Latest [Jul 28, 2021] Microsoft MS-600 Exam Practice Test To Gain Brilliante Result
Take a Leap Forward in Your Career by Earning Microsoft MS-600
NEW QUESTION 33
You need to protect the backend web service to meet the technical requirements.
Which four actions should you perform in sequence? To answer, move the actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Here is a quick overview of the steps:
Step 1: Register an application in Azure AD for the backend web service Register an application (backend-app) in Azure AD to represent the API.
Step 2: Set the App ID URI for the backend service application registration When the application is created (step 1) select Expose an API and click on Save and continue to create an Application ID URI.
Step 3: Defend the scopes in the backend web service application registration In the Add a scope page, create a new scope supported by the API. (e.g., Read) then click on Add scope to create the scope. Repeat this step to add all scopes supported by your API.
Step 4: Register an application in Azure AD for E-invoicing.
Step 4.1 Register another application in Azure AD to represent a client application Step 4.2 Now that you have registered two applications to represent the API and the Developer Console, you need to grant permissions to allow the client-app to call the backend-app.
Scenario:
Secure access to the backend web service by using Azure AD
E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.
Reference:
https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad
NEW QUESTION 34
You have an application named App1 that is used to administer an Azure Active Directory (Azure AD) tenant.
When administrators install Appl, they are prompted for admin consent.
Which application permission can cause the administrators to be prompted for consent?
- A. Device.Command
- B. Device.Read
- C. RoleManagement. Read . Directory
- D. Calendars.ReadWrite
Answer: C
NEW QUESTION 35
What should you add to a SharePoint Framework (SPFx) solution to ensure that the solution can be used as a Microsoft Teams tab?
- A. a manifest file to the webparts folder in the solution
- B. the TeamsTabvalue to the supportedHostsproperty in the manifest file
- C. the TeamsTabvalue to the componentTypeproperty in the manifest file
- D. a manifest file to the Teams folder in the solution
Answer: A
Explanation:
You need to update the web part manifest to make it available for Microsoft Teams. Locate the manifest json file for the web part you want to make available to Teams and modify the supportedHosts properties to include
"TeamsTab".
Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/web-parts/get-started/using-web-part-as-ms- teams-tab
NEW QUESTION 36
HOTSPOT
You are developing an interactive invoicing application that will be used by end users. The application will have the following features:
* Save invoices generated by a user to the user's Microsoft OneDrive.
* Email daily automated reminders.
You need to identify which permissions to grant for the application features. The solution must use the principle of least privilege.
Which permission should you grant for each feature? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Microsoft identity platform supports two types of permissions: delegated permissions and application permissions.
Box 1: Delegated
* Delegated permissions are used by apps that have a signed-in user present. For these apps, either the user or an administrator consents to the permissions that the app requests, and the app is delegated permission to act as the signed-in user when making calls to the target resource.
Box 2: Application
* Application permissions are used by apps that run without a signed-in user present; for example, apps that run as background services or daemons. Application permissions can only be consented by an administrator.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent
NEW QUESTION 37
You are developing a sever-based application that has the following requirements:
Prompt the user to fill out a form that contains a keyword.
Search the Microsoft OneDrive folder for files that contain the keyword and return the results to the user.
Allow the user to select one of the files from the results.
Copy the selected file to an Azure Blob storage container.
Which four actions should the application perform in sequence? To answer, move the actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - PERFORM THE FOLLOWING REST request GET....
2 - Store the microsoft,graph.dowmlode....
3 - Perform the following REST requst. post...
4 - Store the file in a blode storage container
NEW QUESTION 38
You are building a new tab as part of a new Microsoft Teams application. Users will experience the tab privately.
How should you complete the application manifest? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 39
You need to complete the MSAL.js code for SSO.
Which code segment should you insert at line 06?
- A. cacheLocation: 'sessionStorage'
- B. cacheLocation: 'localStorage'
- C. storeAuthStateInCookie: false
- D. storeAuthStateInCookie: true
Answer: B
Explanation:
Scenario: Implement single sign-on (SSO) and minimize login prompts across browser tabs.
When your application is open in multiple tabs and you first sign in the user on one tab, the user is also signed in on the other tabs without being prompted. MSAL.js caches the ID token for the user in the browser localStorage and will sign the user in to the application on the other open tabs.
By default, MSAL.js uses sessionStorage which does not allow the session to be shared between tabs. To get SSO between tabs, make sure to set the cacheLocation in MSAL.js to localStorage.
Reference: https://docs.microsoft.com/bs-latn-ba/Azure/active-directory/develop/msal-js-sso Implement Microsoft Identity Question Set 2
NEW QUESTION 40
You need to display the profile picture of the current signed-in user.
Which REST query should you use to retrieve the picture?
- A. GET me photo $value
- B. GET /users/ {UserPricincipleName} / photo
- C. GET / me/photos/0
- D. GET / me/ photo
Answer: D
NEW QUESTION 41
Which URI should you use to query all the emails that relate to an invoice?
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: A
NEW QUESTION 42
Which type of authentication flow should you recommend for the planned integration with Office 365?
- A. implicit grant
- B. client credentials
- C. device code
- D. authorization code
Answer: D
Explanation:
To use Microsoft Graph to read and write resources on behalf of a user, your app must get an access token from the Microsoft identity platform and attach the token to requests that it sends to Microsoft Graph.
One common flow used by native and mobile apps and also by some Web apps is the OAuth 2.0 authorization code grant flow.
Scenario: Email the generated invoices to customers on behalf of the current signed-in user. Any emails generated by the system will contain the invoiced.
Use Azure AD to manage identities, authentication, and authorization.
Reference: https://docs.microsoft.com/en-us/graph/auth-v2-user
Extend and Customize SharePoint
Question Set 2
NEW QUESTION 43
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 44
You have a SharePoint Framework (SPFx) web part that includes the manifest shown in the following exhibit.
Which task can the web part perform?
- A. Send an email on behalf of a mail-enabled group.
- B. Send an email as another user.
- C. Send an email as the current user.
- D. Send an email as the web part.
Answer: D
NEW QUESTION 45
When developing a tab in Microsoft teams, personal, group, and shared tabs can all be implemented as configurable tabs.
Instructions: Review the underlined BOLD text, if it makes the statement correct, select '' No change is needed if the statement is incorrect selct the answer choice that makes the statement correct.
- A. Share the same code
- B. Be used in a conversation
- C. Have a configuration panel
- D. No change is needed.
Answer: D
Explanation:
Topic 1, ADatum Corporation
Existing Environment
Application Architecture
E-invoicing consists of a single-page application (SPA) and a backend web service that provides invoice management and processing functionality.
E-invoicing stores all the details of each invoicing operation in a backend cloud database. E-invoicing generates invoices in PDF format and provides users with the ability to download the PDF after it is generated. Each invoice has a unique identifier named invoiceid.
The users have a common workflow where they sign in to E-invoicing, and then open E-invoicing in multiple tabs of a web browser so they can use different parts of the application simultaneously.
Security Architecture
ADatum uses the principle of least privilege whenever possible. ADatum always uses the latest libraries and integration endpoints.
Requirements
Business Goals
ADatum wants to integrate E-invoicing, Azure Active Directory (Azure AD), and Microsoft Graph so that their customers can leverage Microsoft Office 365 services directly from within E-invoicing.
Planned Changes
ADatum plans to add the following capabilities to E-invoicing:
Email the generated invoices to customers on behalf of the current signed-in user. Any emails generated by the system will contain the invoiced.
Perform as many operations as possible in the browser without having to leave the E-invoicing application.
Use Azure AD to manage identities, authentication, and authorization.
Display all emails that contain a specific invoiced.
Technical Requirements
ADatum identifies the following technical requirements for the planned E-invoicing capabilities:
Ensure that all operations performed by E-invoicing against Office 365 are initiated by a user. Require that the user authorize E-invoicing to access the Office 365 data the first time the application attempts to access Office 365 data on the user's behalf.
Send scheduled reminders to customers before a payment due date. Create an administration user interface to enable the scheduled reminders.
Implement Microsoft Graph change notifications to detect emails from vendors that arrive in a designated mailbox.
Implement single sign-on (SSO) and minimize login prompts across browser tabs.
Secure access to the backend web service by using Azure AD.
Ensure that all solutions use secure coding practices.
Backend Security Planned Changes
ADatum wants to use custom application roles to map user functionality to permissions granted to users.
E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.
SSO JavaScript Script
You plan to implement SSO with Microsoft Authentication Library (MSAL) by using the following code:
Access Token JavaScript Script
You have the following JavaScript code to obtain an access token.
Change Notification JSON
You have the following JSON message that will be sent by the Microsoft Graph service to detect the vendor emails.
NEW QUESTION 46
You need to develop a leave request app that will use Microsoft Outlook and adaptive cards. The leave requests of an employee will be sent as an actionable message to the employee's managers. When one of the managers performs an action on the actionable message, the other managers must see only the updated message and the action performed by the manager.
How should you complete the adaptive card JSON? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 47
You are developing a new Microsoft Office Add-in to integrate a corporate invoicing system and Microsoft Excel.
You need to add a new button to the Office ribbon.
What should you add to the add-in?
- A. a custom function
- B. a dialog
- C. a command
- D. a task pane
Answer: C
Explanation:
Add commands to a custom group
1. In the Customize the Ribbon window under the Customize the Ribbon list, click the custom group that you want to add a command to.
2. In the Choose commands from list, click the list you want to add commands from, for example, Popular Commands or All Commands.
3. Click a command in the list that you choose.
4. Click Add.
5. To see and save your changes, click OK.
Reference: https://support.office.com/en-us/article/customize-the-ribbon-in-office-00f24ca7-6021-48d3-9514- a31a460ecb31
NEW QUESTION 48
You need to modify the HRApp manifest to provide a tab that supports querying the third-party HR system. Which section of the manifest should you modify, and which value should you set as the scope? To answer, select the appropriate options in the answer are a. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 49
You are developing a serveries application that reads all the emails in the Inbox of a specific Microsoft 365 mailbox. Some emails contain meeting dates and room mailbox names. The application has the following requirements:
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: A
NEW QUESTION 50
You have an API that is secured by using Azure Active Directory (Azure AD).
You are designing a SharePoint Framework (SPFx) solution.
Which object should you use to connect to the API from the solution?
- A. SPHttpClient
- B. AadHttpClient
- C. HttpClient
Answer: B
Explanation:
By using the AadHttpClient, you can easily connect to APIs secured by using Azure AD without having to implement the OAuth flow yourself.
Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/use-aadhttpclient
NEW QUESTION 51
You are developing an Azure function to provision a team in Microsoft Teams.
You need to create a group named Project A, add a classification of Private to the group, and then convert Project A to a team group.
How should you complete the REST requests? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References: https://docs.microsoft.com/en-us/graph/api/group-post-groups
https://docs.microsoft.com/en-us/graph/api/resources/group
https://docs.microsoft.com/en-us/graph/api/team-put-teams
NEW QUESTION 52
You plan to develop a TypeScript client-side app that will use the MSGraphClient library.
You need to configure Microsoft Visual Studio Code to use IntelliSense and support code completion for the MSGraph client library.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Add the following import Statement to the code: import * as MicrosoftGraph from '@Microsoft/microsoft-graph-types';
- B. Run the npm install @microsoft/microsoft-graph --save-dev command.
- C. Add the following import statement to the code: import * as MicrosoftGraph from '@microsoft/microsoft-graph';
- D. Run the: npm install @microsoft/microsoft-graph-types --save-dev command.
- E. Install the Microsoft Graph Toolkit.
Answer: A,C
NEW QUESTION 53
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).
Currently, App1 can read user profile information.
You need to allow App1 to read the user's calendar.
Solution: In the code of App1, dynamically request the Calendar.Read permission from the Microsoft Graph API.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation
For your app to access data in Microsoft Graph, the user or administrator must grant it the correct permissions via a consent process.
Application permissions can only be consented by an administrator.
References: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent
https://docs.microsoft.com/en-us/graph/permissions-reference
NEW QUESTION 54
You have a backend service that will access the Microsoft Graph API.
You need to configure the service to authenticate by using the most secure authentication method.
What should you configure the service to use?
- A. a shared key
- B. a client secret
- C. a hash
- D. a certificate
Answer: D
Explanation:
You can authenticate to the Graph API with two primary methods: AppId/Secret and certificate based authentication. Certificate is the preferred and more secure way of authenticating.
NEW QUESTION 55
You plan to deploy a SharePoint Framework (SPFx) solution to the tenant app catalog.
Which attribute should you configure in the package-solution.json file to ensure that the solution is available immediately to all site collections?
- A. skipFeatureDeployment
- B. isDomainIsolated
- C. ClientSideComponentId
- D. zippedPackage
Answer: A
Explanation:
You can configure your SharePoint Framework components to be immediately available across the tenant when the solution package is installed to the tenant app catalog. This can be configured by using the skipFeatureDeployment attribute in the package-solution.json file.
Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/tenant-scoped-deployment
NEW QUESTION 56
......
Authentic Best resources for MS-600 Online Practice Exam: https://www.prep4sureguide.com/MS-600-prep4sure-exam-guide.html
Updates Up to 365 days On Developing MS-600 Braindumps: https://drive.google.com/open?id=1IS_IVyorajbS8LZDzz-w3UwNGL4hsmX_