452 at May 24, 2021, 5:19 p.m.

Comments

Submit Cancel

kimalto452

4 years ago

why??????

upvoted 1 times

WillyJ

4 years ago

They are asking for authorization (different roles: admin, normal & reader), but the solution says to enable authentication. So the answer is no, because authentication alone is not enough.

upvoted 1 times

...