AZ-204 Certification Practice Question #241

Question

You need to add code at line AM09 to ensure that users can review content using ContentAnalysisService.
How should you complete the code? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

The Contoso website is a Single Page Application (SPA) built using React. In traditional Azure AD authentication for SPAs (before Auth Code Flow with PKCE became standard in MSAL), the OAuth 2.0 Implicit Flow was used. To support this:
1. The **`"oauth2AllowIdTokenImplicitFlow"`** property must be set to **`true`** so the application can request an ID token from the authorization endpoint, which contains the user's identity claims (like the email address required for auditing).
2. The **`"oauth2AllowImplicitFlow"`** property must also be set to **`true`** so that the SPA can request access tokens directly from the endpoint without passing client secrets (which cannot be securely stored in browser code).

More AZ-204 practice questions