AI-200 Event Driven Integration Practice Question
Your organization uses Azure Event Grid to route cloud events across different departments. Security auditors require that all event traffic destined for a webhook endpoint is authenticated using Azure Active Directory (Microsoft Entra ID) bearer tokens. How should you configure the event subscription?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a Managed Identity on the event subscription and select the target audience.
Event Grid allows you to configure Managed Identity (System-assigned or User-assigned) for webhook subscriptions so that Event Grid attaches a Microsoft Entra ID bearer token in the authorization header when invoking the webhook.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable IP firewall rules on the Event Grid topic to restrict traffic.
Why it's wrong here
IP firewalls restrict network access to the publisher, not endpoint authentication for the subscriber.
- ✗
Use Basic Authentication with a static API key stored in App Settings.
Why it's wrong here
Basic authentication with static keys is not an enterprise-grade recommendation for Microsoft Entra integration.
- ✓
Configure a Managed Identity on the event subscription and select the target audience.
Why this is correct
Using a managed identity allows Event Grid to securely authenticate against protected webhook endpoints using Microsoft Entra tokens.
- ✗
Embed a Shared Access Signature (SAS) token directly in the webhook URL query parameters.
Why it's wrong here
SAS tokens in URLs are less secure and deprecated for modern enterprise authentication standards compared to managed identities.
About these practice questions
Courseiva writes every AI-200 question from scratch — 507 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.