- (Exam Topic 2)
You are developing an Azure web app that will enable users to view a consolidated view of multiple users' tasks based on data in Microsoft Planner and Outlook. The app will use the Microsoft identity platform and a certificate to establish an authorization flow between the app and Microsoft 365.
You obtain a certificate and you create an Azure Active Directory (Azure AD) application. You need to set up authorization for the application.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one pointA. Add the application permissions to the Azure AD application.
Correct Answer:ACD
- (Exam Topic 2)
This question requires that you evaluate the underlined text to determine if it is correct.
Centralized deployments for Microsoft Office Add-ins require Office Online Server.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
Correct Answer:A
Centralized deployment of add-ins requires that the users are using Office 365 ProPlus (and are signed into Office using their Organizational ID), and have Exchange Online and active Exchange Online mailboxes.
Reference: https://docs.microsoft.com/en-us/office365/admin/manage/centralized-deployment-of-add-ins
- (Exam Topic 2)
You are developing in application named App1.
App1 needs to use the Microsoft Graph API to retrieve emails from Microsoft 365 for the current signed-in user. The solution must meet the following requirements:
Emails that have attachments and are from bill@contoso.com must be retrieved. The results must show the subject of the email, the sender address, and the count of emails retrieved.
How should you complete the URI to retrieve the results? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Solution:
Box 1: $count
Use $count as a query parameter to include a count of the total number of items in a collection alongside the page of data values returned from the Graph, as in the following example:
GET https://graph.microsoft.com/v1.0/me/contacts?$count=true Box 2: $select
To specify a different set of properties to return than the default set provided by the Graph, use the $select query option. The $select option allows for choosing a subset or superset of the default set returned.
Box 3: $filter
To filter the response data based on a set of criteria, use the $filter query option.
The following example returns messages that have the address field of the from property equal to "jon@contoso.com".
The from property is of the complex type emailAddress.
GET https://graph.microsoft.com/v1.0/me/messages?$filter=from/emailAddress/address eq 'jon@contoso.com' Reference: https://developer.microsoft.com/en-us/graph/docs/overview/query_parameters
Does this meet the goal?
Correct Answer:A
- (Exam Topic 2)
You need to develop a server-based web app that will be registered with the Microsoft identity platform. The solution must ensure that the app can perform operations on behalf of the user?
Which type of authorization flow should you use?
Correct Answer:A
In web server apps, the sign-in authentication flow takes these high-level steps:
You can ensure the user's identity by validating the ID token with a public signing key that is received from the Microsoft identity platform endpoint. A session cookie is set, which can be used to identify the user on subsequent page requests.
In addition to simple sign-in, a web server app might need to access another web service, such as a REST API. In this case, the web server app engages in a combined OpenID Connect and OAuth 2.0 flow, by using the OAuth 2.0 authorization code flow.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-app-types
- (Exam Topic 1)
How can you validate that the JSON notification message is sent from the Microsoft Graph service?
Correct Answer:A
clientState specifies the value of the clientState property sent by the service in each notification. The maximum length is 128 characters. The client can check that the notification came from the service by comparing the value of the clientState property sent with the subscription with the value of the clientState property received with each notification.
Note: A subscription allows a client app to receive notifications about changes to data in Microsoft Graph. Reference: https://docs.microsoft.com/en-us/graph/api/resources/subscription