Microsoft Role-based MS-600 Questions & Answers

• Question 1:

  You have a custom web app that uses the Microsoft Graph API.

  You receive an HTTP 403 Forbidden error when you call the Microsoft Graph endpoint.

  What are two possible causes of the error? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. The access token is valid but corresponds to a different endpoint.

  B. The Authorization header is missing from the HTTP request.

  C. The requested resource does not exist.

  D. The API permissions are insufficient to call the requested resource.

  E. The access token is invalid.

  Correct Answer: AD

  Reference: https://docs.microsoft.com/en-us/graph/resolve-auth-errors

• Question 2:

  You have the following Microsoft Graph call.

  PATCH /me/drive/items/01NKDM7HMOJTVYMDOSXFDK2QJDXCDI3WUKContent-type: application/json

  {

  "name": "Marketing-Campaign.docx"}

  What occurs when you execute the call?

  A. A file that has an ID of 01NKDM7HMOJTVYMDOSXFDK2QJDXCDI3WUK in the root of your Microsoft OneDrive is renamed as Marketing-Campaign.docx.

  B. A file that has an ID of 01NKDM7HMOJTVYMDOSXFDK2QJDXCDI3WUK in a Microsoft SharePoint Online site is renamed as Marketing-Campaign.docx.

  C. A file named Marketing-Campaign.docx that has an ID of 01NKDM7HMOJTVYMDOSXFDK2QJDXCDI3WUKis uploaded to the root of your Microsoft OneDrive.

  D. A file named Marketing-Campaign.docx that has an ID of 01NKDM7HMOJTVYMDOSXFDK2QJDXCDI3WUKis uploaded to a Microsoft SharePoint Online site.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/graph/api/driveitem-update?view=graph-rest-1.0andtabs=http

• Question 3:

  You are building an application that will help Azure Active Directory (Azure AD) administrators manage Microsoft 365 groups.

  You are building a details page that will display information about the groups.

  You need to display the groups of which the current group is a member. The results must contain the nested groups.

  Which URI should you use?

  A. https://graph.microsoft.com/v1.0/groups/{id}/transitiveMemberOf

  B. https://graph.microsoft.com/v1.0/groups/{id}/memberOf

  C. https://graph.microsoft.com/v1.0/groups/{id}/transitiveMembers

  D. https://graph.microsoft.com/v1.0/groups/{id}/owners

  E. https://graph.microsoft.com/v1.0/groups/{id}/members

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/graph/api/group-list-transitivememberof?view=graph-rest-1.0andtabs=http

• Question 4:

  You are developing an app that will display all the users returned in a Microsoft Graph query. The entire dataset is too large, and you receive the following response.

  

  How should you retrieve the next page of data?

  A. Send an HTTP PATCHrequest to the

  B. Send an HTTP GETrequest that contains the id value.

  C. Send an HTTP GETrequest that contains the skiptoken value.

  D. Append the skip queryparameter to the last request.

  E. Send an HTTP GETrequest to the

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/graph/query-parameters

• Question 5:

  You need to build a daemon app that polls Microsoft Graph to get all user information.

  You register and configure the app in Azure Active Directory (Azure AD).

  Which three actions should you perform next? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Get the consent of each user.

  B. Pass a bearer token in the authorization header and call the Microsoft Graph API.

  C. Get an ID token.

  D. Get an access token.

  E. Provide the admin consent URL to a global administrator in Azure AD.

  Correct Answer: BDE

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/scenario-daemon-overview https://docs.microsoft.com/en-us/graph/auth/auth-concepts

• Question 6:

  You create a SharePoint Framework (SPFx) web part and include MSGraphClient by using the following manifest.

  

  Which two actions can the web part perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. Create a file in the current user's Microsoft OneDrive.

  B. Access the user information of the current user only.

  C. Send an email on behalf of the current user.

  D. Access the user information of all users.

  E. Send an email on behalf of another user.

  Correct Answer: BC

  Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/web-parts/get-started/build-a-hello-world-web-part

• Question 7:

  You are developing a SharePoint Framework (SPFx) web part. The web part will call a backend API that is secured by using Azure Active Directory (Azure AD). The web part will be on a page that has many other web parts. Which type of web part should you use to ensure that access to the API is exclusive to the web part?

  A. isolated

  B. SharePoint-hosted

  C. provider-hosted

  D. connected

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/web-parts/isolated-web-parts

• Question 8:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).

  Currently, App1 can read user profile information.

  You need to allow App1 to read the user's calendar.

  Solution: From the Azure portal, edit the API permission list for App1. Add the Microsoft Graph API and the Calendars.Read permissions and then grant tenant admin consent.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Microsoft Graph Calendars.Read allows the app to read events in user calendars.

  For your app to access data in Microsoft Graph, the user or administrator must grant it the correct permissions via a consent process.

  Application permissions are used by apps that run without a signed-in user present; for example, apps that run as background services or daemons. Application permissions can only be consented by an administrator.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent

  https://docs.microsoft.com/en-us/graph/permissions-reference

• Question 9:

  You plan to develop a new way for users to generate tickets in a support system by filling out a form that pops up in a Microsoft Teams app.

  You already have the built form in an existing web app.

  You need to ensure that the existing form can be hosted in a custom tab in a Microsoft Teams app.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Invoke the microsoaftTeams.tasks.startTask()function.

  B. Create a custom tab that references the Microsoft Teams JavaScript API.

  C. Point the TaskInfo.cardproperty to the URL of the existing form.

  D. Create a configuration page.

  E. Point the TaskInfo.urlproperty to the URL of the existing form.

  Correct Answer: AE

  Reference: https://docs.microsoft.com/en-us/microsoftteams/platform/task-modules-and-cards/task-modules/task-modules-tabs

• Question 10:

  Your company has a sales system that emails an alert to all the members of the sales department when a new sale is made.

  You need to ensure that a notification is posted to a team channel when a new sale is made. The solution must minimize development effort.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Post JSON to the webhook URL from the existing sales system.

  B. Set the configurationUrlproperty of a connector in the manifest.

  C. Post XML to the webhook URL from the existing sales system.

  D. Get an incoming webhook for the channel.

  Correct Answer: AD

  Reference: https://docs.microsoft.com/en-us/microsoftteams/platform/webhooks-and-connectors/how-to/add-incoming-webhook