MS-600 Online Practice Questions and Answers

Correct Answer:

Oauth2 client_id client_secret

The authorization code flow begins with the client directing the user to the /authorize endpoint.

Box 1: token

Use the authorization code to request an access token.

Now that you've acquired an authorization code and have been granted permission by the user, you can redeem the code for an access token to the desired resource, by sending a POST request to the /token endpoint:

Box 2: authorization_code

Use the authorization code to request an access token.

Example:

// Line breaks for legibility only

POST /{tenant}/oauth2/token HTTP/1.1

Host: https://login.microsoftonline.com

Content-Type: application/x-www-form-urlencoded

grant_type=authorization_code

...etc.

Note: At a high level, the entire authorization flow for an application looks a bit like this:

Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-protocols-oauth-code

Correct Answer:

Box 1: Yes

The Adaptive Cards Designer provides a drag-and-drop experience to quickly build and tweak adaptive cards.

Outlook Actionable Messages cards are designed using the Adaptive Card format. The Adaptive Card format is a simple yet powerful declarative layout format that provides a lot of flexibility, allowing for visually rich cards. In this topic we'll

cover the Outlook-specific features of the Adaptive Card format.

Box 2: Yes

The actionable message card is in JSON format.

Box 3: No

By default, the Tenant Administrator can create, edit, clone, and delete tenants, and manage user accounts.

Note:

To enable Actionable Messages the recipient of the task must be an Office 365 customer with permissions for the SharePoint online site.

No: Office 365 administrators can disable actionable messages via the Set-OrganizationConfig cmdlet. If actionable messages do not render, check with your administrator to make sure the feature is enabled in your organization.

Adaptive Cards Designer Microsoft outlook actionable messages

References: https://docs.microsoft.com/en-us/outlook/actionable-messages/adaptive-card

https://gingkoapp.com/create-tenant-administrator.html

Correct Answer:

Correct Answer:

Reference: https://github.com/OfficeDev/office-js-docs-pr/blob/master/docs/develop/automatically-open-a-task-pane-with-a-document.md https://docs.microsoft.com/en-us/office/troubleshoot/settings/office-program-task-panes

Correct Answer:

Box 1: $count

Use $count as a query parameter to include a count of the total number of items in a collection alongside the page of data values returned from the Graph, as in the following example:

GET https://graph.microsoft.com/v1.0/me/contacts?$count=true

Box 2: $select

To specify a different set of properties to return than the default set provided by the Graph, use the $select query option. The $select option allows for choosing a subset or superset of the default set returned.

Box 3: $filter

To filter the response data based on a set of criteria, use the $filter query option.

The following example returns messages that have the address field of the from property equal to "[email protected]".

The from property is of the complex type emailAddress.

GET https://graph.microsoft.com/v1.0/me/messages?$filter=from/emailAddress/address eq '[email protected]' Reference: https://developer.microsoft.com/en-us/graph/docs/overview/query_parameters

Correct Answer:

Correct Answer:

Here is a quick overview of the steps:

Step 1: Register an application in Azure AD for the backend web service

Register an application (backend-app) in Azure AD to represent the API.

Step 2: Set the App ID URI for the backend service application registration

When the application is created (step 1) select Expose an API and click on Save and continue to create an Application ID URI.

Step 3: Defend the scopes in the backend web service application registration

In the Add a scope page, create a new scope supported by the API. (e.g., Read) then click on Add scope to create the scope. Repeat this step to add all scopes supported by your API.

Step 4: Register an application in Azure AD for E-invoicing.

Step 4.1 Register another application in Azure AD to represent a client application

Step 4.2 Now that you have registered two applications to represent the API and the Developer Console, you need to grant permissions to allow the client-app to call the backend-app.

Scenario:

Secure access to the backend web service by using Azure AD

E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.

Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad

Correct Answer: A

Centralized deployment of add-ins requires that the users are using Office 365 ProPlus (and are signed into Office using their Organizational ID), and have Exchange Online and active Exchange Online mailboxes. Reference: https://docs.microsoft.com/en-us/office365/admin/manage/centralized-deployment-of-add-ins

Correct Answer: A

Correct Answer: D

Correct Answer: A

A client application gains access to a resource server by declaring permission requests. Two types are available:

"Delegated" permissions, which specify scope-based access using delegated authorization from the signed-in resource owner, are presented to the resource at run-time as "scp" claims in the client's access token. "Application" permissions, which specify role-based access using the client application's credentials/identity, are presented to the resource at run-time as "roles" claims in the client's access token.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/developer-glossary#permissions

Correct Answer: C

You can persist add-in state and settings with the JavaScript API for Office. The JavaScript API for Office provides the Settings, RoamingSettings, and CustomProperties objects for saving add-in state across sessions Reference: https://docs.microsoft.com/en-us/office/dev/add-ins/develop/persisting-add-in-state-and-settings

Correct Answer: D

By default, the service principal has no explicit permissions granted to access the Microsoft Graph. However, if you request an access token for the Microsoft Graph, you get a token with the user_impersonation permission scope that can be used for reading information about the users (that is, User.Read.All). Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/use-msgraph

Correct Answer: B

Use delta query to track changes in a resource collection The typical call pattern is as follows:application begins by calling a GET request with the delta function on the desired resource.

Microsoft

The Graph sends a response containing the requested resource and a state token.

Example: Selecting three properties

The next example shows the initial request selecting three properties for change tracking, with default response behavior.

Note: Delta query enables applications to discover newly created, updated, or deleted entities without performing a full read of the target resource with every request.

Reference: https://docs.microsoft.com/en-us/graph/api/user-delta

Correct Answer: A