AZ-204 · Question #387
Case Study 3 - City Power & Light Background City Power & Light company provides electrical infrastructure monitoring solutions for homes and businesses. The company is migrating solutions to Azure. C
The correct answer is A. ID token signature D. Azure AD endpoint URI. A: Claims in access tokens JWTs (JSON Web Tokens) are split into three pieces: Header - Provides information about how to validate the token including information about the type of token and how it was signed. Payload - Contains all of the important data about the user or app tha
Question
Options
- AID token signature
- BID token claims
- CHTTP response code
- DAzure AD endpoint URI
- EAzure AD tenant ID
How the community answered
(18 responses)- A78% (14)
- B11% (2)
- C6% (1)
- E6% (1)
Explanation
A: Claims in access tokens JWTs (JSON Web Tokens) are split into three pieces: Header - Provides information about how to validate the token including information about the type of token and how it was signed. Payload - Contains all of the important data about the user or app that is attempting to call your Signature - Is the raw material used to validate the token. E: Your client can get an access token from either the v1.0 endpoint or the v2.0 endpoint using a variety of protocols. Scenario: User authentication (see step 5 below) The following steps detail the user authentication process: 1. The user selects Sign in in the website. 2. The browser redirects the user to the Azure Active Directory (Azure AD) sign in page. 3. The user signs in. 4. Azure AD redirects the user's session back to the web application. The URL includes an 5. The web application calls an API and includes the access token in the authentication header. The application ID is sent as the audience (`aud') claim in the access token. 6. The back-end API validates the access token. https://docs.microsoft.com/en-us/azure/api-management/api-management-access-restriction-
Topics
Community Discussion
No community discussion yet for this question.