Service Principal Authentication Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering OAuth and OpenID Connect

What you'll be asked

  1. Which entity in Microsoft Entra ID represents an application's local instance within a specific tenant?
  2. When using a client secret for service principal authentication, what is the recommended security practice for rotating credentials?
  3. Which OAuth 2.0 flow is most appropriate for a daemon application (a background service) that needs to access Microsoft Graph without a signed-in user?
  4. If an application requires access to an Azure Key Vault using a service principal, what is the most secure way to manage the credentials for that service principal?
  5. You have a service principal configured with 'Application' permissions for Microsoft Graph. If the application is failing to perform a specific action, which of the following is the most likely cause?

Answers and explanations come after you submit.