AZ-204 Certification Practice Question #248

Question

You need to authenticate the user to the corporate website as indicated by the architectural diagram.
Which two values should you use? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

To authenticate a user securely to the corporate website via an OpenID Connect flow, the application must perform token validation. First, it requires the **Azure AD endpoint URI** (D) to locate the identity provider's configuration and dynamically download the public signing keys. Second, the application must validate the **ID token signature** (A) using those public keys to ensure the token is authentic, issued by Azure AD, and has not been tampered with before reading any user info or claims. Selecting both A and D represents the primary cryptographic and network requirements for verifying user authentication.

More AZ-204 practice questions