MS-600 Practice Exam Questions with Answers Building Applications and Solutions with Microsoft 365 Core Services Certification

Graphical user interface, text, application Description automatically generated

Box 1: /me/calendars/events?..

"graph/Microsoft/com" "calendar/events?"

Example: A user's calendar in the default calendarGroup.

POST /me/calendars/{id}/events

POST /users/{id | userPrincipalName}/calendars/{id}/events

Box 2: events?select..

Box 3: "/groups?filter…'Group1')"

Use a filter to see only Group1.

Graphical user interface, text, application, chat or text message Description automatically generated

Step 1: From Azure Active Directory admin center, register an app and create a client secret

Register your application in Azure AD. Service-to-service calls require that your application use an X.509 certificate to create client assertion in the form of a base64-encoded, SHA256 signed JWT bearer token.

Generate a new key for your application. Keys, also known as client secrets, are used when exchanging an authorization code for an access token.

Step 2: From the Azure Active Directory admin center, grant the Sites.Read.All delegated permission to the app.

Delegated Permissions. Enables your client app to perform operations on behalf of the signed-in user, such as reading email or modifying the user's profile.

Step 3: From the API code, configure the MSAL.

When have registered your app in Azure AD and configured it with the necessary permissions, you're ready to build your app.

Scenario: Implement single sign-on (SSO) and minimize login prompts across browser tabs.

When your application is open in multiple tabs and you first sign in the user on one tab, the user is also signed in on the other tabs without being prompted. MSAL.js caches the ID token for the user in the browser localStorage and will sign the user in to the application on the other open tabs.

By default, MSAL.js uses sessionStorage which does not allow the session to be shared between tabs. To get SSO between tabs, make sure to set the cacheLocation in MSAL.js to localStorage.

Here is a quick overview of the steps:

Step 1: Register an application in Azure AD for the backend web service

Register an application (backend-app) in Azure AD to represent the API.

Step 2: Set the App ID URI for the backend service application registration

When the application is created (step 1) select Expose an API and click on Save and continue to create an Application ID URI.

Step 3: Defend the scopes in the backend web service application registration

In the Add a scope page, create a new scope supported by the API. (e.g., Read) then click on Add scope to create the scope. Repeat this step to add all scopes supported by your API.

Step 4: Register an application in Azure AD for E-invoicing.

Step 4.1 Register another application in Azure AD to represent a client application

Step 4.2 Now that you have registered two applications to represent the API and the Developer Console, you need to grant permissions to allow the client-app to call the backend-app.

Scenario:

Secure access to the backend web service by using Azure AD

E-invoicing will have internal logic that will dynamically identify whether the user should be allowed to call the backend API.

Scenario: ADatum identifies the following technical requirements for the planned E-invoicing capabilities:

• Ensure that all operations performed by E-invoicing against Office 365 are initiated by a user. Require that the user authorize E-invoicing to access the Office 365 data the first time the application attempts to

access Office 365 data on the user’s behalf.

To use Microsoft Graph to read and write resources on behalf of a user, your app must get an access token from the Microsoft identity platform and attach the token to requests that it sends to Microsoft Graph.

One common flow used by native and mobile apps and also by some Web apps is the OAuth 2.0 authorization code grant flow.

Scenario: Email the generated invoices to customers on behalf of the current signed-in user. Any emails generated by the system will contain the invoiced.

Use Azure AD to manage identities, authentication, and authorization.

Accounts in any organizational directory and personal Microsoft accounts: Select this option to target the widest set of customers.

This option maps to Azure AD multi-tenant and personal Microsoft accounts.

Graphical user interface, text, application Description automatically generated

Box 1: loginPopup

Box 2: acquireTokenSilent

The pattern for acquiring tokens for APIs with MSAL.js is to first attempt a silent token request by using the acquireTokenSilent method. When this method is called, the library first checks the cache in browser storage to see if a valid token exists and returns it. When no valid token is in the cache, it sends a silent token request to Azure Active Directory (Azure AD) from a hidden iframe. This method also allows the library to renew tokens.

Box 3: acquireTokenPopup

//AcquireToken Failure, send an interactive request.

Example:

userAgentApplication.loginPopup(applicationConfig.graphScopes).then(function (idToken) {

//Login Success

userAgentApplication.acquireTokenSilent(applicationConfig.graphScopes).then(function (accessToken) {

//AcquireToken Success

updateUI();

}, function (error) {

//AcquireToken Failure, send an interactive request.

userAgentApplication.acquireTokenPopup(applicationConfig.graphScopes).then(function (accessToken) {

updateUI();

}, function (error) {

console.log(error);

});

})

}, function (error) {

console.log(error);

});

A Hash-based Message Authentication Code (HMAC) is a security token used to authenticate calls between Teams and the designated outside service, such as an outgoing webhook request. The HMAC security token doesn't expire and is unique for each configuration.

By using the AadHttpClient, you can easily connect to APIs secured by using Azure AD without having to

implement the OAuth flow yourself.

An app catalog is a dedicated site collection in a SharePoint web application or SharePoint Online tenancy that hosts document libraries for Office and SharePoint Add-ins. To make Office Add-ins accessible to users within their organization, administrators can upload Office Add-ins manifest files to the app catalog for their organization. When an administrator registers an app catalog as a trusted catalog, users can insert the add-in from the insertion UI in an Office client application.

Scenario:

SalesApp must be integrated with Microsoft Word and must combine images and text from multiple sources to create a quotation as a DOCX file.

The distribution of SalesApp must be automatic and require minimal user interaction.

Graphical user interface, text, application Description automatically generated

Step 1: Create a bot registration..

Step 2: In the HRApp manifest, configure the botId value in the ComposeExtensions section to match the botId value of the bot registration.

Scenario: HRApp must include a messaging extension that enables users to search jobs by job title or job ID.

Step 3: Implement a handler

Graphical user interface, text, application Description automatically generated

Sending actionable messages via email is supported. You use actionable message cards.

Scenario:

Create an email workflow solution for expense claims. Users will submit their expense claims and the system will email an approval request to their manager.

The expense claims solution must provide managers with claim information and the ability to manage the claim by using Microsoft Outlook, Outlook on the web, or Outlook for iOS and Android.

Graphical user interface, text, application Description automatically generated

Box 1: Office Add-ins

Scenario: SalesApp must be integrated with Microsoft Word and must combine images and text from multiple sources to create a quotation as a DOCX file.

You can use the Office Add-ins platform to build solutions that extend Office applications and interact with content in Office documents.

Box 2: Microsoft Visual Studio

Visual Studio can be used to create Office Add-ins for Excel, Outlook, Word, and PowerPoint. An Office Add-in project gets created as part of a Visual Studio solution and uses HTML, CSS, and JavaScript.

Box 3: Fluent UI

Fluent UI is the upcoming and continually evolving design system for Microsoft 365. Currently, there is an ongoing merge in the process to have one consistent UI Framework across the Microsoft ecosystem.

Answer as

Graphical user interface, text, application Description automatically generated