nerdexam
Microsoft

AZ-500 · Question #30

Your company has an Azure subscription named Sub1 that is associated to an Azure Active Directory Azure (Azure AD) tenant named contoso.com. The company develops a mobile application named App1…

The correct answer is A. a redirect URI. Explanation When registering an application that uses the OAuth 2 implicit grant type, Azure AD requires a redirect URI (also called a redirect endpoint) to know where to send the access token after authentication is complete - this is the URI the developer defines in their app…

Submitted by emma.c· Mar 6, 2026Secure identity and access

Question

Your company has an Azure subscription named Sub1 that is associated to an Azure Active Directory Azure (Azure AD) tenant named contoso.com. The company develops a mobile application named App1. App1 uses the OAuth 2 implicit grant type to acquire Azure AD access tokens. You need to register App1 in Azure AD. What information should you obtain from the developer to register the application?

Options

  • Aa redirect URI
  • Ba reply URL
  • Ca key
  • Dan application ID

How the community answered

(64 responses)
  • A
    95% (61)
  • C
    3% (2)
  • D
    2% (1)

Explanation

Explanation

When registering an application that uses the OAuth 2 implicit grant type, Azure AD requires a redirect URI (also called a redirect endpoint) to know where to send the access token after authentication is complete - this is the URI the developer defines in their app where Azure AD will redirect the user with the token. Option B (reply URL) is a common distractor because it is essentially an older term for redirect URI used in legacy Azure AD portals; however, the current and technically correct terminology in modern Azure AD app registration is "redirect URI," making A the better answer. Option C (a key) is incorrect because keys/client secrets are used for confidential clients (like web apps/APIs authenticating server-side), not for mobile apps using the implicit grant flow, which relies on the redirect URI instead. Option D (an application ID) is incorrect because the application ID (client ID) is generated by Azure AD after registration - it's something you receive, not something you provide.

Memory Tip: Think of the redirect URI as the app's "return address" - you must tell Azure AD where to deliver the token, and only the developer knows where their app is listening. If you're registering (not already registered), you give the URI; Azure gives you the App ID.

Topics

#Azure Active Directory#Application Registration#OAuth 2.0#Implicit Grant Flow#Redirect URI

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice