MS-600 — Free Practice Questions
10 free sample questions from a bank of 122, with the correct answers and explanations. No signup required — start practising right now.
1HOTSPOT -
You are developing an interactive invoicing application that will be used by end users. The application will have the following features:
✑ Save invoices generated by a user to the user's OneDrive for Business.
✑ Email daily automated reminders.
You need to identify which permissions to grant for the application features. The solution must use the principle of least privilege.
Which permission should you grant for each feature? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
2HOTSPOT -
You are developing a single-page application (SPA) named App1 that will be used by the public.
Many users of App1 restrict pop-up windows from opening in their browser.
You need to authenticate the users by using the Microsoft identity platform. The solution must meet the following requirements:
✑ Ensure that App1 can read the profile of a user.
✑ Minimize user interaction during authentication.
✑ Prevent App1 from requiring admin consent for any permissions.
How should you complete the code? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
3HOTSPOT -
You are building a single-page application (SPA) that will have the following parameters:
✑ App Id: DBA22F72-642A-4C44-AA2C-FAA0DA5A471B
✑ Tenant Id: DC045C4D-5881-43C7-97AB-3C5A1ADB8DBC
✑ AppName: Contoso.Spa
You have a line-of-business API for invoicing that is secured by using the Microsoft identity platform. The API has the following parameters:
✑ App Id: 879A43D7-1794-47A0-AB2B-440B63FEC248
✑ Tenant Id: DC045C4D-5881-43C7-97AB-3C5A1ADB8DBC
✑ AppName: Contoso.Invoicing
Contoso.Invoicing declares the following custom scopes:
✑ Invoices.Read
✑ Invoices.ReadWrite
Contoso.Spa needs to call Contoso.Invoicing to create new invoices.
Which code should you use in Contoso.Spa to obtain an access token for Contoso.Invoicing? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
4You need to develop a SharePoint Framework (SPFx) solution that interacts with Microsoft SharePoint and also Microsoft Teams. The solution must share the same code base.
What should you do?
- Make the code aware of the Teams context and the SharePoint context.
- Include the Microsoft Authentication Library for .NET (MSAL.NET) in the solution.
- Grant admin consent to the Teams API.
- Publish the solution to an Azure App Service.
Answer: B
5DRAG DROP -
You have an app named App1 that provisions security groups daily by using the Microsoft identity platform and the Microsoft Graph API. App1 runs as a scheduled task.
You need to register App1 in the Microsoft identity platform.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Answer:
6You are developing an Azure web app that will enable users to view a consolidated view of multiple users' tasks based on data in Microsoft Planner and Outlook.
The app will use the Microsoft identity platform and a certificate to establish an authorization flow between the app and Microsoft 365.
You obtain a certificate and you create an Azure Active Directory (Azure AD) application.
You need to set up authorization for the application.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- From the Azure portal, upload a certificate public key for the Azure AD application.
- Add the application permissions to the Azure AD application.
- Modify the code of the web app to use the certificate to obtain an access token for Microsoft Graph.
- Create a secret in the Azure AD application.
- Add the required delegated permissions to the Azure AD application.
Answer:
7HOTSPOT -
You have an app that queries Azure Active Directory (Azure AD) by using the Microsoft Graph API.
You need to minimize the number of times users are prompted for their credentials.
How should you complete the code? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
8You have an application named App1 that is used to administer an Azure Active Directory (Azure AD) tenant.
When administrators install App1, they are prompted for admin consent.
Which application permission can cause the administrators to be prompted for consent?
- RoleManagement.ReadWrite.Directory
- Calendars.ReadWrite
- Device.Read
- Calendars.ReadWrite.Shared
Answer: A
9HOTSPOT -
You are developing a single-page application (SPA) that authenticates users by using MSAL.js. The SPA must meet the following requirements:
✑ Only allow access to the users in an organization named contoso.onmicrosoft.com.
✑ Support single sign-on (SSO) across tabs and user sessions.
How should you complete the code for the SPA? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
10You need to develop a server-based web app that will be registered with the Microsoft identity platform. The solution must ensure that the app can perform operations on behalf of the user.
Which type of authorization flow should you use?
- authorization code
- refresh token
- resource owner password
- device code
Answer: A
Want the full bank of 122 questions for MS-600? See all practice exams.