The communication department for a company plans to add a publicly accessible survey page to the company's public website. You must add the new survey page to the company's public website and…

Question

Options

• AADFS
• BAzure AD Conditional Access
• CAzure guest account
• DClient secret

• A
  3% (1)
• B
  72% (23)
• C
  9% (3)
• D
  16% (5)

Explanation

Azure AD Conditional Access is correct because it allows you to configure policies that grant the survey application access to Dataverse based on defined conditions - such as the application's identity - without requiring individual users to sign in or provide explicit credentials. This enables the public-facing page to write data to Dataverse transparently, satisfying the "no explicit user credentials" requirement at the application policy level.

Why the distractors are wrong:

• A (ADFS): Active Directory Federation Services federates identities for organizational users - it still requires user-provided credentials and is designed for corporate SSO, not anonymous public access.
• C (Azure guest account): Guest accounts authenticate external users via their home identity provider, but they still require explicit user sign-in, violating the stated constraint.
• D (Client secret): A client secret is a credential itself (used for service principal authentication) - it belongs to the app registration, not the authentication mechanism controlling access policy for a public scenario.

Memory tip: Think "Conditional Access = policy-based access without prompting users" - it's the Azure AD layer that decides how an application is trusted to access a resource, making it ideal when you need access without surfacing a login screen to public users.

No community discussion yet for this question.