A team disables an admin feature flag and assumes users cannot call the corresponding API directly. What else is required?

Choose the single best answer.

A.Server-side authentication and authorization for the admin API
B.Moving the flag into an immutable snapshot as the sole permission check
C.Only hiding the navigation link
D.Only restricting who may edit the feature flag

Show the answer and explanation

✓ Correct answer

Server-side authentication and authorization for the admin API

Server authorization protects direct endpoint calls. Hiding navigation only affects presentation, flag-editor rights govern configuration modification rather than endpoint use, and a snapshot preserves values without granting caller permissions. Source guide: PDF page(s) 53.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.