nerdexam
Microsoft

PL-400 · Question #342

The communication department for a company plans to add a publicly accessible survey page to the company's public website. You must add the new survey page to the company's public website and…

The correct answer is D. Client secret. To allow a publicly accessible survey page to write data to Microsoft Dataverse without requiring explicit user credentials, client secret-based authentication should be implemented.

Submitted by stefanr· Apr 18, 2026

Question

The communication department for a company plans to add a publicly accessible survey page to the company's public website. You must add the new survey page to the company's public website and capture data from the page to a Microsoft Dataverse environment. Explicit user credentials must not be required to write survey data to Dataverse. You need to implement authentication. Which authentication mechanism should you implement?

Options

  • AClaims based
  • BMicrosoft 365
  • CAzure guest account
  • DClient secret

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    10% (4)
  • C
    5% (2)
  • D
    83% (35)

Why each option

To allow a publicly accessible survey page to write data to Microsoft Dataverse without requiring explicit user credentials, client secret-based authentication should be implemented.

AClaims based

Claims-based authentication is typically tied to user identities and roles, which is not suitable for a public page writing data without explicit user credentials.

BMicrosoft 365

Microsoft 365 authentication requires a user to sign in with their Microsoft 365 credentials, directly contradicting the requirement for no explicit user credentials.

CAzure guest account

An Azure guest account still represents a specific user identity requiring credentials, and the requirement is for no explicit user credentials for the data writing process.

DClient secretCorrect

Client secret authentication provides a secure method for an application, such as a backend service for a public website, to authenticate directly with Azure AD using its own identity. This enables server-to-server communication to write data to Dataverse without needing an explicit end-user login or specific user credentials.

Concept tested: Application authentication for Dataverse

Source: https://learn.microsoft.com/en-us/power-apps/developer/data-platform/authenticate-web-api-application-users

Community Discussion

No community discussion yet for this question.

Full PL-400 Practice