SC-300 Practice Question 3459
Exam: SC-300
Domain: Plan and implement workload identities
Difficulty: medium
You are developing an automated backend daemon service running in Azure that needs to query Microsoft Graph without any human interaction. Which OAuth 2.0 permission type must be granted?
Answer Options
A
Application permissions (app-only access)
B
Delegated permissions with user consent
C
Basic Authentication with cleartext credentials
D
Anonymous guest permissions
Correct Answer
A: Application permissions (app-only access)
Explanation
Application permissions (app-only access) allow services to run non-interactively in the background and access data across the entire tenant without a signed-in user.