• What isAzure RBAC (Role-Based Access Control)? How does it differ fromapplication-level authorizationimplemented within yourASP.NET Core Web APIusingAzure AD roles or groups?

  • Describe the difference betweenSystem-AssignedandUser-Assigned Managed Identities. When would you use each?

  • How can Managed Identities simplify authentication between Azure resources, such as an ASP.NET Core Web App/API hosted in Azure App Service needing to access Azure Key Vault or Azure SQL Database ?

  • What is Azure AD B2C ? When would you choose it over standard Azure AD for authenticating users for your ASP.NET Core application?

  • Explain Azure AD Conditional Access policies. How might you use them to enhance thesecurityof accessing yourASP.NET Core Web API?

  • What are scopes and roles in Azure AD? How would you use them to implement fine-grained authorization within your ASP.NET Core Web API ?

  • How do you validate anAzure AD Access Tokenwithin anASP.NET Core Web API? What information within the token do you typically check? (Expertise Level: Mid to Expert)

  • Explain the difference betweenID TokensandAccess TokensinAzure AD. Which one is typically used to authorize calls to a protectedASP.NET Core Web API? Mid Level

  • What is an App Registration in Azure AD , and what key information do you configure when registering an ASP.NET Core Web API ?

  • Describe the OAuth 2.0 Authorization Code flow and explain how it's typically used in an ASP.NET Core web application interacting with a secured Web API .

  • What is the purpose ofMicrosoft.Identity.Webin anASP.NET Core application secured with Azure AD?

  • How do you configure an ASP.NET Core Web API to require authentication using Azure AD? Describe the key steps in Startup.cs or Program.cs.

  • Explain the difference between Authentication and Authorization in the context of Azure AD and securing an ASP.NET Core Web API.