Check your Preparation for Microsoft MS-600 Exam Questions

1. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).

Currently, App1 can read user profile information.

You need to allow App1 to read the user’s calendar.

Solution: From the Azure portal, add the Microsoft Graph API and the Calendar. Read permission by using the API permission list of App1. Grant tenant admin consent.

Does this meet the goal?

2. HOTSPOT

You need to retrieve a list of the last 10 files that the current user opened from Microsoft OneDrive. The response must contain only the file ID and the file name.

Which URI should you use to retrieve the results? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

3. You are developing a Microsoft Teams app that will use an Azure function to send scheduled messages from a bot to users .

What is required for the Teams app to send a proactive message to the users?

4. You need to recommend a model for the expense claims solution .

What should you recommend?

5. DRAG DROP

Match the SharePoint Framework (SPFx) extensions to the correct descriptions.

To answer, drag the appropriate SPFx extension from the column on the left to its description on the right. Each SPFx extension may be used once, more than once, or not at all. NOTE Each correct match is worth one point.

6. You have an API that is secured by using Azure Active Directory (Azure AD).

You are designing a SharePoint Framework (SPFx) solution.

Which object should you use to connect to the API from the solution?

7. You need to recommend which API object the SharePoint Framework (SPFx) intranet components will use to access the research department’s project management solution.

What should you recommend?

8. HOTSPOT

You are building a Microsoft Teams application.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

9. You have a Microsoft 365 tenant.

You develop a custom Microsoft Office Add-in for Word.

You need to sideload the add-in.

You sign in to Microsoft 365 in a web browser and create a new Word document

What should you do next?

10. You are building a server-based web app that will use OAuth2 and will be registered with the Microsoft identity platform.

Which two values does the app require to obtain tokens from the Azure Active Directory (Azure AD)? authorization endpoint? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

11. You have a custom web app that uses the Microsoft Graph API.

You receive an HTTP 403 Forbidden error when you call the Microsoft Graph endpoint.

What are two possible causes of the error? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

12. HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct select is worth one point.

13. HOTSPOT

You have a Microsoft Teams app that contains a conversational bot. The bot uses task modules to reply to users. When the bot receives a new message, the following code is executed before a response is sent back to the user to decide whether the bot should continue the conversation.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

14. You need to develop a SharePoint Framework (SPFx) solution that interacts with Microsoft SharePoint and Teams. The solution must share the same code base.

What should you include in the solution?

15. HOTSPOT

You have an application that employees use to schedule vacations. The application sets an automatic reply and an out-of-office event in the employees’ Microsoft 365 calendar.

Employees who access the application from a mobile device report that the application is slow to make changes.

You need to replace the application calls to use a batched request. Automatic reply must be set only if an out-of-office event is set successfully.

How should you complete the batch request? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

16. What are two possible URIs that you can use to prompt the administrators for admin consent to the E-invoicing application? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

17. You need to develop a server-based web app that will be registered with the Microsoft identity platform.

The solution must ensure that the app can perform operations on behalf of the user?

Which type of authorization flow should you use?

18. You are designing a custom SharePoint Framework (SPFx) web part that will be deployed to modern Microsoft SharePoint sites.

You need to ensure that all the web part fields and controls adopt the theme of the site when you deploy the web part.

What should you use to develop the web part?

19. HOTSPOT

You are developing an interactive invoicing application that will be used by end users.

The application will have the following features:

✑ Save invoices generated by a user to the user’s Microsoft OneDrive.

✑ Email daily automated reminders.

You need to identify which permissions to grant for the application features. The solution must use the principle of least privilege.

Which permission should you grant for each feature? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

20. You need to recommend which type of Office Add-in must be used for SalesApp.

What should you recommend?

21. You create a SharePoint Framework (SPFx) web part and include MSGraphClient by using the following manifest.





Which two actions can the web part perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

22. HOTSPOT

You are developing an Azure function to provision a team in Microsoft Teams.

You need to create a group named Project A, add a classification of Private to the group, and then convert Project A to a team group.

How should you complete the REST requests? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

23. Which type of authentication flow should you recommend for the planned integration with Office 365?

24. You have a SharePoint Framework (SPFx) 1.5 solution.

You need to ensure that the solution can be used as a tab in Microsoft Teams.

What should you do first?

25. HOTSPOT

You are developing a web app that will use the Microsoft Graph API. The app will use a front end to authenticate users and a backend to provision new unified groups.

Users do not have permission to provision groups in Azure Active Directory (Azure AD).

You need to recommend which permission types to grant. The solution must use the principle of least privilege.

What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

26. DRAG DROP

You have an app named App1 that provisions security groups daily by using the Microsoft identity platform and the Microsoft Graph API. App1 runs as a scheduled task.

You need to register App1 in the Microsoft identity platform.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

27. You have a starter SharePoint Framework (SPFx) web part.

You need to test the web part from the local workbench by connecting to a URL of https://localhost:4321/temp/workbench.html.

Which tool should you use make the web part available locally for debugging?

28. DRAG DROP

You are developing a server-based application that has the following requirements:

✑ Prompt the user to fill out form that contains a keyword.

✑ Search the OneDrive for Business folder for files that contain the keyword and return the results to the user.

✑ Allow the user to select one of the files from the results.

✑ Copy the selected file to an Azure Blob storage container.

Which four actions should the application perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

29. You plan to build a tab extension for Microsoft Teams that will display a list of assets and enable users to make reservations.

When a user reserves an asset, a form must be displayed that enables the user to make a reservation by selecting a date and duration, as well as other preferences.

Which type of extension should you use?

30. You are developing an Azure web app that will enable users to view a consolidated view of multiple users’ tasks based on data in Microsoft Planner and Outlook. The app will use the Microsoft identity platform and a certificate to establish an authorization flow between the app and Microsoft 365.

You obtain a certificate and you create an Azure Active Directory (Azure AD) application.

You need to set up authorization for the application.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

31. HOTSPOT

You have a server-side web app that uses OAuth 2.0 and is registered to the Microsoft identity platform.

A user acquires an authorization token.

You need to specify which HTTP header format the user must use to access the app.

What should you specify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

32. You plan to develop a Microsoft Teams bot tghat will return product information to users by using an adaptive card.

You need to card to contain a button that will invoke a web search for the product.

What should use?

33. You need to implement the role functionality for the backend web service calls.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

34. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).

Currently, App1 can read user profile information.

You need to allow App1 to read the user’s calendar.

Solution: In the code of App1, dynamically request the Calendar. Read permission from the Microsoft Graph API.

Does this meet the goal?

35. HOTSPOT

You create a personal bot that you plan to distribute as a Microsoft Teams team app.

The bot has the following app manifest.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point

36. This question requires that you evaluate the underlined text to determine if it is correct-

For a Microsoft Office Add-in. you set the icon in the Microsoft SharePoint app catalog.

Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

37. Topic 4, E-invoicing



Case Study

Overview

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the question. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, n...... that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to ret........ to the question.



Existing Environment

Application Architecture

E-invoicing consists of a single-page application (SPA) and a backend web service that provides invoice management and processing functionality.

E-invoicing stores all the details of each invoicing operation in a backend cloud database. E-invoicing generates invoices in PDF format and provides users with the ability to download the PDF from OneDrive after it is generated. Each invoice has a unique identifier named invoiceid.

The users have a common workflow where they sign in to E-invoicing, and then open E-invoicing in multiple tabs of a web browser so they can use different parts of the application simultaneously.



Security Architecture

A. Datum uses the principle of least privilege whenever possible.

A. Datum always uses the latest libraries and integration endpoints.



Requirements

Business Goals

A. Datum wants to integrate E-invoicing. Microsoft identity platform, and Microsoft Graph so that their customers can leverage Microsoft 365 services directly from within E-invoicing.



Planned Changes

A. Datum plans to add the following capabilities to E-invoicing:

* Email the generated invoices to customers on behalf of the current signed-in user. Any emails generated by the system will contain the invoiceid.

* Perform as many operations as possible in the browser without having to leave the E-invoicing application.

* Use Microsoft identity platform to manage identities, authentication, and authorization.

* Display all emails that contain a specific invoiceid.



Technical Requirements

A. Datum identifies the following technical requirements for the planned E-invoicing capabilities:

* Ensure that all operations performed by E-invoicing against Microsoft 365 are initiated by a user. Require that the user authorize E-invoicing to access the Microsoft 365 data the first time the application attempts to access Microsoft 365 data on the user's behalf.

* Send scheduled reminders to customers before a payment due date. Create an administration user interface to enable the scheduled reminders.

* Implement Microsoft Graph change notifications to detect emails from vendors that arrive in a designated mailbox.

* Implement single sign-on (SSO) and minimize login prompts across browser tabs.

* Secure access to the backend web service by using Microsoft identity platform.

* Ensure that all solutions use secure coding practices.



Backend Security Planned Changes

A. Datum wants to use custom application roles to map user functionality to permissions granted to users.

E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.



SSO JavaScript Script

You plan to implement SSO with Microsoft Authentication Library (MSAL) by using the following code.







Access Token JavaScript Script

You have the following JavaScript code to obtain an access token.







Change Notification JSON

You have the following JSON message that will be sent by the Microsoft Graph service to detect the vendor emails.







You need to complete the MSALjs code for the SSO Javascript .

Which code segment should you insert at line 06?

A. storeAuthStatelnCookie: false

B. storeAuthStatelnCookie: true

C. cacheLocation:'localStorage'

D. cacheLocation:'sessionStorage'

38. You are developing a Microsoft Office Add-in for Microsoft Word.

Which Office UI element can contain commands from the add-in?

39. What is the default permission scope when you request an access token by using MSGraphClient?

40. You have a SharePoint Framework (SPFx) web part that includes the manifest shown in the following exhibit.





Which task can the web part perform?

41. You have a backend service that will access the Microsoft Graph API.

You need to configure the service to authenticate by using the most secure authentication method.

What should you configure the service to use?

42. HOTSPOT

You are evaluating the SharePoint Framework (SPFx) ListView Command Set extension.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

43. CORRECT TEXT

You plan to create a single-tenant console app that will use the Microsoft identity platform.

You need to ensure that the app can use the device code flow to access Microsoft Graph and read email on behalf of the authenticated user.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A Set Supported account types to Accounts in any organizational directory

B. Add redirect URIs.

C. Set Supported account types to Accounts in this organizational directory only

D. Enable the Default client type option.

E. From the Expose an API settings, create a custom scope.

F. Generate a client secret for the app.