Exam AZ-204 topic 2 question 9 discussion

Actual exam question from Microsoft's AZ-204

Question #: 9
Topic #: 2

HOTSPOT -
You are developing an Azure Web App. You configure TLS mutual authentication for the web app.
You need to validate the client certificate in the web app. To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Accessing the client certificate from App Service.
If you are using ASP.NET and configure your app to use client certificate authentication, the certificate will be available through the HttpRequest.ClientCertificate property. For other application stacks, the client cert will be available in your app through a base64 encoded value in the "X-ARR-ClientCert" request header. Your application can create a certificate from this value and then use it for authentication and authorization purposes in your application.
Reference:
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth

by 27close at Nov. 14, 2020, 12:20 p.m.

Comments

Submit Cancel

mlantonis

Highly Voted 3 years, 4 months ago

Box 1: HTTP request header If you are using ASP.NET and configure your app to use client certificate authentication, the certificate will be available through the HttpRequest.ClientCertificate property. Box 2: Base64 For other application stacks, the client cert will be available in your app through a base64 encoded value in the "X-ARR-ClientCert" request header. Your application can create a certificate from this value and then use it for authentication and authorization purposes in your application. Reference: https://docs.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth

upvoted 67 times

...

27close

Highly Voted 3 years, 11 months ago

With client certificates enabled, App Service injects an X-ARR-ClientCert request header with the client certificate.

upvoted 16 times

...

neelkanths

Most Recent 6 months ago

Got it on 20 April 2024...Marks > 950...answer is correct.... Box 1: HTTP request header Box 2: Base64

upvoted 6 times

...

Nihilist11

9 months, 1 week ago

Jan-21-2024 - This was in my exam, went with selected answer Score 740 Contosso case study [Couldnt find here]

upvoted 3 times

...

bgbgvfvf

10 months, 1 week ago

Answer is correct.Base64

upvoted 1 times

...

NightshadeRC

1 year, 3 months ago

Had this question today: 2023-07-26

upvoted 4 times

...

[Removed]

1 year, 6 months ago

Got this in exam today (5 April 2023)

upvoted 3 times

...

ucskips

1 year, 7 months ago

why is it base64?

upvoted 3 times

yyandrakk

10 months ago

"or other application stacks (Node.js, PHP, etc.), the client cert is available in your app through a base64 encoded value in the X-ARR-ClientCert request header."

upvoted 1 times

...