Examkin

Soru

Zorluk: Çok zorAzure Monitor Alerts and Action Groups

You are configuring an Azure Monitor action group to trigger a custom webhook endpoint. The endpoint is secured by Microsoft Entra ID. You register a Microsoft Entra application named App1 in your tenant to represent the webhook receiver API. In the action group Webhook configuration, you select the option to 'Use Azure AD authentication'. To enable the action group to successfully authenticate and obtain an OAuth token for the webhook, which identifier must you input in the Object ID field of the Webhook configuration?

  1. The Object ID of the service principal representing App1 in the tenantCevap
  2. B
    The Object ID of the App1 application registration
  3. C
    The Application (client) ID of App1
  4. D
    The Client secret generated for App1

Cevap

The Object ID of the service principal representing App1 in the tenant
The correct answer is the Object ID of the service principal representing the application in the tenant. When configuring Microsoft Entra ID authentication for a Webhook action, Azure Monitor requests a token for the audience identified by the Service Principal Object ID (Enterprise Application object ID), not the Application Registration object ID.

Adım Adım Çözüm

1
Identify the authentication mechanism required for the secured webhook.
The webhook is secured by Microsoft Entra ID, meaning Azure Monitor must obtain an access token to call the endpoint.
Securing webhooks prevents unauthorized triggers by requiring a valid Bearer token.
2
Determine the resource identifiers needed by Azure Monitor.
Azure Monitor needs the Tenant ID where the app is registered and the Object ID of the Service Principal.
Microsoft Entra ID requires the service principal's object ID (representing the instantiated enterprise application in the tenant) to issue the correct token audience.
3
Distinguish between the App Registration Object ID and the Service Principal Object ID.
The Object ID of the Service Principal (found under Enterprise Applications) is used, not the Object ID of the Application Registration.
The service principal is the local runtime instantiation that holds permissions and authentication configuration, while the application registration is the global blueprint.

Anahtar Kavram

Azure Monitor Action Group Webhook authentication requires the Service Principal Object ID rather than the App Registration Object ID.
Bu soruyu puanla

Konular

Azure Monitor Alerts and Action Groups

Bu konudan daha fazla soru