Correct Answer: Client Credentials Flow
Client Credentials Flow is designed for service-to-service (daemon) scenarios with no user involved. The calling service authenticates using its own client ID and secret (or certif...
Correct Answer
Client Credentials Flow
Why This Answer Is Correct
Client Credentials Flow is designed for service-to-service (daemon) scenarios with no user involved. The calling service authenticates using its own client ID and secret (or certificate) to get a token representing its application identity. On-behalf-of is for when you already have a user token and need to call downstream APIs on behalf of the user.
This question evaluates your knowledge of Azure Active Directory (Entra ID) — a core concept tested in Microsoft Certified: Azure Developer Associate (AZ-204). Understanding Azure Active Directory (Entra ID) is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?
Which Microsoft Entra ID (formerly Azure AD) feature allows users to access cloud applications using their local on-premises passwords without sending the password itself to the cloud?
An administrator wants to ensure that users can only log in from managed devices or from specific IP ranges. Which Entra ID feature should be used?
What is the primary role of 'Microsoft Entra Connect'?
Which Entra ID role is required to manage all aspects of the directory, including creating users and assigning roles?