AZ-204 Certification Practice Question #140

Question

You are developing a web application that makes calls to the Microsoft Graph API. You register the application in the Azure portal and upload a valid X509 certificate.
You create an appsettings.json file containing the certificate name, client identifier for the application, and the tenant identifier of the Azure Active Directory (Azure
AD). You create a method named ReadCertificate to return the X509 certificate by name.
You need to implement code that acquires a token by using the certificate.
How should you complete the code segment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

In MSAL.NET, web applications or daemon applications that authenticate on their own behalf using a client certificate (an X509 certificate) are considered confidential client applications. They are instantiated using the **`ConfidentialClientApplicationBuilder`**. To acquire an access token for client credentials flow (app-to-app communication without user interaction), you call **`AcquireTokenForClient`** with the target scopes.

More AZ-204 practice questions