Microsoft Microsoft Certifications MS-600 Questions & Answers

• Question 61:

  You need to develop a server-based web app that will be registered with the Microsoft identity platform. The solution must ensure that the app can perform operations on behalf of the user? Which type of authorization flow should you use?

  A. authorization code

  B. refresh token

  C. resource owner password

  D. device code

  Correct Answer: A

  In web server apps, the sign-in authentication flow takes these high-level steps:

  

  A picture containing table

  Description automatically generated

  You can ensure the user's identity by validating the ID token with a public signing key that is received from the Microsoft identity platform endpoint. A session cookie is set, which can be used to identify the user on subsequent page requests.

  In addition to simple sign-in, a web server app might need to access another web service, such as a REST API. In this case, the web server app engages in a combined OpenID Connect and OAuth 2.0 flow, by using the OAuth 2.0

  authorization code flow.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-app-types

• Question 62:

  You have a SharePoint Framework (SPFx) 1.5 solution.

  You need to ensure that the solution can be used as a tab in Microsoft Teams.

  What should you do first?

  A. Convert the solution to use the Bot Framework

  B. Deploy the solution to a developer site collection

  C. Deploy the solution to the Microsoft AppSource store

  D. Upgrade the solution to the latest version of SPFx

  Correct Answer: D

  Starting with the SharePoint Framework v1.8, you can implement your Microsoft Teams tabs using SharePoint Framework. Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/web-parts/get-started/using-web-part-as-msteams-tab

• Question 63:

  You are developing a human resources application that will show users where they are in their company's organization chart.

  You are adding a new feature that will display the name of a user's manager inside the application.

  You need to create a REST query to retrieve the information. The solution must minimize the amount of data retrieved.

  Which query should you use?

  A. GET https://graph.microsoft.com/v1.0/users/{UserPricipalName}/ manager?$select=displayName

  B. GET https://graph.microsoft.com/v1.0/users/{UserPricipalName}/ people?$filter=jobTitle eq 'manager'and$select=displayName

  C. GET https://graph.microsoft.com/v1.0/users/{UserPricipalName}/ contacts?$filter=jobTitle eq 'manager'

  D. GET https://graph.microsoft.com/v1.0/users/{UserPricipalName}/manager

  Correct Answer: A

  Get user's manager. Returns the user or organizational contact assigned as the user's manager.

  Syntax: GET /me/manager GET /users/{id | userPrincipalName}/manager

  Only the name of the user's manager should be displayed so we use ?select=displayname To specify a different set of properties to return than the default set provided by the Graph, use the $select query option. The $select option allows for choosing a subset or superset of the default set returned.

  References: https://docs.microsoft.com/en-us/graph/api/user-list-manager https://developer.microsoft.com/en-us/graph/docs/overview/query_parameters

• Question 64:

  You plan to create a single-tenant console app that will use the Microsoft identity platform. You need to ensure that the app can use the device code flow to access Microsoft Graph and read email on behalf of the authenticated user.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A Set Supported account types to Accounts in any organizational directory

  A. Set Supported account types to Accounts in any organizational directory.

  B. Add redirect URIs.

  C. Set Supported account types to Accounts in this organizational directory only.

  D. Enable the Default client type option.

  E. From the Expose an API settings, create a custom scope.

  F. Generate a client secret for the app.

  Correct Answer: ABF

  Reference: https://docs.microsoft.com/en-us/graph/auth-register-app-v2 https://docs.microsoft.com/en-us/graph/auth-v2-u

• Question 65:

  This question requires that you evaluate the underlined text to determine if it is correct.

  Microsoft Visual Studio Code contains samples that you can use to quickly prototype a Microsoft Office Web Add-in for Microsoft Word.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed.

  B. Microsoft AppSource

  C. The Office Ul Fabric

  D. The Script Lab add-in

  Correct Answer: D

• Question 66:

  You have an API that is secured by using Azure Active Directory (Azure AD).

  You are designing a SharePoint Framework (SPFx) solution.

  Which object should you use to connect to the API from the solution?

  A. SPHttpClient

  B. HttpClient

  C. AadHttpClient

  Correct Answer: C

  By using the AadHttpClient, you can easily connect to APIs secured by using Azure AD without having to implement the OAuth flow yourself. Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/use-aadhttpclient

• Question 67:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to deploy a Microsoft Teams app. The app will create a Microsoft Teams personal tab that displays a website.

  Solution: You manually create a Microsoft Teams manifest file that includes a configurableTabs section containing the name, ID, and content URL of the website.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/create-personal-tab?tabs=nodejs

• Question 68:

  You need to request permission to create a group in a Sharepoint Framework (SPFx) solution. To which file should you add the permission request?

  A. Config.json

  B. Package.json

  C. Serve.json

  D. Package-solution.json

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/web-parts/get-started/using-microsoft-graph-apis

• Question 69:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to deploy a Microsoft Teams app. The app will create a Microsoft Teams personal tab that displays a website.

  Solution: You create a Microsoft Teams manifest file that includes a staticTabs section containing the name, ID, and content URL of the website.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/create-personal-tab?tabs=nodejs

• Question 70:

  You have an application named App1 that is used to administer an Azure Active Directory (Azure AD) tenant.

  When administrators install App1, they are prompted for admin consent.

  Which application permission can cause the administrators to be prompted for consent?

  A. RoleManagement. Read . Directory

  B. Device.Command

  C. Device.Read

  D. Calendars.ReadWrite

  Correct Answer: A