nerdexam
Microsoft

PL-400 · Question #345

The communication department for a company plans to add a publicly accessible survey page to the company's public website. You must add the new survey page to the company's public website and…

The correct answer is D. OAuth 2.0. To allow a publicly accessible survey page to write data to a Microsoft Dataverse environment without requiring explicit user credentials, implement OAuth 2.0 for application-level authentication.

Submitted by krish.m· Apr 18, 2026

Question

The communication department for a company plans to add a publicly accessible survey page to the company's public website. You must add the new survey page to the company's public website and capture data from the page to a Microsoft Dataverse environment. Explicit user credentials must not be required to write survey data to Dataverse. You need to implement authentication. Which authentication mechanism should you implement?

Options

  • AAzure AD Conditional Access
  • BAzure guest account
  • CX.509 certificate
  • DOAuth 2.0

How the community answered

(55 responses)
  • A
    13% (7)
  • B
    7% (4)
  • C
    4% (2)
  • D
    76% (42)

Why each option

To allow a publicly accessible survey page to write data to a Microsoft Dataverse environment without requiring explicit user credentials, implement OAuth 2.0 for application-level authentication.

AAzure AD Conditional Access

Azure AD Conditional Access is a policy engine for controlling access based on various conditions, not an authentication mechanism itself for application-level access without user credentials.

BAzure guest account

An Azure guest account still requires a specific user identity and explicit credentials, which contradicts the requirement for no explicit user credentials for writing data from a public page.

CX.509 certificate

X.509 certificates can be used as a form of client credential within an OAuth 2.0 flow, but OAuth 2.0 is the overarching authentication mechanism that enables this scenario.

DOAuth 2.0Correct

OAuth 2.0 provides an authorization framework where an application can obtain an access token to interact with protected resources like Dataverse. By using the client credentials flow (part of OAuth 2.0), the public website's backend application can authenticate itself with Azure AD to get a token and write data to Dataverse without an end-user signing in.

Concept tested: OAuth 2.0 for application authentication in Dataverse

Source: https://learn.microsoft.com/en-us/power-apps/developer/data-platform/authenticate-web-api-application-users

Community Discussion

No community discussion yet for this question.

Full PL-400 Practice