SC-300 Practice Question 3467
Exam: SC-300
Domain: Plan and implement workload identities
Difficulty: medium
You want to secure an application registration by replacing client secrets with a more secure cryptographic authentication credential. Which credential type is recommended by Microsoft?
Answer Options
A
X.509 Public Key Certificates or federated credentials
B
A single 4-digit numeric PIN
C
Cleartext passwords stored in application source code
D
SMS verification codes sent to a shared mobile phone
Correct Answer
A: X.509 Public Key Certificates or federated credentials
Explanation
X.509 Public Key Certificates or federated credentials provide cryptographic proof-of-possession authentication without relying on long-lived shared secret strings.