Microsoft MS-600 Exam Updated Questions Available

1. You are developing an application that will use Microsoft Graph.

You attempt to retrieve a list of the groups in your organization by using a URI of https://graph.microsoft.eom/vi.0/groups on behalf of the user.

The application fails. The diagnostic logs show the following information:

* An HTTP 403 Forbidden status code

* An Authorization_RequestDenied error code

* The following error message: "Insufficient privileges to complete the operation."

You need to ensure that the application can retrieve the list of groups. The solution must use the principle of least privilege.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE; Each correct selection is worth one point.

2. You are building a Microsoft Outlook Web Add-in.

You need to persist user preferences between devices by using the minimum amount of development effort.

Which API should you use?

3. You have an invoice approval process in which an approver is sent an automated email that contains a link to a web-based accounts system whenever an invoice requires approval.

Which benefit can be achieved by using actionable messages for the approval process?

4. You have an application that uses the Microsoft Graph API.

You need to configure the application to retrieve the groups to which the current signed-in user belongs. The results must contain the extended priorities of the groups.

Which URI should you use?

5. You have a custom API that is secured by using Azure Active Directory (Azure AD). You need to call the API from within a SharePoint Framework (SPFx) web part.

Which object should you use to call the API?

6. You have a line-of-business API that is secured by using Azure Active Directory (Azure AD).

You deploy a solution to the app catalog. The solution requests permission to the API.

What should you do in the SharePoint admin center to ensure that the solution can access the API?

7. HOTSPOT

You receive the following JSON document when you use Microsoft Graph to query the current signed-in user.





For each of the following statements, select Yes if the statement is true. Otherwise, select

No. NOTE: Each correct selection is worth one point.

8. You have a backend service that will access the Microsoft Graph API.

You need to configure the service to authenticate by using the most secure authentication method.

What should you configure the service to use?

9. You are building a Microsoft Outlook add-in.

Which object should you use to save additional information in an email?

10. What is the default permission scope when you request an access token by using MSGraphClient?

11. You are developing a Microsoft Teams app that will use an Azure function to send scheduled messages from a bot to users.

What is required for the Teams app to send a proactive message to the users?

12. You plan to deploy a SharePoint Framework (SPFx) solution to the tenant app catalog.

Which attribute should you configure in the package-solution.json file to ensure that the solution is available immediately to all site collections?

13. HOTSPOT

You are building a Microsoft teams application by using an outgoing webhook.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

14. You are developing an application that will track changes to the UserPrincipalName attribute of Microsoft 365 accounts.

You need to use a REST request to retrieve the information by using Microsoft Graph. The solution must

minimize the amount of data retrieved.

What should you do?

15. You are developing a Microsoft Teams solution to host an existing webpage as a Teams tab.

Which requirement must the page meet?

16. You are building a conversational bot that will have an interactive Ul. When the user invokes the bot by using a keyword, the bot will reply with a dialog that lets the user choose one of multiple options.

After the user chooses an option, and the response is received by the backend logic, you need to prompt the user to select additional options.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

17. DRAG DROP

You are developing in application named App1.

App1 needs to use the Microsoft Graph API to retrieve emails from Microsoft 365 for the current signed-in user.

The solution must meet the following requirements:

✑ Emails that have attachments and are from [email protected] must be retrieved.

✑ The results must show the subject of the email, the sender address, and the count of emails retrieved.

How should you complete the URI to retrieve the results? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

18. This question requires that you evaluate the underlined text to determine if it is correct.

In Microsoft Word on Windows, before you can sideload a Microsoft Office Add-in. you must first upload the manifest to Microsoft_pnePrivc.

Instructions: Review the underlined text.

If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

19. You have a custom Microsoft Word add-in that was written by using Microsoft Visual Studio Code.

A user reports that there is an issue with the add-in.

You need to debug the add-in for Word Online.

What should you do before you begin debugging in Visual Studio Code?

20. You are developing a daemon application that reads all the emails in the Inbox of a specific Microsoft 365 mailbox. Some emails contain meeting dates and room mailbox names.

The application has the following requirements:

* Move each processed email to a subfolder in the mailbox.

* If an email contains meeting data, create an event in the corresponding room mailbox calendar.

Which Microsoft Graph permissions should you grant for the application?

21. Which tool can you use to generate a SharePoint Framework (SPFx) solution?

22. HOTSPOT

You plan to create a Microsoft Teams application that uses action-based messaging extensions.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

23. You are designing a custom SharePoint Framework (SPFx) web part that will be deployed to modern Microsoft SharePoint sites.

You need to ensure that all the web part fields and controls adopt the theme of the site when you deploy the web part.

What should you use to develop the web part?

24. You have an application that uses the Microsoft graph API.

When users open the application during peak hours, they occasionally receive an HTTP 429 Too Many requests response status code.

What should you to mitigate the errors?

25. HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

26. HOTSPOT

You are building a Microsoft Teams application.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

27. HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct select is worth one point.

28. What should you add to a SharePoint Framework (SPFx) solution to ensure that the solution can be used as a Microsoft Teams tab?

29. HOTSPOT

You have an application that employees use to schedule vacations. The application sets an automatic reply and an out-of-office event in the employees’ Microsoft 365 calendar.

Employees who access the application from a mobile device report that the application is slow to make changes.

You need to replace the application calls to use a batched request. Automatic reply must be set only if an out-of-office event is set successfully.

How should you complete the batch request? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

30. You develop a web API named WebApi1.

When validating a token received from a client application, WebApi1 receives a MsalUiRequiredException exception from the Microsoft Identity Platform.

You need to ensure that the client application has the information required to complete the authentication.

Which header should you include in the HTTP response sent from WebApi1 to the client application?

31. You are building email notifications for an expensing system.

When a user receives an email notification, the email will contain a comment field. When

the user submits a comment, the data will be returned to the expensing system for processing.

What should you do to implement the notification by using the minimum amount of development effort?

32. You have a single-page application (SPA) named TodoListSPA and a server-based web app named TodoListService.

The permissions for the TodoListSPA API are configured as shown in the TodoListSPA exhibit. (Click the TodoListSPA tab.)





The permissions for the TodoListService API are configured as shown in the TodoListService exhibit (Click the TodoListService tab.)





You need to ensure that TodoListService can access a Microsoft OneDrive file of the signed-in user. The solution must use the principle of least privilege.

Which permission request should you configure?

33. Topic 3, Contoso



Case Study

Overview

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the question. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, n...... that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to ret........ to the question.



Existing Environment

Microsoft 365

Contoso identifies the following business goals:

* Utilize core functionality of apps whenever possible.

* Reduce app development costs.

* Minimize training costs for end users.



Microsoft SharePoint/Microsoft Exchange

Contoso has a Microsoft 365 subscription that uses a domain named contoso.com. Each user is assigned a Microsoft 365 Enterprise E5 licence.



Problem Statement

Contoso moves all email accounts to Microsoft 365.

Contoso migrates the SharePoint Server 2013 intranet sites of the research department to SharePoint Online.



Requirements

Business Goals

Contoso identifies the following issues:

* Users in the sales department report that prepanng quotations is time-consuming as it requires manually copying and pasting data from multiple sources.

* Users in the HR department must use multiple apps to manage the hiring process.

* The solution to claim expenses requires multiple manual steps.



Planned Changes

Contoso identifies the following business goals:

* Utilize core functionality of apps whenever possible.

* Reduce app development costs.

* Minimize training costs for end users.



Technical Requirements

Contoso plans to implement the following changes;

* Redesign the SharePoint Online sites of the research department to provide users with an expenence that is consistent with the Microsoft 365 portal. The research department has a third-party project management solution that uses the Microsoft identity platform in Azure AD.

* Create an email workflow solution for expense claims. Users will submit their expense claims and the system will email an approval request to their manager.

* Implement a bring your own device (BYOD) model that supports Windows 10, macOS, and Android devices.

* Develop a custom Microsoft 365 app named SalesApp for the sales department.

* Develop a custom Microsoft 365 app named HRApp for the HR department



Security Requirement

Contoso identifies the following technical requirements for app development:

* The expense claims solution must provide managers with claim information and the ability to manage the claim by using Microsoft Outlook. Outlook on the web, or Outlook for iOS and Android.

* HRApp must include a bot named HRBot that will answer HR questions. Users must be able to access the bot by ©mentioning HRBot in a Microsoft Teams channel or private chat.

* HRApp must enable users to query a third-party HR system by using a tab from within a Microsoft Teams channel.

* HRApp must include a messaging extension that enables users to search jobs by job title or job ID.

* SalesApp must be integrated with Microsoft Word and must combine images and text from multiple sources to create a quotation as a DOCX file.

* The distribution of SalesApp must be automatic and require minimal user interaction.

* Solutions for SharePoint Online and Microsoft Office must follow the current Office user interface (Ul) design.

* Development tools and solutions must support Windows and non-Windows devices.

* Development effort must be minimized.



HRApp Manifest

All solutions must support the Microsoft identity platform in Azure AD.

Intranet components must not share access tokens.



You need to recommend a model for the expense claims solution.

What should you recommend?

34. You need to provide users with access to SalesApp. The solution must meet the technical requirements.

What should you include in the solution?

35. DRAG DROP

You need to configure HRApp to enable users to search for specific jobs by using chat in Microsoft Teams.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

36. Topic 4, E-invoicing



Case Study

Overview

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the question. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, n...... that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to ret........ to the question.



Existing Environment

Application Architecture

E-invoicing consists of a single-page application (SPA) and a backend web service that provides invoice management and processing functionality.

E-invoicing stores all the details of each invoicing operation in a backend cloud database. E-invoicing generates invoices in PDF format and provides users with the ability to download the PDF from OneDrive after it is generated. Each invoice has a unique identifier named invoiceid.

The users have a common workflow where they sign in to E-invoicing, and then open E-invoicing in multiple tabs of a web browser so they can use different parts of the application simultaneously.



Security Architecture

A. Datum uses the principle of least privilege whenever possible.

A. Datum always uses the latest libraries and integration endpoints.



Requirements

Business Goals

A. Datum wants to integrate E-invoicing. Microsoft identity platform, and Microsoft Graph so that their customers can leverage Microsoft 365 services directly from within E-invoicing.



Planned Changes

A. Datum plans to add the following capabilities to E-invoicing:

* Email the generated invoices to customers on behalf of the current signed-in user. Any emails generated by the system will contain the invoiceid.

* Perform as many operations as possible in the browser without having to leave the E-invoicing application.

* Use Microsoft identity platform to manage identities, authentication, and authorization.

* Display all emails that contain a specific invoiceid.



Technical Requirements

A. Datum identifies the following technical requirements for the planned E-invoicing capabilities:

* Ensure that all operations performed by E-invoicing against Microsoft 365 are initiated by a user. Require that the user authorize E-invoicing to access the Microsoft 365 data the first time the application attempts to access Microsoft 365 data on the user's behalf.

* Send scheduled reminders to customers before a payment due date. Create an administration user interface to enable the scheduled reminders.

* Implement Microsoft Graph change notifications to detect emails from vendors that arrive in a designated mailbox.

* Implement single sign-on (SSO) and minimize login prompts across browser tabs.

* Secure access to the backend web service by using Microsoft identity platform.

* Ensure that all solutions use secure coding practices.



Backend Security Planned Changes

A. Datum wants to use custom application roles to map user functionality to permissions granted to users.

E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.



SSO JavaScript Script

You plan to implement SSO with Microsoft Authentication Library (MSAL) by using the following code.







Access Token JavaScript Script

You have the following JavaScript code to obtain an access token.







Change Notification JSON

You have the following JSON message that will be sent by the Microsoft Graph service to detect the vendor emails.







What are two possible URIs that you can use to prompt the administrators for admin consent to the E-invoicing application? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token/authorize?client_id={clientid}&s tate={state}8redirect_uri={url}

B. https://login.microsoftonline.com/con*K>n/adiiinconsent?client_id-{clientid}

C. https://login.microsoftonline.com/{tenant)/oauth2/v2.0/authorize?client_id«{clientid)&5tate«{ state}aredirect_uri-{url}

D. https://login.microsoftonline.com/{do«ain}/adminconsent?client_id={clientid}&state={state}& redirect_uri={url}

37. You need to complete the MSALjs code for the SSO Javascript.

Which code segment should you insert at line 06?

38. Which URI should you use to query all the emails that relate to an invoice?

39. Topic 1, ADatum Corporation



This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end on this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.



Overview

ADatum Corporation develops a software as a service (SaaS) application named E-invoicing.



Existing Environment

Application Architecture

E-invoicing consists of a single-page application (SPA) and a backend web service that provides invoice management and processing functionality.



E-invoicing stores all the details of each invoicing operation in a backend cloud database. E-invoicing generates invoices in PDF format and provides users with the ability to download the PDF after it is generated. Each invoice has a unique identifier named invoiceid.



The users have a common workflow where they sign in to E-invoicing, and then open E-invoicing in multiple tabs of a web browser so they can use different parts of the application simultaneously.



Security Architecture

ADatum uses the principle of least privilege whenever possible. ADatum always uses the latest libraries and integration endpoints.



Requirements

Business Goals

ADatum wants to integrate E-invoicing, Azure Active Directory (Azure AD), and Microsoft Graph so that their customers can leverage Microsoft Office 365 services directly from within E-invoicing.



Planned Changes

ADatum plans to add the following capabilities to E-invoicing:

- Email the generated invoices to customers on behalf of the current signed-in user. Any emails generated by the system will contain the invoiced.

- Perform as many operations as possible in the browser without having to leave the E-invoicing application.

- Use Azure AD to manage identities, authentication, and authorization.

- Display all emails that contain a specific invoiceid.



Technical Requirements

ADatum identifies the following technical requirements for the planned E-invoicing capabilities:

- Ensure that all operations performed by E-invoicing against Office 365 are initiated by a user. Require that the user authorize E-invoicing to access the Office 365 data the first time the application attempts to access Office 365 data on the user’s behalf.

- Send scheduled reminders to customers before a payment due date. Create an administration user interface to enable the scheduled reminders.

- Implement Microsoft Graph change notifications to detect emails from vendors that arrive in a designated mailbox.

- Implement single sign-on (SSO) and minimize login prompts across browser tabs.

- Secure access to the backend web service by using Azure AD.

- Ensure that all solutions use secure coding practices.



Backend Security Planned Changes

ADatum wants to use custom application roles to map user functionality to permissions granted to users.

E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.



SSO JavaScript Script

You plan to implement SSO with Microsoft Authentication Library (MSAL) by using the following code:







Access Token JavaScript Script

You have the following JavaScript code to obtain an access token.







Change Notification JSON

You have the following JSON message that will be sent by the Microsoft Graph service to detect the vendor emails.







You need to configure the initial login request in the access token JavaScript script.

Which code segment should you insert at line 01?

40. DRAG DROP

You need to protect the backend web service to meet the technical requirements.

Which four actions should you perform in sequence? To answer, move the actions from the list of actions to the answer area and arrange them in the correct order.

41. Which URI should you use to query all the emails that relate to an invoice?

42. How can you validate that the JSON notification message is sent from the Microsoft Graph service?

43. You need to implement the role functionality for the backend web service calls.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

44. You need to complete the MSAL.js code for SSO.

Which code segment should you insert at line 06?

45. What are two possible URIs that you can use to prompt the administrators for admin consent to the E-invoicing application? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

46. DRAG DROP

You need to implement the role functionality for the backend web service calls.

Which three actions should you perform in sequence? To answer, move the actions from the list of actions to the answer area and arrange them in the correct order.

47. Which type of authentication flow should you recommend for the planned integration with Office 365?

48. Topic 2, Misc. Questions



This question requires that you evaluate the underlined text to determine if it is correct.

Centralized deployments for Microsoft Office Add-ins require Office Online Server.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

49. You need to develop an add-in for Microsoft Excel that can be used from the Windows, Mac, and web versions of Excel.

What are two ways to develop the add-in? Each correct answer presents a complete solution? NOTE: Each correct selection is worth one point.

50. HOTSPOT

You are developing an Azure function to provision a team in Microsoft Teams.

You need to create a group named Project A, add a classification of Private to the group, and then convert Project A to a team group.

How should you complete the REST requests? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

51. HOTSPOT

You are building a new tab as part of a new Microsoft Teams application. Users will experience the tab privately.

How should you complete the application manifest? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

52. HOTSPOT

You have a Microsoft 365 tenant that contains a Microsoft SharePoint Online site named Projects.

You need to get a list of documents in the Documents library by using the Microsoft Graph API.

How should you complete the query? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

53. You have a SharePoint Framework (SPFx) web part named WebPartA that uses SPFx 1.11.0. You need to ensure that WebPartA can be installed as an app in Microsoft Teams.

What should you do?

54. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to deploy a Microsoft Teams app. The app will create a Microsoft Teams personal tab that displays a website.

Solution: From the Microsoft Teams client, you add a new tab, you select the Website app, and then you enter the URL of the website.

Does this meet the goal?

55. You use Azure Active Directory (Azure AD) to store user identities.

The user profile information is inconsistently populated.

You need to develop a web app that will provide users with a page where they can enter their interests, skill, and description. When the user click the submit button, the app will use Microsoft graph to send the data to Azure AD.

Which HTTP method should you use against the Microsoft graph endpoint?