Exam PL-400 topic 2 question 29 discussion

Guest Access needs explicit credentials. AD Condiciontal Access controls access from devices and IPs You need to use an Azure AD Application to avoid explicit credentials. Client Secret should be the correct answer

https://www.examtopics.com/discussions/microsoft/view/69778-exam-pl-400-topic-6-question-17-discussion/ https://www.examtopics.com/discussions/microsoft/view/65580-exam-pl-400-topic-6-question-10-discussion/

Client secret is used in OAuth 2.0 which does not require explicit user credentials

Since the requirement is to capture data from a public survey page without requiring user credentials, a client secret allows secure authentication between the web page and Dataverse.

In implementing the client secret approach, you would register the application (your survey page) in Azure AD to obtain a client ID and client secret. The application then uses these credentials to authenticate to Azure AD and obtain an access token, which is used to authenticate to Dataverse and write the survey data.

Client Secret

> Publicly accessible survey page on the company's public website (3rd party application) > Explicit user's credentials MUST not be required (user MUST be able to enter anything without auth) This definitely should be client secret auth for server-to-server interaction. The site's backend should be able to authenticate as a client in the dataverse, so it will use app registration and the application user.

The correct answer is B. Azure AD Conditional Access. Azure AD Conditional Access is a feature of Azure Active Directory (Azure AD) that allows you to control who has access to your applications and resources, and under what conditions. In this case, you can use Azure AD Conditional Access to require users to be authenticated with Azure AD before they can write survey data to Dataverse. This will ensure that only authorized users can write data to Dataverse, and that the data is protected from unauthorized access.

should be B

It can't be conditional access, as each publicly accessible user won't have access to the dataverse. Hence the survey data to add to Dataverse using SPN with client secret.

This question was on my 4/7/23 exam

I'm just preparing for the test, but I would use a custom connector, triggered via WebAPI using a (D.)Client Secret to write the data to a Dataverse environment.

D. Client secret. Using a client secret would allow the survey page to authenticate with the Dataverse environment without requiring user credentials to be entered. The client secret can be generated in Azure AD and then used in the survey page code to authenticate with the Dataverse environment.

Create an Azure AD Application: In the Azure portal, create an Azure AD application to represent the survey page. Assign permissions to the application: Assign permissions to the application to allow it to access the Dataverse environment. This can be done by using the Dataverse Web API. Generate an access token: Use the Azure AD application to generate an access token. This token can be used to authenticate the application and access the Dataverse environment. Implement the authentication flow: Use the access token to authenticate the application and access the Dataverse environment. This can be done by using the Microsoft Authentication Library (MSAL) or the Azure AD Authentication Library (ADAL).

Then I think the answer is D

The answer is B, AD Conditional Access

AD Conditional access