App Security

Question 1

what is the right way to communicate users and application with backend resources ?

Answer 1

Azure API

Question 2

How API can securely authentication with resources ?

Answer 2

Oauth 2.0

Question 3

When to use Delegated Permission and Application Permission ?

Answer 3

Delegated Permissions used with Signed In user present. User or Administrator can make the consent.
Application permission used when signed in users is not precent and only application is present. Only Administrators can delegate application permissions.

Question 4

What is most secure way to secure APIs ?

Answer 4

Registering a application and proving what’s scope and user have to provide the consent. If user does not have enough permission, that will not work.

Question 5

What does mean by effective permission ?

Answer 5

Effective permissions are the permissions that your app has when it makes requests to the target resource.

Question 6

How des effective permission differ by Application permission and Delegated permission ?

Answer 6

When have delegated permission, can do only signed in user authorized permissions only.
Application permission, can user can perform based on the permission on effective permission.

Question 7

What SKU support HSM level keys in key vault ?

Answer 7

Premium SKU

Question 8

How to retain the deleted Key Vault ?

Answer 8

Enable Purge protection and set the retention days.