SC-300 Certification Practice Question #212

Question

You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains a registered app named App1.

You have a partner organization that has a Microsoft Entra tenant. The tenant contains a registered app named App2.

You need to ensure that App1 can access App2.

Which two types of credentials can App1 use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Accepted Answer

App1 accessing App2 in a partner tenant is OAuth 2.0 client-credentials (app-only) authentication. MS Learn states a confidential client app registration authenticates "as itself" using **certificates, client secrets, or federated credentials** — the question's two offered application-credential types are certificate (A) and secret (C). Managed identity (B) is confined to a single tenant and cannot be used cross-tenant; a user account (D) and one-time password (E) involve human/interactive sign-in, not app-to-app client credentials. The `Highly Voted` answer (6 👍) and the 9-vote AC majority align with MS Learn. Confidence is 88 rather than higher because examtopics records the official Suggested Answer as only "C," so Suggested vs. Most Voted disagree — but the question asks for **two** credential types, making single-letter C incomplete and confirming AC as the correct pair.

More SC-300 practice questions