Exam PL-400 topic 6 question 8 discussion

Must be Client Secret

To allow a publicly accessible survey page to write data to Microsoft Dataverse (Common Data Service) without requiring explicit user credentials, the best approach is to use application-level authentication. This is typically done using: Azure AD App Registration Client ID and Client Secret This setup allows the survey page (a backend service or script) to authenticate as an application identity and write data to Dataverse using the Dataverse Web API.

ChatGPT says client secret, D.

Similar question here: https://www.examtopics.com/discussions/microsoft/view/79592-exam-pl-400-topic-2-question-29-discussion/ There are certain authentication mechanisms within OAuth 2.0 that do not require explicit user credentials. However, that is not the case for all of them. Regarding authentication mechanisms that rely on "Client Secret," we can affirm that they do not require user credentials. So, the safest option would be: D. Client Secret

The best authentication mechanism for capturing survey data from a publicly accessible page to the Microsoft Dataverse (formerly Common Data Service) without requiring explicit user credentials is Client Secret. While OAuth 2.0 underpins the client secret mechanism, explicit user credential flow (e.g., authorization grant) would typically be required, which doesn't fit the requirement for implicit public data submission. This method ensures security and compliance with the requirement of not explicitly needing user credentials to write data.

The answer is C, according to the scam-artists in the comments section whose cousins work at Microsoft

OAuth 2.0 would be the most suitable for this scenario

Oauth then

Guess you could set the grant type to implicit https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-implicit-grant-flow

OAuth 2.0 is a popular authentication mechanism that allows users to share their resources (such as data on a website) with a third-party application without explicitly providing their credentials. It will enable clients to access resources on behalf of a resource owner and can be used to authenticate and authorize users without requiring explicit credentials. This makes it a good choice for a given scenario, where the survey page should be publicly accessible and the data should be capturehttps://www.examtopics.com/exams/microsoft/pl-400/view/2/#d in a Common Data Service environment without requiring explicit user credentials.

Confirm please, looks sus