Microsoft AZ-204 Exam - Topic 5 Question 102 Discussion

Actual exam question for Microsoft's AZ-204 exam

Question #: 102
Topic #: 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.

You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.

You need to configure authorization.

Solution:

Configure and use Integrated Windows Authentication in the website.

In the website, query Microsoft Graph API to load the group to which the user is a member.

Does the solution meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: A

by Kaycee at Sep 07, 2024, 04:18 PM

Limited Time Offer

25%

Off

Get Premium AZ-204 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Whitley

5 months ago

Just to clarify, querying Microsoft Graph API is essential for this setup, right?

upvoted 0 times

...

Deeanna

5 months ago

No way, this won't meet the goal. You need to use Azure AD directly for permissions.

upvoted 0 times

...

Ardella

5 months ago

Wait, can you even use Integrated Windows Authentication with Azure AD? Seems off.

upvoted 0 times

...

Larue

5 months ago

I agree, using Microsoft Graph API is the right move for group membership!

upvoted 0 times

...

Lura

6 months ago

Sounds like a solid plan, but I don't think Integrated Windows Authentication is needed here.

upvoted 0 times

...

Gilberto

6 months ago

I’m a bit confused about the role of Azure AD groups in this setup. I thought we needed a different method for authorization.

upvoted 0 times

...

Leah

6 months ago

This reminds me of a practice question where we had to choose between different authentication methods. I feel like this solution might not fully meet the requirements.

upvoted 0 times

...

Graham

6 months ago

I think querying the Microsoft Graph API is a good approach, but I'm not sure if it aligns with the Integrated Windows Authentication part.

upvoted 0 times

...

Jules

6 months ago

I remember discussing how Integrated Windows Authentication might not be the best fit for Azure AD scenarios.

upvoted 0 times

...

Audrie

6 months ago

This question is tricky. The solution provided doesn't seem quite right to me. I'll need to review the Azure AD and authorization documentation to come up with a more appropriate solution that meets all the requirements.

upvoted 0 times

...

Cletus

6 months ago

Okay, let me think this through. The solution mentions querying the Microsoft Graph API to get the user's group membership. That makes sense, as we need to map the groups to the permission levels. I'll make sure to research the best practices for this kind of integration.

upvoted 0 times

...

Kanisha

6 months ago

Hmm, I'm a bit unsure about this one. Integrated Windows Authentication? Isn't that an older authentication method? I'll need to double-check if that's the right approach for an Azure Web App with Azure AD integration.

upvoted 0 times

...

Cecilia

7 months ago

This question seems straightforward. I'll focus on the key requirements - using Azure AD for authentication and determining permission levels based on group membership. Querying the Microsoft Graph API to get the user's groups should be the way to go.

upvoted 0 times

...

Kerry

11 months ago

Wait, are we supposed to use a typewriter to configure this website? I thought we were in the 21st century!

upvoted 0 times

Jonelle

10 months ago

Great, so we don't need a typewriter after all. The solution seems to work fine for configuring authorization.

upvoted 0 times

...

Anissa

10 months ago

No, we are not using a typewriter. The solution involves configuring authorization using Azure AD credentials.

upvoted 0 times

...

Dylan

10 months ago

Yes, that solution meets the goal. We can query Microsoft Graph API to load the group to which the user is a member.

upvoted 0 times

...

Wilda

10 months ago

No, we don't need to use a typewriter. We can configure and use Integrated Windows Authentication in the website.

upvoted 0 times

...

Nilsa

10 months ago

Yes, that solution will meet the goal. We can query Microsoft Graph API to load the group to which the user is a member.

upvoted 0 times

...

Tiara

11 months ago

No, we don't need to use a typewriter. We can configure and use Integrated Windows Authentication in the website.

upvoted 0 times

...

Malcom

12 months ago

Haha, Integrated Windows Authentication? In the cloud? Good one! This solution is definitely a no-go.

upvoted 0 times

Oretha

10 months ago

User 3: Yeah, using Microsoft Graph API to load group membership would be a better approach.

upvoted 0 times

...

Mammie

10 months ago

User 2: I agree, it doesn't seem like a good solution for Azure Web App authentication.

upvoted 0 times

...

Adell

11 months ago

User 1: Integrated Windows Authentication in the cloud? That doesn't sound right.

upvoted 0 times

...

Mel

12 months ago

Querying the Microsoft Graph API to load the user's groups is the right approach, but you'll need to use Azure AD authorization, not Integrated Windows Authentication.

upvoted 0 times

Jovita

11 months ago

User 3: Querying the Microsoft Graph API to load the user's groups is the right approach, but you'll need to use Azure AD authorization, not Integrated Windows Authentication.

upvoted 0 times

...