Exam SC-300 topic 3 question 57 discussion

Answer: A. Certificate & C. Secret Explanation: To allow App1 in your Azure tenant to authenticate and access App2 in the partner organization's Azure tenant, you typically use app-to-app authentication with OAuth 2.0 client credentials flow. The two valid credential types for this authentication are: ✅ A. Certificate – Apps can use a public-private key pair (certificate) for authentication, which is considered more secure than secrets. ✅ C. Secret – Apps can use a client secret (a password-like string) to authenticate, though it's less secure than certificates. Why not the others? ❌ B. Managed Identity – Managed identities are used only within a single tenant and cannot be used across different Microsoft Entra tenants. ❌ D. User Account – The client credentials flow does not involve interactive user authentication. Instead, App1 authenticates as itself. ❌ E. One-time password – OTPs are for human users, not for app-to-app authentication.

teachically you could use guest user account, no? Not sure if "secret" alone represents a "complete" solution