The communication department for a company plans to add a publicly accessible survey page to the company's public website. You must add the new survey page to the company's public website and…

Question

Options

• AMicrosoft 365
• BX.509 certificate
• CAzure AD Conditional Access
• DClaims-based

• A
  8% (2)
• B
  4% (1)
• C
  84% (21)
• D
  4% (1)

Explanation

Azure AD Conditional Access is the correct mechanism here because it supports application-level (service principal) authentication via OAuth 2.0 client credentials flow, allowing the survey page - registered as an Azure AD application - to write data to Common Data Service on its own behalf without prompting any individual user for credentials. The Conditional Access policy governs what the application can access, satisfying the "no explicit user credentials" requirement.

Why the distractors are wrong:

• A (Microsoft 365): This is a product suite (Teams, Outlook, etc.), not an authentication mechanism.
• B (X.509 certificate): Certificate-based auth is used for device/client identity scenarios, not the standard approach for a web app writing to CDS anonymously.
• D (Claims-based): Claims-based authentication handles federated identity for known users via identity providers (e.g., ADFS); it's not designed for anonymous, credential-free write access.

Memory tip: Think "Conditional Access = the app authenticates, not the user." Whenever a scenario says users must not provide credentials but data must still reach CDS, Conditional Access policies govern the application's access via service principal - the user stays anonymous while the app itself holds the identity.

No community discussion yet for this question.