Correct Answer: Authorization Code Flow with Proof Key for Code Exchange (PKCE).
For Single Page Applications (SPAs), the Authorization Code Flow with PKCE is the industry standard and recommended flow by the Microsoft Identity Platform. It replaces the legacy ...
Correct Answer
Authorization Code Flow with Proof Key for Code Exchange (PKCE).
Why This Answer Is Correct
For Single Page Applications (SPAs), the Authorization Code Flow with PKCE is the industry standard and recommended flow by the Microsoft Identity Platform. It replaces the legacy Implicit Flow, which is no longer considered secure because it returns access tokens directly in the URL hash, exposing them to browser history and cross-site scripting (XSS) attacks.
This question evaluates your knowledge of Azure Active Directory (Entra ID) — a core concept tested in Microsoft Certified: Azure Developer Associate (AZ-204). Understanding Azure Active Directory (Entra ID) is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?
Which Microsoft Entra ID (formerly Azure AD) feature allows users to access cloud applications using their local on-premises passwords without sending the password itself to the cloud?
An administrator wants to ensure that users can only log in from managed devices or from specific IP ranges. Which Entra ID feature should be used?
What is the primary role of 'Microsoft Entra Connect'?
Which Entra ID role is required to manage all aspects of the directory, including creating users and assigning roles?