Refresh MS-600 Exam Price For Building Applications And Solutions With Microsoft 365 Core Services Certification

NEW QUESTION 1

You have an API that is secured by using Azure Active Directory (Azure AD). You are designing a SharePoint Framework (SPFx) solution.
Which object should you use to connect to the API from the solution?

• A. SPHttpClient
• B. HttpClient
• C. AadHttpClient

Answer: C

Explanation:
By using the AadHttpClient, you can easily connect to APIs secured by using Azure AD without having to implement the OAuth flow yourself.
Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/use-aadhttpclient

NEW QUESTION 2

How can you validate that the JSON notification message is sent from the Microsoft Graph service?

• A. The ClientState must match the value provided when subscribing.
• B. The user_guid must map to a user ID in the Azure AD tenant of the customer.
• C. The tenant ID must match the tenant ID of the customer’s Office 365 tenant.
• D. The subscription ID must match the Azure subscription used by ADatum.

Answer: A

Explanation:
clientState specifies the value of the clientState property sent by the service in each notification. The maximum length is 128 characters. The client can check that the notification came from the service by comparing the value of the clientState property sent with the subscription with the value of the clientState property received with each notification.
Note: A subscription allows a client app to receive notifications about changes to data in Microsoft Graph. Reference: https://docs.microsoft.com/en-us/graph/api/resources/subscription

NEW QUESTION 3

You have a SharePoint Framework (SPFx) web part that displays the weather. Users can set the city within the web part. Which component is invoked to provide the users with the ability to configure the settings for the web part?

• A. a custom control
• B. the property pane
• C. the Application Customizer
• D. a library component

Answer: B

NEW QUESTION 4

You are developing an Azure web app that will enable users to view a consolidated view of multiple users' tasks based on data in Microsoft Planner and Outlook. The app will use the Microsoft identity platform and a certificate to establish an authorization flow between the app and Microsoft 365.
You obtain a certificate and you create an Azure Active Directory (Azure AD) application. You need to set up authorization for the application.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one pointA. Add the application permissions to the Azure AD application.

• A. Create a secret in the Azure AD application.
• B. Add the required delegated permissions to the Azure AD application.
• C. Modify the code of the Azure web app to use the certificate to obtain an access token for Microsoft Graph.
• D. From the Azure portal, configure a certificate public key for the Azure AD application.

Answer: ACD

NEW QUESTION 5

You are designing a Microsoft Teams application. The application will enable content authors to start conversations about news coming from a third-party application.
Which development technique should you use?

• A. incoming webhooks
• B. outgoing webhooks
• C. activity feeds
• D. deep links

Answer: D

Explanation:
Create deep links to content and features in Microsoft Teams.
You can create links to information and features within the Teams client. Examples of where this may be useful:
Your app automates or simplifies certain user tasks, such as creating a chat or scheduling a meeting, by pre-populating the deep links with required parameters. This avoids the need for users to manually enter information.
Navigating the user to content within one of your app's tabs.
Reference: https://docs.microsoft.com/en-us/microsoftteams/platform/concepts/build-and-test/deep-links

NEW QUESTION 6

You are developing a mobile application that will display the current signed-in user’s display name and the application settings. The application settings are stored as Microsoft graph extension of the user profile.
Users of the application have intermittent network connectivity.
You need to retrieve the least amount of data by using a single REST request. The solution must minimize network traffic.
Which URI Should you use to retrieve the data?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 7

You are building a single-page application (SPA) that will have the following parameters:
• App Id: DBA22F72-64PA4C44-AA2C-FAA0DA5A471B
• Tenant Id: DC045C4D-5881-43C7-97AB-3C5A1ADB8DBC
• AppName: Contoso.Spa
You have a line-of-business API for invoicing that is secured by using the Microsoft identity platform. The API has the following parameters:
* App Id: 8/9A43D7-1794-47A0-AB2B-440B63FEC248
* Tenant Id: DC04SC4D S881-43C7-97AB 3C5A1ADB8DBC
* AppName: Contoso.lnvoicing
Contoso.Invoicing declares the following custom scopes:
* Invoices-Read
* Invoices. Read Write
Contoso.Spa needs to call Contoso.lnvoicing to create new invoices.
Which code should you use in Contoso.Spa to obtain an access token for Contoso.Invoicing? To answer, select the appropriate options in the answer area.
NOTE: Each correct select is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 8

You are developing an application that will track changes to the UserPrincipalName attribute of Microsoft 365 accounts.
You need to use a REST request to retrieve the information by using Microsoft Graph. The solution must minimize the amount of data retrieved.
What should you do?

• A. Use GET https://graph.microsoft.com/v1.0/users/delta for the first cal
• B. Use the state token in subsequent calls.
• C. Use GET https://graph.microsoft.com/v1.0/users/delta?$select=UserPrincipalName for the first cal
• D. Use the state token in subsequent calls.
• E. Use GET https://graph.microsoft.com/v1.0/users$select=UserPrincipalName for the calls and track the changes.
• F. Use GET https://graph.microsoft.com/v1.0/users for the calls and track the changes.

Answer: B

Explanation:
Use delta query to track changes in a resource collection
The typical call pattern is as follows:application begins by calling a GET request with the delta function on the desired resource.
Microsoft
The Graph sends a response containing the requested resource and a state token.
Example: Selecting three properties
The next example shows the initial request selecting three properties for change tracking, with default response behavior.
Note: Delta query enables applications to discover newly created, updated, or deleted entities without performing a full read of the target resource with every request.
Reference: https://docs.microsoft.com/en-us/graph/api/user-delta

NEW QUESTION 9

You are building a Microsoft Teams application.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Box 1: Yes
Once an outgoing webhook is added to a team, it acts like bot, listening in channels for messages using
@mention, sending notifications to external web services, and responding with rich messages that can include cards and images.
Box 2: Yes
Webhooks are a great way for Teams to integrate with external apps. A webhook is essentially a POST request sent to a callback URL. In Teams, outgoing webhooks provide a simple way to allow users to send messages to your web service without having to go through the full process of creating bots via the Microsoft Bot Framework. Outgoing webhooks post data from Teams to any chosen service capable of accepting a JSON payload.
Box 3: Yes
Create an outgoing webhook
Select the appropriate team and select Manage team from the (• • • ) drop-down menu.
Choose the Apps tab from the navigation bar.
From the window's lower right corner select Create an outgoing webhook.
In the resulting popup window complete the required fields:
Name - The webhook title and @mention tap.
Callback URL - The HTTPS endpoint that accepts JSON payloads and will receive POST requests from Teams.
Reference:
https://docs.microsoft.com/en-us/microsoftteams/platform/webhooks-and-connectors/how-to/add-outgoing-web

NEW QUESTION 10

You need to protect the backend web service to meet the technical requirements.
Which four actions should you perform in sequence? To answer, move the actions from the list of actions to the answer area and arrange them in the correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Here is a quick overview of the steps:
Step 1: Register an application in Azure AD for the backend web service Register an application (backend-app) in Azure AD to represent the API. Step 2: Set the App ID URI for the backend service application registration
When the application is created (step 1) select Expose an API and click on Save and continue to create an Application ID URI.
Step 3: Defend the scopes in the backend web service application registration
In the Add a scope page, create a new scope supported by the API. (e.g., Read) then click on Add scope to create the scope. Repeat this step to add all scopes supported by your API.
Step 4: Register an application in Azure AD for E-invoicing.
Step 4.1 Register another application in Azure AD to represent a client application
Step 4.2 Now that you have registered two applications to represent the API and the Developer Console, you need to grant permissions to allow the client-app to call the backend-app.
Scenario:
Secure access to the backend web service by using Azure AD
E- invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.
Reference:
https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad

NEW QUESTION 11

You are developing an application that will upload files that are larger than 50 MB to Microsoft OneDrive.
You need to recommend an upload solution to ensure that the file upload process can resume if a network error occurs during the upload.
Which four actions should you perform in sequence? To answer, move the actions from the list of actions to the answer area and arrange them in the correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 12

This question requires that you evaluate the underlined text to determine if it is correct.
Centralized deployments for Microsoft Office Add-ins require Office Online Server.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

• A. No change is needed
• B. Azure Active Directory (Azure AD)
• C. Azure AD Connect
• D. an Azure web app

Answer: A

Explanation:
Centralized deployment of add-ins requires that the users are using Office 365 ProPlus (and are signed into Office using their Organizational ID), and have Exchange Online and active Exchange Online mailboxes.
Reference: https://docs.microsoft.com/en-us/office365/admin/manage/centralized-deployment-of-add-ins

NEW QUESTION 13

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).
Currently, App1 can read user profile information. You need to allow App1 to read the user’s calendar.
Solution: Add https://graph.windows.net/user.read to the list of scopes during the initial login request. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
Microsoft Graph Calendars.Read allows the app to read events in user calendars.
For your app to access data in Microsoft Graph, the user or administrator must grant it the correct permissions via a consent process.
Application permissions are used by apps that run without a signed-in user present; for example, apps that run as background services or daemons. Application permissions can only be consented by an administrator.
References: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent https://docs.microsoft.com/en-us/graph/permissions-reference

NEW QUESTION 14

You are creating an application named App1 that will use the Microsoft identity platform. App1 will be accessed only by users from several different Microsoft 365 subscriptions.
Which Supported account types setting should you configure for App1?

• A. Accounts in this organizational directory only
• B. Accounts in any organizational directory and personal Microsoft a accounts
• C. Accounts in any organizational directory

Answer: B

NEW QUESTION 15

You are developing a new Microsoft Office Add-in to integrate a corporate invoicing system and Microsoft Excel.
You need to add a new button to the Office ribbon. What should you add to the add-in?

• A. a task pane
• B. a dialog
• C. a custom function
• D. a command

Answer: D

Explanation:
Add commands to a custom group
* 1. In the Customize the Ribbon window under the Customize the Ribbon list, click the custom group that you want to add a command to.
* 2. In the Choose commands from list, click the list you want to add commands from, for example, Popular Commands or All Commands.

* 3. Click a command in the list that you choose.
* 4. Click Add.
* 5. To see and save your changes, click OK. Reference:
https://support.office.com/en-us/article/customize-the-ribbon-in-office-00f24ca7-6021-48d3-9514-a31a460ecb3

NEW QUESTION 16

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Box 1: No
Box 2: Yes
Partial table lists the events that your bot can receive and take action on.

Box 3: Yes
The messageReaction event is sent when a user adds or removes his or her reaction to a message which was originally sent by your bot.
Reference: https://docs.microsoft.com/en-us/microsoftteams/platform/resources/bot-v3/bots-notifications

NEW QUESTION 17

Which type of authentication flow should you recommend for the planned integration with Office 365?

• A. device code
• B. implicit grant
• C. authorization code
• D. client credentials

Answer: C

Explanation:
To use Microsoft Graph to read and write resources on behalf of a user, your app must get an access token from the Microsoft identity platform and attach the token to requests that it sends to Microsoft Graph.
One common flow used by native and mobile apps and also by some Web apps is the OAuth 2.0 authorization code grant flow.
Scenario: Email the generated invoices to customers on behalf of the current signed-in user. Any emails generated by the system will contain the invoiced.
Use Azure AD to manage identities, authentication, and authorization. Reference: https://docs.microsoft.com/en-us/graph/auth-v2-user

NEW QUESTION 18

You are building a new tab as part of a new Microsoft Teams application. Users will experience the tab privately.
How should you complete the application manifest? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 19

You are building a server-based web app that will use OAuth2 and will be registered with the Microsoft identity platform.
Which two values does the app require to obtain tokens from the Azure Active Directory (Azure AD) authorization endpoint? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. the tenant ID
• B. the context token
• C. the application ID
• D. the application secret
• E. the authorization code

Answer: CE

Explanation:
C: The required client_id is the Application (client) ID that the Azure portal – App registrations experience assigned to your app.
E: The authorization code flow begins with the client directing the user to the /authorize endpoint.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow

NEW QUESTION 20

You are developing a Microsoft Teams application.
Which Teams feature provides you with the ability to invoke a model popup by using the minimum amount of custom code?

• A. An adaptive card
• B. A bot
• C. A connector
• D. A task module

Answer: B

NEW QUESTION 21
......