MS-600 practice test

1. Question 1 · 1

   You are developing an Azure web app that will enable users to view a consolidated view of multiple users' tasks based on data in Microsoft Planner and Outlook. The app will use the Microsoft identity platform and a certificate to establish an authorization flow between the app and Microsoft 365. You obtain a certificate and you create an Azure Active Directory (Azure AD) application. You need to set up authorization for the application. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   Choose all answers that apply.

   • From the Azure portal, upload a certificate public key for the Azure AD application.
   • Add the application permissions to the Azure AD application.
   • Modify the code of the web app to use the certificate to obtain an access token for Microsoft Graph.
   • Create a secret in the Azure AD application.
   • Add the required delegated permissions to the Azure AD application.

2. Question 2 · 1

   You plan to develop a client-side JavaScript web app that will be registered to the Microsoft identity platform and use Microsoft Authentication Library (MSAL) v2.0. Which type of authorization flow should you use?

   Choose one answer.

   • client credentials grant
   • device code
   • resource owner password credentials grant
   • authorization code grant

3. Question 3 · 1

   You have a web app that uses the Microsoft Identity Platform. You extend the application manifest to implement the following role-based access control (RBAC). When you attempt to save the manifest, you receive a validation error. Which key value pair should you modify to resolve the error?

   Choose one answer.

   

   • isEnabled
   • appId
   • allowedMemberTypes
   • id

4. Question 4 · 1

   You are building a custom API. Client applications will use access tokens to authenticate to the API. You need to validate the integrity of the tokens. Which three elements should you verify? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   Choose all answers that apply.

   • the iat claim
   • the aud claim
   • the tid claim
   • the JSON Web Token (JWT) signature
   • the exp claim

5. Question 5 · 2

   DRAG DROP - You are developing a server-based application that has the following requirements: ✑ Prompt the user to fill out form that contains a keyword. ✑ Search the OneDrive for Business folder for files that contain the keyword and return the results to the user. ✑ Allow the user to select one of the files from the results. ✑ Copy the selected file to an Azure Blob storage container. Which four actions should the application perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

   Arrange the options in the correct order.

   

   • Store the @microsoft.graph.downloadUrl property in a variable. Store the file in a Blob storage container.
   • Perform the following REST request. POST /me/drive/items/{item-id}/copy
   • Store the file in a Blob storage container.
   • Perform the following REST request. GET /me/drive/items/{item-id}
   • Perform the following REST request. GET /me/drive/root/search(q='{keyword}')
   • Store the webUrl property in a variable.

6. Question 6 · 2

   You are developing an app that will display all the users returned in a Microsoft Graph query. The entire dataset is too large, and you receive the following response. How should you retrieve the next page of data?

   Choose one answer.

   

   • Send an HTTP PATCH request to the @odata.context value.
   • Send an HTTP GET request that contains the id value.
   • Send an HTTP GET request that contains the skiptoken value.
   • Append the skip query parameter to the last request.
   • Send an HTTP GET request to the @odata.nextLink value.

7. Question 7 · 2

   HOTSPOT - You are developing an app that will use the Microsoft Graph API to retrieve the emails of signed-in users. The app will return the email subject and send date of messages marked as high importance. Which OData query options should you use to complete the HTTP GET request? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   Choose an option for each prompt.

   

   subject, sentDateTime

   • • $filter
   • • $search
   • • $select
   • • $top

   importance

   • • $expand
   • • $filter
   • • $orderby
   • • $search

8. Question 8 · 2

   HOTSPOT - You have a Microsoft 365 subscription. You build a Microsoft Teams app named App1. You need to publish App1 to the Teams deployment by using the Microsoft Graph API. How should you complete the request? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   Choose an option for each prompt.

   

   HTTP method

   • • DEFAULT
   • • MERGE
   • • PATCH
   • • POST
   • • PUT

   Content-type

   • • application/json
   • • application/octet-stream
   • • application/zip
   • • text/plain

9. Question 9 · 2

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   Choose an option for each prompt.

   

   MSGraphClient can only be used with SharePoint Framework (SPFx) solutions that are deployed to Microsoft SharePoint Online.

   • • Yes
   • • No

   Single sign-on (SSO) for MSGraphClient is only available in Microsoft SharePoint Online.

   • • Yes
   • • No

   MSGraphClient can perform operations by using application permissions.

   • • Yes
   • • No

10. Question 10 · 2

    HOTSPOT - You have an Azure AD tenant. You are building an app that will use Microsoft Graph to identify all the users in the tenant who have the tam string in their name. The solution must calculate the number of users who match the query. How should you complete the query? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    Choose an option for each prompt.

    

    query filter

    • • $search="displayName:tam"
    • • $select="firstName:tam"
    • • $startswith(displayName, ‘tam’)
    • • $startswith(firstName, ‘tam’)

    count query option

    • • $count=all
    • • $count=true
    • • $select=all
    • • $select=count

11. Question 11 · 2

    You plan to create a single-tenant console app that will use the Microsoft identity platform. You need to ensure that the app can use the device code flow to access Microsoft Graph and read email on behalf of the authenticated user. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    Choose all answers that apply.

    • Set Supported account types to Accounts in any organizational directory.
    • Add redirect URIs.
    • Set Supported account types to Accounts in this organizational directory only.
    • Enable the Default client type option.
    • From the Expose an API settings, create a custom scope.
    • Generate a client secret for the app.

12. Question 12 · 2

    You are developing a server-based web app that will use OAuth2 on behalf of the user and will be registered with the Microsoft identity platform. Which two types of tokens can the app retrieve as part of the authorization flow? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    Choose all answers that apply.

    • SAML token
    • access token
    • context token
    • refresh token
    • Kerberos token

13. Question 13 · 2

    You are developing a daemon application that reads all the emails in the inbox of a specific Microsoft 365 mailbox. Some emails contain meeting dates and room mailbox names. The application has the following requirements: ✑ Move each processed email to a subfolder in the mailbox. ✑ If an email contains meeting data, create an event in the corresponding room mailbox calendar. Which Microsoft Graph permissions should you grant for the application?

    Choose one answer.

    • Calendars.ReadWrite and Mail.Read application permissions
    • Calendars.ReadWrite.Shared and Mail.ReadWrite delegated permissions
    • Calendars.ReadWrite and Mail.ReadWrite application permissions
    • Calendars.ReadWrite and Mail.ReadWrite delegated permissions

14. Question 14 · 3

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD). Currently, App1 can read user profile information. You need to allow App1 to read the user's calendar. Solution: In the code of App1, dynamically request the Calendar.Read permission from the Microsoft Graph API. Does this meet the goal?

    Choose one answer.

    • Yes
    • No

15. Question 15 · 3

    You have a custom API that is secured by using Azure Active Directory (Azure AD). You need to call the API from within a SharePoint Framework (SPFx) web part. Which object should you use to call the API?

    Choose one answer.

    • MSGraphClient
    • AadHttpClient
    • SPHttpClient
    • XMLHttpRequest

Paid access to all 30 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.