SC-300 Practice Question 3467

Exam: SC-300
Domain: Plan and implement workload identities
Difficulty: medium
You want to secure an application registration by replacing client secrets with a more secure cryptographic authentication credential. Which credential type is recommended by Microsoft?

Answer Options

A
X.509 Public Key Certificates or federated credentials
B
A single 4-digit numeric PIN
C
Cleartext passwords stored in application source code
D
SMS verification codes sent to a shared mobile phone

Correct Answer

A: X.509 Public Key Certificates or federated credentials

Explanation

X.509 Public Key Certificates or federated credentials provide cryptographic proof-of-possession authentication without relying on long-lived shared secret strings.