ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-204 All Questions

View all questions & answers for the AZ-204 exam
Go to Exam

Exam AZ-204 topic 4 question 21 discussion

Actual exam question from Microsoft's AZ-204
Question #: 21
Topic #: 4
[All AZ-204 Questions]

HOTSPOT -
You are building a website to access project data related to teams within your organization. The website does not allow anonymous access. Authentication is performed using an Azure Active Directory (Azure AD) app named internal.
The website has the following authentication requirements:
✑ Azure AD users must be able to login to the website.
✑ Personalization of the website must be based on membership in Active Directory groups.
You need to configure the application's manifest to meet the authentication requirements.
How should you configure the manifest? To answer, select the appropriate configuration in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
by AakashNeedsEmAll at Nov. 5, 2020, 9:04 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
AakashNeedsEmAll
Highly Voted 4 years, 5 months ago
Second answer is incorrect. Well, oauth2Permissions can only accept collections value like an array not a boolean. It should be oauth2AllowImplicitFlow.
upvoted 176 times
cbn
4 years, 2 months ago
Agree. oauth2permissions: https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest#oauth2permissions-attribute oauth2allowimplicitflow: https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest#oauth2allowimplicitflow-attribute
upvoted 14 times
Asteriz
3 years, 3 months ago
Agreed
upvoted 1 times
...
...
Juanlu
4 years, 2 months ago
I Agree with you: 1) groupMembershipClaims 2) oauth2AllowImplicitFlow
upvoted 22 times
...
Esward
2 years, 3 months ago
Agreed
upvoted 1 times
...
cloud_exam1
4 years, 5 months ago
I think so. oauth2Permissions is a list. Should be oauth2AllowImplicitFlow. https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest
upvoted 11 times
iiiihhhh
4 years, 4 months ago
The problem is that oauth2AllowImplicitFlow is for browser-based apps(SPA), what is not mentioned in the question.
upvoted 1 times
Tealon
4 years, 4 months ago
OAuth2 can also be used in this scenario. It does not matter if you use the normal grant or implicit flow.
upvoted 4 times
...
AfroYeti
4 years, 3 months ago
It is "You are building a WEBSITE to access project data related to teams within your organization." I would imagine that, that website would run in a browser
upvoted 9 times
...
...
...
...
mlantonis
Highly Voted 3 years, 11 months ago
Box 1: groupMembershipClaims Personalization of the website must be based on membership in Active Directory groups. Group claims can also be configured in the Optional Claims section of the Application Manifest. Enable group membership claims by changing the groupMembershipClaim The valid values are: - "All" - "SecurityGroup" - "DistributionList" - "DirectoryRole" Here we need to mention that we want to get the groups for the users. Hence we need to mention to set the groupMembershipClaims property to All. Box 2: oauth2AllowImplicitFlow Azure AD users must be able to login to the website. auth2Permissions can only accept collections value like an array, not a boolean. oauth2AllowImplicitFlow accepts boolean value. Here from the list of options given, if we want the application to fetch the required tokens , we would need to allow Implicit Flow.
upvoted 44 times
mlantonis
3 years, 11 months ago
Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest#groupmembershipclaims-attribute https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest#oauth2permissions-attribute https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest#oauth2allowimplicitflow-attribute https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-group-claims https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-implicit-grant-flow
upvoted 8 times
...
...
florianwicher
Most Recent 2 months, 3 weeks ago
Why not "allowPublicClient"? If some logic is implemented in Javascript and running in the browser, the app would count as a public client, and we'd potentially have to turn this flag on. It is certainly not a weirder choice than turning on the deprecated implicit flow.
upvoted 1 times
...
kotireddy4120
1 year, 5 months ago
I Agree with : 1) groupMembershipClaims 2) oauth2AllowImplicitFlow
upvoted 3 times
...
Karunan
1 year, 5 months ago
If its implictflow, why answer not yet changed?
upvoted 2 times
0cc50bf
8 months, 2 weeks ago
Because if this website had all the right answers, Microsoft would sue them.
upvoted 1 times
...
...
richardc7
1 year, 7 months ago
Got this question on 28/09/2023
upvoted 1 times
...
BaoNguyen2411
1 year, 9 months ago
got this question on 06-29-2023
upvoted 3 times
...
MysticalSam
1 year, 10 months ago
This question was in today's exam on 10-June-2023
upvoted 4 times
...
adilkhan
2 years ago
ChatGPT 1) groupMembershipClaims 2) oauth2AllowImplicitFlow { "signInAudience": "AzureADMyOrg", "groupMembershipClaims": "SecurityGroup", "appId": "<app ID>", "appRoles": [], "availableToOtherTenants": false, "displayName": "<app name>", "oauth2AllowImplicitFlow": false, "optionalClaims": { "idToken": [], "accessToken": [] }, "publisherDomain": "<your domain>", "requiredResourceAccess": [] }
upvoted 2 times
...
carlosghosn
2 years, 5 months ago
Got this in the exam today ! Nov 25, 2022
upvoted 1 times
...
DusanS
2 years, 6 months ago
It must be oauth2AllowImplicitFlow because it is boll type in contrast to collection type. Look carefully picture.
upvoted 1 times
...
Eltooth
2 years, 10 months ago
1) groupMembershipClaims 2) oauth2AllowImplicitFlow
upvoted 4 times
...
Evo_Morales
3 years ago
Check Point - how many folks knew the correct answer before reading/researching?
upvoted 1 times
...
ReniRechner
3 years, 1 month ago
According to https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest optionalClaims => "All" might not be allowed groupMembershipClaims => "None", ... "All" allowPublicClient => boolean oauth2Permissions => collection requiredResourceAccess => collection ouath2AllowImplicitFlow => boolean So first has to be "groupMembershipClaims" (can also be inferred from the requirements). "allowPublicClient" seems to be meant for special cases not required here, there is only "oauth2AllowImplicitFlow" which makes sense for a website.
upvoted 3 times
...
oescm
3 years, 2 months ago
Got this one 02/2022. Went with: 1) groupMembershipClaims 2) oauth2AllowImplicitFlow
upvoted 3 times
...
MasterQuestMaster
3 years, 3 months ago
Got this on the exam!
upvoted 3 times
...
lugospod
3 years, 3 months ago
Got this one 01/2022. Went with most voted (to avoid writing answers again)
upvoted 5 times
maharaju
3 years ago
How come after writing exams you guys are visiting each questions and commenting ..SO much time
upvoted 8 times
...
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago