Free MS-600 Exam Files Downloaded Instantly UPDATED [2022]
100% Pass Guaranteed Free MS-600 Exam Dumps
NEW QUESTION 20
How can you validate that the JSON notification message is sent from the Microsoft Graph service?
- A. The user_guid must map to a user ID in the Azure AD tenant of the customer.
- B. The tenant ID must match the tenant ID of the customer's Office 365 tenant.
- C. The ClientState must match the value provided when subscribing.
- D. The subscription ID must match the Azure subscription used by ADatum.
Answer: C
Explanation:
clientState specifies the value of the clientState property sent by the service in each notification. The maximum length is 128 characters. The client can check that the notification came from the service by comparing the value of the clientState property sent with the subscription with the value of the clientState property received with each notification.
Note: A subscription allows a client app to receive notifications about changes to data in Microsoft Graph.
Topic 3, E-invoicing
Existing Environment
Application Architecture
E-invoicing consists of a single-page application (SPA) and a backend web service that provides invoice management and processing functionality.
E-invoicing stores all the details of each invoicing operation in a backend cloud database. E-invoicing generates invoices in PDF format and provides users with the ability to download the PDF from OneDrive after it is generated. Each invoice has a unique identifier named invoiceid.
The users have a common workflow where they sign in to E-invoicing, and then open E-invoicing in multiple tabs of a web browser so they can use different parts of the application simultaneously.
Security Architecture
Requirements
Business Goals
Planned Changes
* Email the generated invoices to customers on behalf of the current signed-in user. Any emails generated by the system will contain the invoiceid.
* Perform as many operations as possible in the browser without having to leave the E-invoicing application.
* Use Microsoft identity platform to manage identities, authentication, and authorization.
* Display all emails that contain a specific invoiceid.
Technical Requirements
* Ensure that all operations performed by E-invoicing against Microsoft 365 are initiated by a user. Require that the user authorize E-invoicing to access the Microsoft 365 data the first time the application attempts to access Microsoft 365 data on the user's behalf.
* Send scheduled reminders to customers before a payment due date. Create an administration user interface to enable the scheduled reminders.
* Implement Microsoft Graph change notifications to detect emails from vendors that arrive in a designated mailbox.
* Implement single sign-on (SSO) and minimize login prompts across browser tabs.
* Secure access to the backend web service by using Microsoft identity platform.
* Ensure that all solutions use secure coding practices.
Backend Security Planned Changes
E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.
SSO JavaScript Script
You plan to implement SSO with Microsoft Authentication Library (MSAL) by using the following code.
Access Token JavaScript Script
You have the following JavaScript code to obtain an access token.
Change Notification JSON
You have the following JSON message that will be sent by the Microsoft Graph service to detect the vendor emails.
NEW QUESTION 21
You are developing a SharePoint Framework (SPFx) web part.
Which API should you use to retrieve the Microsoft Teams memberships of a user by using the minimum amount of code?
- A. MSGraphClient
- B. XMLHttpRequest
- C. SPHttpClient
- D. AadHttpClient
Answer: A
Explanation:
You can use the Microsoft Graph API to work with Microsoft Teams. In Microsoft Graph, Microsoft Teams is represented by a group resource.
If you are targeting Microsoft Graph, you can use the MSGraphClient client object, which provides a more fluent syntax compared to AadHttpClient.
Note: In versions of the SharePoint Framework starting with v.1.4.1, you can access Microsoft Graph by using either the native graph client (MSGraphClient), or the low-level type used to access any Azure AD-secured REST API (AadHttpClient).
The AadHttpClient client object is useful for consuming any REST API. You can use it to consume Microsoft Graph or any other third-party (or first-party) REST API.
The MSGraphClient client object can consume the Microsoft Graph only. Internally it uses the AadHttpClient client object and supports the fluent syntax of the Microsoft Graph SDK.
Reference:
https://docs.microsoft.com/en-us/sharepoint/dev/spfx/use-aad-tutorial
NEW QUESTION 22
You are evaluating the SharePoint Framework (SPFx) ListView Command Set extension.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 23
What are two possible URIs that you can use to prompt the administrators for admin consent to the E-invoicing application? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
- A. https://login.microsoftonline.com/con*K>n/adiiinconsent?client_id-{clientid}
- B. https://login.microsoftonline.com/{domain}/adminconsent?client_id={clientid}&state={state}&redirect_uri={url}
- C. https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token/authorize?client_id={clientid}&state={state}8redirect_uri={url}
- D. https://login.microsoftonline.com/{tenant)/oauth2/v2.0/authorize?client_id={clientid)&state={state}aredirect_uri-{url}
Answer: C,D
NEW QUESTION 24
You have a SharePoint Framework (SPFx) 1.5 solution.
You need to ensure that the solution can be used as a tab in Microsoft Teams.
What should you do first?
- A. Deploy the solution to the Microsoft AppSource store
- B. Deploy the solution to a developer site collection
- C. Upgrade the solution to the latest version of SPFx
- D. Convert the solution to use the Bot Framework
Answer: C
Explanation:
Starting with the SharePoint Framework v1.8, you can implement your Microsoft Teams tabs using SharePoint Framework.
Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/web-parts/get-started/using-web-part-as-ms- teams-tab
NEW QUESTION 25
This question requires that you evaluate the underlined text to determine if it is correct- For a Microsoft Office Add-in. you set the icon in the Microsoft SharePoint app catalog.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.
- A. an XML manifest file
- B. No change is needed.
- C. a JSON manifest file
- D. the Office app catalog
Answer: A
NEW QUESTION 26
You are developing an app that will display all the users returned in a Microsoft Graph query.
The entire dataset is too large, and you receive the following response.
How should you retrieve the next page of data?
- A. Send an HTTP GET request that contains the id value.
- B. Send an HTTP GET request to the @odata.nextLink value.
- C. Append the skip query parameter to the last request.
- D. Send an HTTP GET request that contains the skiptoken value.
- E. Send an HTTP PATCH request to the @odata.context value.
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/graph/query-parameters
NEW QUESTION 27
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).
Currently, App1 can read user profile information.
You need to allow App1 to read the user's calendar.
Solution: In the code of App1, dynamically request the Calendar.Read permission from the Microsoft Graph API.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
For your app to access data in Microsoft Graph, the user or administrator must grant it the correct permissions via a consent process.
Application permissions can only be consented by an administrator.
Reference:
https://docs.microsoft.com/en-us/graph/permissions-reference
NEW QUESTION 28
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Box 1: No
Box 2: No
The manifest is in XML format.
Box 3: Yes
SourceLocation is required and specifies the source file location(s) for your Office Add-in as a URL between 1 and 2018 characters long. The source location must be an HTTPS address, not a file path.
References: https://docs.microsoft.com/en-us/office/dev/add-ins/develop/add-in-manifests
https://docs.microsoft.com/en-us/office/dev/add-ins/reference/manifest/sourcelocation
NEW QUESTION 29
You have an application that employees use to schedule vacations. The application sets an automatic reply and an out-of-office event in the employees' Microsoft 365 calendar.
Employees who access the application from a mobile device report that the application is slow to make changes.
You need to replace the application calls to use a batched request. Automatic reply must be set only if an out-of-office event is set successfully.
How should you complete the batch request? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 30
You need to complete the MSAL.js code for SSO.
Which code segment should you insert at line 06?
- A. storeAuthStateInCookie: false
- B. cacheLocation: 'localStorage'
- C. cacheLocation: 'sessionStorage'
- D. storeAuthStateInCookie: true
Answer: B
Explanation:
Scenario: Implement single sign-on (SSO) and minimize login prompts across browser tabs.
When your application is open in multiple tabs and you first sign in the user on one tab, the user is also signed in on the other tabs without being prompted. MSAL.js caches the ID token for the user in the browser localStorage and will sign the user in to the application on the other open tabs.
By default, MSAL.js uses sessionStorage which does not allow the session to be shared between tabs. To get SSO between tabs, make sure to set the cacheLocation in MSAL.js to localStorage.
Reference: https://docs.microsoft.com/bs-latn-ba/Azure/active-directory/develop/msal-js-sso Implement Microsoft Identity Question Set 2
NEW QUESTION 31
You are building a Microsoft Outlook add-in.
Which object should you use to save a user's preferences between sessions and devices?
- A. localStorage
- B. CustomXMLParts
- C. RoamingSettlngs
- D. CustomProperties
Answer: C
Explanation:
The user's Exchange server mailbox where the add-in is installed. Because these settings are stored in the user's server mailbox, they can "roam" with the user and are available to the add-in when it is running in the context of any supported client accessing that user's mailbox.
Reference:
https://docs.microsoft.com/en-us/office/dev/add-ins/outlook/manage-state-and-settings-outlook
NEW QUESTION 32
You are building a Microsoft Teams application.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 33
When developing a tab in Microsoft teams, personal, group, and shared tabs can all be implemented as configurable tabs.
Instructions: Review the underlined BOLD text, if it makes the statement correct, select '' No change is needed if the statement is incorrect selct the answer choice that makes the statement correct.
- A. Be used in a conversation
- B. Share the same code
- C. Have a configuration panel
- D. No change is needed.
Answer: D
Explanation:
Topic 1, ADatum Corporation
Existing Environment
Application Architecture
E-invoicing consists of a single-page application (SPA) and a backend web service that provides invoice management and processing functionality.
E-invoicing stores all the details of each invoicing operation in a backend cloud database. E-invoicing generates invoices in PDF format and provides users with the ability to download the PDF after it is generated. Each invoice has a unique identifier named invoiceid.
The users have a common workflow where they sign in to E-invoicing, and then open E-invoicing in multiple tabs of a web browser so they can use different parts of the application simultaneously.
Security Architecture
ADatum uses the principle of least privilege whenever possible. ADatum always uses the latest libraries and integration endpoints.
Requirements
Business Goals
ADatum wants to integrate E-invoicing, Azure Active Directory (Azure AD), and Microsoft Graph so that their customers can leverage Microsoft Office 365 services directly from within E-invoicing.
Planned Changes
ADatum plans to add the following capabilities to E-invoicing:
Email the generated invoices to customers on behalf of the current signed-in user. Any emails generated by the system will contain the invoiced.
Perform as many operations as possible in the browser without having to leave the E-invoicing application.
Use Azure AD to manage identities, authentication, and authorization.
Display all emails that contain a specific invoiced.
Technical Requirements
ADatum identifies the following technical requirements for the planned E-invoicing capabilities:
Ensure that all operations performed by E-invoicing against Office 365 are initiated by a user. Require that the user authorize E-invoicing to access the Office 365 data the first time the application attempts to access Office 365 data on the user's behalf.
Send scheduled reminders to customers before a payment due date. Create an administration user interface to enable the scheduled reminders.
Implement Microsoft Graph change notifications to detect emails from vendors that arrive in a designated mailbox.
Implement single sign-on (SSO) and minimize login prompts across browser tabs.
Secure access to the backend web service by using Azure AD.
Ensure that all solutions use secure coding practices.
Backend Security Planned Changes
ADatum wants to use custom application roles to map user functionality to permissions granted to users.
E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.
SSO JavaScript Script
You plan to implement SSO with Microsoft Authentication Library (MSAL) by using the following code:
Access Token JavaScript Script
You have the following JavaScript code to obtain an access token.
Change Notification JSON
You have the following JSON message that will be sent by the Microsoft Graph service to detect the vendor emails.
NEW QUESTION 34
This question requires that you evaluate the bold text to determine if it is correct.
You can use a Command Set extension to develop a breadcrumb element that will appear on every Microsoft SharePoint page.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
- A. a Field Customizer
- B. a web part
- C. No change is needed
- D. an Application Customizer
Answer: D
Explanation:
Explanation
Application Customizers provide access to well-known locations on SharePoint pages that you can modify based on your business and functional requirements. For example, you can create dynamic header and footer experiences that render across all the pages in SharePoint Online.
Reference:
https://docs.microsoft.com/en-us/sharepoint/dev/spfx/extensions/get-started/using-page-placeholder-with-extensi
NEW QUESTION 35
Match the SharePoint Framework (SPFx) extensions to the correct descriptions.
To answer, drag the appropriate SPFx extension from the column on the left to its description on the right. Each SPFx extension may be used once, more than once, or not at all.
NOTE Each correct match is worth one point.
Answer:
Explanation:
NEW QUESTION 36
You have a single-page application (SPA) named TodoListSPA and a server-based web app named TodoListService.
The permissions for the TodoList SPA API are configured as shown in the TodoList SPA exhibit. (Click the TodoListSPA tab.)
The permissions for the TodoListService API are configured as shown in the TodoListService exhibit. (Click the TodoListService tab.)
You need to ensure that TodoListService can access a Microsoft OneDrive file of the signed-in user. The solution must use the principle of least privilege.
Which permission should to grant?
- A. the Sites.Read.All application permission for TodoListService
- B. the Sites.Read.All application permission for TodoListSPA
- C. the Sites.Read.All delegated permission for TodoListService
- D. the Sites.Read.All delegated permission for TodoListSpa
Answer: C
Explanation:
Explanation
A client application gains access to a resource server by declaring permission requests. Two types are available:
"Delegated" permissions, which specify scope-based access using delegated authorization from the signed-in resource owner, are presented to the resource at run-time as "scp" claims in the client's access token.
"Application" permissions, which specify role-based access using the client application's credentials/identity, are presented to the resource at run-time as "roles" claims in the client's access token.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/developer-glossary#permissions
NEW QUESTION 37
You are designing a Microsoft Teams application. The application will enable content authors to start conversations about news coming from a third-party application.
Which development technique should you use?
- A. deep links
- B. incoming webhooks
- C. outgoing webhooks
- D. activity feeds
Answer: A
Explanation:
Create deep links to content and features in Microsoft Teams.
You can create links to information and features within the Teams client. Examples of where this may be useful:
Your app automates or simplifies certain user tasks, such as creating a chat or scheduling a meeting, by pre-populating the deep links with required parameters. This avoids the need for users to manually enter information.
Navigating the user to content within one of your app's tabs.
Incorrect Answers:
A: Incoming webhooks are the simplest type of connector. Connectors allow users to subscribe to receive notifications and messages from your web services B: Outgoing webhooks allow your users to send text messages from a channel to your web services. Once configured, your users will be able to @mention your outgoing webhook.
C: The activity feed in Microsoft Teams is the user's single inbox for all activity across Teams. The feed aggregates important content.
NEW QUESTION 38
You need to protect the backend web service to meet the technical requirements.
Which four actions should you perform in sequence? To answer, move the actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Here is a quick overview of the steps:
Step 1: Register an application in Azure AD for the backend web service Register an application (backend-app) in Azure AD to represent the API.
Step 2: Set the App ID URI for the backend service application registration When the application is created (step 1) select Expose an API and click on Save and continue to create an Application ID URI.
Step 3: Defend the scopes in the backend web service application registration In the Add a scope page, create a new scope supported by the API. (e.g., Read) then click on Add scope to create the scope. Repeat this step to add all scopes supported by your API.
Step 4: Register an application in Azure AD for E-invoicing.
Step 4.1 Register another application in Azure AD to represent a client application Step 4.2 Now that you have registered two applications to represent the API and the Developer Console, you need to grant permissions to allow the client-app to call the backend-app.
Scenario:
Secure access to the backend web service by using Azure AD
E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.
Reference:
https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad
NEW QUESTION 39
You are evaluating the SharePoint Framework (SPFx) ListView Command Set extension.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 40
......
Latest MS-600 dumps - Instant Download PDF: https://topexamcollection.pdfvce.com/Microsoft/MS-600-exam-pdf-dumps.html