Exam PL-400 All Questions

View all questions & answers for the PL-400 exam

Exam PL-400 topic 5 question 10 discussion

Actual exam question from Microsoft's PL-400

Question #: 10
Topic #: 5

You are developing an app that uses Common Data Service.
You must integrate Common Data Service with a new web application. You must allow the new web application to display data from Common Data Service.
You build a single-page web application using the Web API.
You need to authenticate your app using OAuth.
What should you use?

A. Windows Communication Foundation (WCF)
B. Cross-Origin Resource Sharing (CORS)
C. Microsoft Authentication Library (MSAL)
D. Kerberos authentication

Show Suggested Answer

Suggested Answer: C 🗳️

by nivanpee at Dec. 12, 2021, 10:53 p.m.

Comments

Submit Cancel

appari

Highly Voted 2 years, 12 months ago

Selected Answer: C

https://docs.microsoft.com/en-us/powerapps/developer/data-platform/authenticate-oauth

upvoted 18 times

...

Juan0414

Most Recent 3 months, 3 weeks ago

Selected Answer: C

Correct!

upvoted 1 times

...

4e8b388

7 months, 3 weeks ago

Selected Answer: C

Answer is C

upvoted 1 times

...

MikeAWS

1 year, 4 months ago

Solution: Microsoft Authentication Library (MSAL) To authenticate your web application with OAuth and access data from Common Data Service, you should use the Microsoft Authentication Library (MSAL). MSAL provides authentication and authorization capabilities for various Microsoft services, including Common Data Service. It allows you to obtain access tokens that can be used to make authorized requests to the Common Data Service Web API. Cross-Origin Resource Sharing (CORS) is a security feature that enables web applications to make requests to a different domain than the one from which the web page originated. While CORS might be relevant in enabling your web application to access resources from different domains, it's not directly related to OAuth-based authentication and accessing data from Common Data Service.

upvoted 3 times

...

alloylo

1 year, 5 months ago

The suggested answer is correct CORS since the question ask for web application accessibility and not the users. " CORS provides a way to gain access to resources on another domain. "

upvoted 1 times

...

rober13

1 year, 12 months ago

Selected Answer: B

"Use OAuth with Cross-Origin Resource Sharing to connect a Single-Page Application" https://learn.microsoft.com/en-us/power-apps/developer/data-platform/oauth-cross-origin-resource-sharing-connect-single-page-application?source=recommendations

upvoted 3 times

V05

1 year, 11 months ago

CORS is just enabled, but to authenticate, need to use MSAL as provided in the same link you provided :- Since Dataverse users are authenticated using Azure Active Directory, MSAL.js is the supported way to authenticate SPA users.

upvoted 2 times

V05

1 year, 11 months ago

Also, Instead you can use the Microsoft Authentication Library for JavaScript (MSAL.js) 2.0 for Browser-Based Single-Page Applications and it will take care of much of the CORS complexity for you.

upvoted 1 times

...

juan54

2 years, 2 months ago

B https://learn.microsoft.com/en-us/power-apps/developer/data-platform/oauth-cross-origin-resource-sharing-connect-single-page-application?source=recommendations

upvoted 3 times

rober13

1 year, 12 months ago

After, I read your reference, i agree with you. The artible explain "Use OAuth with Cross-Origin Resource Sharing to connect a Single-Page Application"

upvoted 2 times

...

ppguru

2 years, 10 months ago

Selected Answer: C

OAuth requires an identity provider for authentication. For Dataverse, the identity provider is Azure Active Directory (AAD). To authenticate with AAD using a Microsoft work or school account, use the Azure Active Directory Authentication Libraries (ADAL) or Microsoft Authentication Library (MSAL).

upvoted 4 times

...