Microsoft AZ-204 Exam - Topic 2 Question 122 Discussion

Actual exam question for Microsoft's AZ-204 exam

Question #: 122
Topic #: 2

You are developing an ASP.NET Core app hosted in Azure App Service.

The app requires custom claims to be returned from Microsoft Entra ID for user authorization. The claims must be removed when the app registration is removed. You need to include the custom claims in the user access token. What should you do?

AConfigure the app to use the OAuth 2.0 authorization code flow.

BImplement custom middleware to retrieve role information from Microsoft Entra ID.

CAdd the groups to the groupMembershipClaims attribute in the app manifest.

DRequire the https://graph.microsoft.eom/.default scope during authentication.

EAdd the roles to the appRoles attribute in the app manifest.

Show Suggested Answer

Suggested Answer: A

by Ernest at Aug 16, 2025, 04:59 PM

Limited Time Offer

25%

Off

Get Premium AZ-204 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Son

2 months ago

D seems off, we need more than just scopes for custom claims.

upvoted 0 times

...

Skye

3 months ago

Wait, can you really remove claims just by deleting the app registration?

upvoted 0 times

...

Hubert

3 months ago

Totally agree with C! Makes the most sense.

upvoted 0 times

...

Celestina

3 months ago

E is interesting, but I’m not sure it covers everything we need.

upvoted 0 times

...

Sherita

3 months ago

I think option C is the way to go for custom claims.

upvoted 0 times

...

Chantay

3 months ago

I vaguely remember that we need to set up the app roles in the manifest for claims, but I’m not entirely sure if that’s the right approach here.

upvoted 0 times

...

Myra

4 months ago

I feel like we discussed the OAuth 2.0 flow in class, but I’m not confident it directly applies to adding custom claims.

upvoted 0 times

...

Elenor

4 months ago

I think option C sounds familiar from our practice questions, but I can't recall if it specifically relates to custom claims in the access token.

upvoted 0 times

...

Jerlene

4 months ago

I remember something about using the app manifest to configure claims, but I'm not sure if it's the groups or roles that need to be added.

upvoted 0 times

...

Ruby

4 months ago

I feel pretty confident about this one. The question is asking how to include custom claims in the user access token, and the solution is to add the groups to the groupMembershipClaims attribute in the app manifest.

upvoted 0 times

...

Rebbecca

4 months ago

Hmm, this is a tricky one. I'm not sure if I should be requiring the https://graph.microsoft.eom/.default scope during authentication or if there's a different approach I should be taking. I'll have to review the information on custom claims and app manifests.

upvoted 0 times

...

Keshia

5 months ago

The key here is that the custom claims need to be included in the user access token. I believe the correct answer is to add the roles to the appRoles attribute in the app manifest.

upvoted 0 times

...

Tijuana

5 months ago

I'm a bit confused about the different options here. I'm not sure if I should be configuring the app to use the OAuth 2.0 authorization code flow or if I need to implement custom middleware. I'll have to think this through carefully.

upvoted 0 times

...

Ronnie

5 months ago

This question seems straightforward. I think the answer is to add the groups to the groupMembershipClaims attribute in the app manifest.

upvoted 0 times

...

Jutta

6 months ago

I think Hershel might be right. Adding roles could be a better way to include custom claims in the user access token.

upvoted 0 times

...

Dalene

7 months ago

But adding roles might not necessarily include custom claims. GroupMembershipClaims seems more appropriate for custom claims.

upvoted 0 times

...

Andrew

7 months ago

I think option C is the way to go. Adding the groups to the groupMembershipClaims attribute in the app manifest sounds like the simplest and most straightforward solution.

upvoted 0 times