HOTSPOT

You are developing a web app that will use the Microsoft Graph API. The app will use a front end to authenticate users and a backend to provision new unified groups.

Users do not have permission to provision groups in Azure Active Directory (Azure AD).

You need to recommend which permission types to grant. The solution must use the principle of least privilege.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

You need to complete the MSAL.js code for SSO. Which code segment should you insert at line 06?

A. storeAuthStateInCookie: false

B. storeAuthStateInCookie: true

C. cacheLocation: ‘localStorage’

D. cacheLocation: ‘sessionStorage’

You have an application named App1 that is used to administer an Azure Active Directory (Azure AD) tenant.

When administrators install App1, they are prompted for admin consent.

Which application permission can cause the administrators to be prompted for consent?

A. RoleManagement. Read . Directory

B. Device.Command

C. Device.Read

D. Calendars.ReadWrite

You have a line-of-business API that is secured by using Azure Active Directory (Azure AD).

You deploy a solution to the app catalog. The solution requests permission to the API.

What should you do in the SharePoint admin center to ensure that the solution can access the API?

A. Create a SharePoint security group and add the solution

B. Create an access policy

C. Enable sandbox solutions

D. Approve a pending permission request

You need to build a daemon app that polls Microsoft Graph to get all user information.

You register and configure the app in Azure Active Directory (Azure AD).

Which three actions should you perform next? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Get the consent of each user.

B. Pass a bearer token in the authorization header and call the Microsoft Graph API.

C. Get an ID token.

D. Get an access token.

E. Provide the admin consent URL to a global administrator in Azure AD.