Get The Most Updated MS-600 Dumps To Microsoft 365 Certified: Developer Associate Certification
Microsoft Certified MS-600 Dumps Questions Valid MS-600 Materials
NEW QUESTION # 120
You are developing a single page application (SPA) named App1 that will be used by the public.
Many users of App1 restrict pop-up windows from opening in their browser.
You need to authenticate the users by using the Microsoft identity platform. The solution must meet the following requirements:
* Ensure that App1 can read the profile of a user.
* Minimize user interaction during authentication.
* Prevent App1 from requiring admin consent for any permissions.
How should you complete the code? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/develop/scenario-spa-acquire-token?tabs=javascript1
NEW QUESTION # 121
You are developing an application that will track changes to the UserPrincipalName attribute of Microsoft 365 accounts.
You need to use a REST request to retrieve the information by using Microsoft Graph. The solution must minimize the amount of data retrieved.
What should you do?
- A. Use GET https://graph.microsoft.com/v1.0/users/delta?$select=UserPrincipalName for the first call. Use the state token in subsequent calls.
- B. Use GET https://graph.microsoft.com/v1.0/usersfor the calls and track the changes.
- C. Use GET https://graph.microsoft.com/v1.0/users/deltafor the first call. Use the state token in subsequent calls.
- D. Use GET https://graph.microsoft.com/v1.0/users$select=UserPrincipalNamefor the calls and track the changes.
Answer: A
Explanation:
Use delta query to track changes in a resource collection
The typical call pattern is as follows:application begins by calling a GET request with the delta function on the desired resource.
1. Microsoft
1. The Graph sends a response containing the requested resource and a state token.
Example: Selecting three properties
The next example shows the initial request selecting three properties for change tracking, with default response behavior.
Note: Delta query enables applications to discover newly created, updated, or deleted entities without performing a full read of the target resource with every request.
Incorrect Answers:
A: Example: Default properties
The following is an example of the request. There is no $select parameter, so a default set of properties is tracked and returned.
Reference: https://docs.microsoft.com/en-us/graph/api/user-delta
Extend and Customize SharePoint
Testlet 1
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end on this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
ADatum Corporation develops a software as a service (SaaS) application named E-invoicing.
Existing Environment
Application Architecture
E-invoicing consists of a single-page application (SPA) and a backend web service that provides invoice management and processing functionality.
E-invoicing stores all the details of each invoicing operation in a backend cloud database. E-invoicing generates invoices in PDF format and provides users with the ability to download the PDF after it is generated.
Each invoice has a unique identifier named invoiceid.
The users have a common workflow where they sign in to E-invoicing, and then open E-invoicing in multiple tabs of a web browser so they can use different parts of the application simultaneously.
Security Architecture
ADatum uses the principle of least privilege whenever possible. ADatum always uses the latest libraries and integration endpoints.
Requirements
Business Goals
ADatum wants to integrate E-invoicing, Azure Active Directory (Azure AD), and Microsoft Graph so that their customers can leverage Microsoft Office 365 services directly from within E-invoicing.
Planned Changes
ADatum plans to add the following capabilities to E-invoicing:
* Email the generated invoices to customers on behalf of the current signed-in user. Any emails generated by the system will contain the invoiced.
* Perform as many operations as possible in the browser without having to leave the E-invoicing application.
* Use Azure AD to manage identities, authentication, and authorization.
* Display all emails that contain a specific invoiceid.
Technical Requirements
ADatum identifies the following technical requirements for the planned E-invoicing capabilities:
* Ensure that all operations performed by E-invoicing against Office 365 are initiated by a user. Require that the user authorize E-invoicing to access the Office 365 data the first time the application attempts to access Office 365 data on the user's behalf.
* Send scheduled reminders to customers before a payment due date. Create an administration user interface to enable the scheduled reminders.
* Implement Microsoft Graph change notifications to detect emails from vendors that arrive in a designated mailbox.
* Implement single sign-on (SSO) and minimize login prompts across browser tabs.
* Secure access to the backend web service by using Azure AD.
* Ensure that all solutions use secure coding practices.
Backend Security Planned Changes
ADatum wants to use custom application roles to map user functionality to permissions granted to users.
E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.
SSO JavaScript Script
You plan to implement SSO with Microsoft Authentication Library (MSAL) by using the following code:
Access Token JavaScript Script
You have the following JavaScript code to obtain an access token.
Change Notification JSON
You have the following JSON message that will be sent by the Microsoft Graph service to detect the vendor emails.
NEW QUESTION # 122
You are developing in application named App1.
App1 needs to use the Microsoft Graph API to retrieve emails from Microsoft 365 for the current signed-in user. The solution must meet the following requirements:
Emails that have attachments and are from [email protected] must be retrieved.
The results must show the subject of the email, the sender address, and the count of emails retrieved.
How should you complete the URI to retrieve the results? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 123
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct select is worth one point.
Answer:
Explanation:
NEW QUESTION # 124
You are developing a web app that will use the Microsoft Graph API. The app will use a front end to authenticate users and a backend to provision new unified groups.
Users do not have permission to provision groups in Azure Active Directory (Azure AD).
You need to recommend which permission types to grant. The solution must use the principle of least privilege.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/app-service/scenario-secure-app-access-microsoft-graph-as-user?tabs=azure-resource-explorer%2Ccommand-line
NEW QUESTION # 125
You plan to build a tab extension for Microsoft Teams that will display a list of assets and enable users to make reservations.
When a user reserves an asset, a form must be displayed that enables the user to make a reservation by selecting a date and duration, as well as other preferences.
Which type of extension should you use?
- A. a messaging extension
- B. a task module
- C. a personal tab
- D. a full-width column web part
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoftteams/platform/messaging-extensions/what-are-messaging-extensions
NEW QUESTION # 126
You need to recommend a model for the expense claims solution. What should you recommend?
- A. actionable messages via connectors that use an adaptive card
- B. actionable messages via email that uses an actionable message card
- C. actionable messages via connectors that use an actionable message card
- D. actionable messages via email that uses an adaptive card
Answer: D
Explanation:
Overview
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the question. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, n...... that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to ret........ to the question.
NEW QUESTION # 127
You are developing an application that will use Microsoft Graph.
You attempt to retrieve a list of the groups in your organization by using a URI of https://graph.microsoft.eom/vi.0/groups on behalf of the user.
The application fails. The diagnostic logs show the following information:
* An HTTP 403 Forbidden status code
* An Authorization_RequestDenied error code
* The following error message: "Insufficient privileges to complete the operation." You need to ensure that the application can retrieve the list of groups. The solution must use the principle of least privilege. Which two actions should you perform? Each correct answer presents part of the solution. NOTE; Each correct selection is worth one point.
- A. Configure the application to use application permissions.
- B. In the permission request for the application, request the Group. Read. All permission.
- C. Grant tenant admin consent for the Group.Read. All permission.
- D. In the permission request for the application, request the Group. Readwrite. All permission
Answer: B,D
NEW QUESTION # 128
You need to develop a server-based web app that will be registered with the Microsoft identity platform. The solution must ensure that the app can perform operations on behalf of the user?
Which type of authorization flow should you use?
- A. authorization code
- B. device code
- C. resource owner password
- D. refresh token
Answer: A
Explanation:
Explanation
In web server apps, the sign-in authentication flow takes these high-level steps:
A picture containing table Description automatically generated
You can ensure the user's identity by validating the ID token with a public signing key that is received from the Microsoft identity platform endpoint. A session cookie is set, which can be used to identify the user on subsequent page requests.
In addition to simple sign-in, a web server app might need to access another web service, such as a REST API.
In this case, the web server app engages in a combined OpenID Connect and OAuth 2.0 flow, by using the OAuth 2.0 authorization code flow.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-app-types
NEW QUESTION # 129
You are developing an application that will run as an overnight background service on a server. The service will access web-hosted resources by using the application's identity and the OAuth 2.0 client credentials grant flow.
You register the application and grant permissions. The tenant administrator grants admin consent to the application.
You need to get the access token from Azure Active Directory (Azure AD).
Which URI should you use for the POST request? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Oauth2 client_id client_secret
The authorization code flow begins with the client directing the user to the /authorize endpoint.
Box 1: token
Use the authorization code to request an access token.
Now that you've acquired an authorization code and have been granted permission by the user, you can redeem the code for an access token to the desired resource, by sending a POST request to the /token endpoint:
Box 2: authorization_code
Use the authorization code to request an access token.
Example:
// Line breaks for legibility only
POST /{tenant}/oauth2/token HTTP/1.1
Host: https://login.microsoftonline.com
Content-Type: application/x-www-form-urlencoded
grant_type=authorization_code
etc.
Note: At a high level, the entire authorization flow for an application looks a bit like this:
Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-protocols-oauth-code
NEW QUESTION # 130
You need to develop a SharePoint Framework (SPFx) solution that interacts with Microsoft SharePoint and Teams. The solution must share the same code base.
What should you include in the solution?
- A. Include the Microsoft Authentication Library for .NET (MSALNET) in the solution.
- B. Make the code aware of the Teams context and the SharePoint context.
- C. Publish the solution to an Azure App Service.
- D. Grant admin consent to the Teams API.
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-overview
NEW QUESTION # 131
HOTSPOT
You are developing an interactive invoicing application that will be used by end users. The application will have the following features:
* Save invoices generated by a user to the user's Microsoft OneDrive.
* Email daily automated reminders.
You need to identify which permissions to grant for the application features. The solution must use the principle of least privilege.
Which permission should you grant for each feature? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
Microsoft identity platform supports two types of permissions: delegated permissions and application permissions.
Box 1: Delegated
* Delegated permissions are used by apps that have a signed-in user present. For these apps, either the user or an administrator consents to the permissions that the app requests, and the app is delegated permission to act as the signed-in user when making calls to the target resource.
Box 2: Application
* Application permissions are used by apps that run without a signed-in user present; for example, apps that run as background services or daemons. Application permissions can only be consented by an administrator.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent
NEW QUESTION # 132
You are developing a new Microsoft Office Add-in to integrate a corporate invoicing system and Microsoft Excel.
You need to add a new button to the Office ribbon.
What should you add to the add-in?
- A. a custom function
- B. a command
- C. a dialog
- D. a task pane
Answer: B
Explanation:
Add commands to a custom group
1. In the Customize the Ribbon window under the Customize the Ribbon list, click the custom group that you want to add a command to.
2. In the Choose commands from list, click the list you want to add commands from, for example, Popular Commands or All Commands.
3. Click a command in the list that you choose.
4. Click Add.
5. To see and save your changes, click OK.
NEW QUESTION # 133
You are evaluating deep links in Microsoft Teams.
For each of the following statement, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: No
Box 2: Yes
Box 3: Yes
You can create links to information and features within the Teams client. Examples of where this may be useful:
* Navigating the user to content within one of your app's tabs. For instance, your app may have a bot that sends messages notifying the user of an important activity. When the user taps on the notification, the deep link navigates to the tab so the user can view more details about the activity.
* Your app automates or simplifies certain user tasks, such as creating a chat or scheduling a meeting, by pre-populating the deep links with required parameters. This avoids the need for users to manually enter information.
Reference: https://docs.microsoft.com/en-us/microsoftteams/platform/concepts/build-and-test/deep-links
NEW QUESTION # 134
You plan to deploy a SharePoint Framework (SPFx) solution to the tenant app catalog.
Which attribute should you configure in the package-solution.json file to ensure that the solution is available immediately to all site collections?
- A. skipFeatureDeployment
- B. zippedPackage
- C. isDomainIsolated
- D. ClientSideComponentId
Answer: A
Explanation:
You can configure your SharePoint Framework components to be immediately available across the tenant when the solution package is installed to the tenant app catalog. This can be configured by using the skipFeatureDeployment attribute in the package-solution.json file.
Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/tenant-scoped-deployment
NEW QUESTION # 135
You are building a server-based web app that will use OAuth2 and will be registered with the Microsoft identity platform.
Which two values does the app require to obtain tokens from the Azure Active Directory (Azure AD) authorization endpoint? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. the application ID
- B. the application secret
- C. the context token
- D. the tenant ID
- E. the authorization code
Answer: A,E
Explanation:
Explanation
C: The required client_id is the Application (client) ID that the Azure portal - App registrations experience assigned to your app.
E: The authorization code flow begins with the client directing the user to the /authorize endpoint.
Timeline Description automatically generated with low confidence
ence: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow
NEW QUESTION # 136
This question requires that you evaluate the underlined BOLD text to determine if it is correct.
You can use App Studio for Microsoft Teams to develop all the components of a bot application.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
- A. configure a Teams tab in an application
- B. develop a SharePoint Framework (SPFx) web part
- C. provision a bot by using the Bot Framework
- D. No change is needed
Answer: A
Explanation:
Explanation
Tabs provide a place for you to display for rich interactive web content. You can define both personal and team tabs.
There can be only 1 team tab per app, but up to 16 personal tabs per app.
Reference: https://blog.thoughtstuff.co.uk/2019/04/what-is-app-studio-in-microsoft-teams-and-why-do-i-care/
NEW QUESTION # 137
You have an application that uses the Microsoft graph API.
When users open the application during peak hours, they occasionally receive an HTTP 429 Too Many requests response status code.
What should you to mitigate the errors?
- A. Adjust the request rate based on the Retry-After header.
- B. Adjust the request rate based on the Rate-Limit-Reset Header.
- C. Wait 100 milliseconds between requests.
Answer: A
NEW QUESTION # 138
You are developing a Microsoft Office Add-in for Microsoft Word.
Which Office UI element can contain commands from the add-in?
- A. the ribbon
- B. task panes
- C. the File menu
- D. dialog boxes
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/office/dev/add-ins/design/add-in-commands
NEW QUESTION # 139
You are designing a custom SharePoint Framework (SPFx) web part that will be deployed to modern Microsoft SharePoint sites.
You need to ensure that all the web part fields and controls adopt the theme of the site when you deploy the web part.
What should you use to develop the web part?
- A. HTML 5.0 and CSS
- B. Office UI Fabric React
- C. Fluid Framework
- D. Material-UI
Answer: B
Explanation:
Office UI Fabric is Microsoft's official front end framework for building User Interface experiences for Office and Office 365. In simple terms it gives you the look and feel for your component. Moreover, they are open source, mobile responsive and reusable, no need to create from scratch just refer them in your code and start utilizing them.
Microsoft modern SharePoint out of the box webparts are made up these Office UI Fabric framework, so to maintain consistency look and feel as like Office it's better to use these components in our custom SPFx webparts.
Incorrect Answers:
D: At Build 2019 [November 2019], Microsoft announced Fluid Framework, a new technology and set of experiences that will make collaboration seamless by breaking down the barriers between apps. It offers three key capabilities. First, experiences powered by the Fluid Framework will support multi-person coauthoring on web and document content at industry-leading speed and scale. Second, it provides a componentized document model that allows authors to deconstruct content into collaborative building blocks, use them across applications, and combine them in a new, more flexible kind of document. Third, the Fluid Framework makes room for intelligent agents to work alongside humans to translate text, fetch content, suggest edits, perform compliance checks, and more.
Reference: http://www.sharepointsamples.com/sharepoint-framework-webpart-with-office-ui-fabric-react- component/
NEW QUESTION # 140
You have an app that queries Azure Active Directory (Azure AD) by using the Microsoft Graph API.
You need to minimize the number of times users are prompted for their credentials.
How should you complete the code? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/java/api/com.microsoft.identity.client.publicclientapplication.acquiretokensilent?view=azure-java-stable
https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-error-handling-js
NEW QUESTION # 141
......
MS-600 Premium PDF & Test Engine Files with 244 Questions & Answers: https://www.vceprep.com/MS-600-latest-vce-prep.html
Current MS-600 Exam Dumps [2023] Complete Microsoft Exam Smoothly: https://drive.google.com/open?id=1ydKFe7yfBXmo0jgSUF9aJCEfs_aUw3X-