AZ-204 Develop Azure compute solutions Practice Question
You have an Azure App Service that runs a web API. The API is accessed by multiple client applications. You need to implement authentication and authorization using Microsoft Entra ID. The solution must allow client applications to obtain access tokens using the OAuth 2.0 client credentials flow. Which authentication setting should you configure in the App Service?
⚠ Common exam trap
A common misconception is that the built-in authentication module handles the entire OAuth 2.0 client credentials flow, including token acquisition. In reality, the module only validates tokens; the client applications must independently obtain tokens from Microsoft Entra ID. Additionally, candidates may consider Microsoft.Identity.Web (Option B) as an App Service setting, but it is a library used within the application code for token validation and acquisition, not a configuration option in the App Service itself.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the built-in authentication module with Microsoft Entra ID as the identity provider.
Configuring the built-in authentication module in Azure App Service with Microsoft Entra ID as the identity provider allows the App Service to validate access tokens issued by Microsoft Entra ID. Client applications can use the OAuth 2.0 client credentials flow to obtain tokens from Microsoft Entra ID and then present them to the App Service. The built-in auth module does not perform token acquisition; it only validates tokens at the gateway level, simplifying the validation process for the app.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable the 'Token store' in the Authentication / Authorization blade.
Why it's wrong here
Token store caches tokens but doesn't configure authentication.
- ✗
Configure the app to use the Microsoft.Identity.Web library to validate tokens.
Why it's wrong here
Also correct but not a setting in App Service; it's code-level. The question asks for 'setting' in App Service.
- ✓
Use the built-in authentication module with Microsoft Entra ID as the identity provider.
Why this is correct
Easy Auth can validate tokens issued by Microsoft Entra ID.
- ✗
Upload a client certificate and configure certificate-based authentication.
Why it's wrong here
Not related to OAuth 2.0 client credentials flow.
Go deeper
Related to this question
About these practice questions
This AZ-204 question is part of Courseiva's 881-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.