Exam Preparation Quiz

Explanations for each answer:

• Send Azure AD access tokens with the search request is incorrect. While authentication is important, Azure AD tokens alone don't provide the document-level filtering mechanism needed to restrict access based on group membership.
• Retrieve all the groups is incorrect. Retrieving all groups provides organizational information but doesn't implement the security filtering logic needed for document-level access control.
• Retrieve the group memberships of the user is correct. Getting user group memberships provides the security context needed to determine which documents the user should be able to access based on their organizational permissions.
• Add allowed groups to each index entry is correct. Adding allowed group information to index entries enables document-level security by associating each document with the groups that should have access to it.
• Create one index per group is incorrect. Creating separate indexes per group creates unnecessary complexity and doesn't scale efficiently when users belong to multiple groups.
• Supply the groups as a filter for the search requests is correct. Using group membership as a search filter ensures that users only see documents they're authorized to access based on their security permissions.