nerdexam
Microsoft

AZ-204 · Question #483

You are developing a web application that uses the Microsoft identity platform for user and resource authentication. The web application calls several REST APIs. A REST API call must read the user's…

The correct answer is E. scope. Scope is the parameter used to specify the permissions that the web application is requesting to access the user's resources, such as the calendar and the ability to send an email as the user. The scope parameter is typically included in the API call or in the authorization…

Submitted by joshua94· Mar 30, 2026Implement Azure security

Question

You are developing a web application that uses the Microsoft identity platform for user and resource authentication. The web application calls several REST APIs. A REST API call must read the user's calendar. The web application requires permission to send an email as the user. You need to authorize the web application and the API. Which parameter should you use?

Options

  • Atenant
  • Bcode_challenge
  • Cstate
  • Dclient_id
  • Escope

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    6% (3)
  • C
    15% (7)
  • D
    2% (1)
  • E
    75% (36)

Explanation

Scope is the parameter used to specify the permissions that the web application is requesting to access the user's resources, such as the calendar and the ability to send an email as the user. The scope parameter is typically included in the API call or in the authorization request sent to the Microsoft identity platform. https://learn.microsoft.com/en-us/azure/active-directory/develop/scopes-oidc

Topics

#Microsoft identity platform#OAuth 2.0#scope#delegated permissions

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-204 Practice