nerdexam
Microsoft

AZ-500 · Question #362

You have an Azure Active Directory (Azure AD) tenant that contains a user named Admin1. Admin1 is assigned the Application developer role. You purchase a cloud app named App1 and register App1 in…

The correct answer is C. Add App1 as an enterprise application. This is a tricky one because uploading a certificate is also required. However, the QUESTION 3states that the Token Encryption option is unavailable. This is because the app is not added as an enterprise application. When the app is added as an enterprise application, the Token…

Submitted by kwame.gh· Mar 6, 2026Secure identity and access

Question

You have an Azure Active Directory (Azure AD) tenant that contains a user named Admin1. Admin1 is assigned the Application developer role. You purchase a cloud app named App1 and register App1 in Azure AD. Admin1 reports that the option to enable token encryption for App1 is unavailable. You need to ensure that Admin1 can enable token encryption for App1 in the Azure portal. What should you do?

Options

  • AUpload a certificate for App1.
  • BModify the API permissions of App1.
  • CAdd App1 as an enterprise application.
  • DAssign Admin1 the Cloud application administrator role.

How the community answered

(37 responses)
  • A
    14% (5)
  • B
    8% (3)
  • C
    76% (28)
  • D
    3% (1)

Explanation

This is a tricky one because uploading a certificate is also required. However, the QUESTION 3states that the Token Encryption option is unavailable. This is because the app is not added as an enterprise application. When the app is added as an enterprise application, the Token Encryption option will be available. Then you can upload the certificate. https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/howto-saml-token-

Topics

#token encryption#enterprise application#app registration#Azure AD

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice