A company is planning to register a new API that will be consumed by multiple client applications. The API needs to expose custom scopes, and the clients will require consent. The security team wants to ensure that only approved clients can call the API. What should the planning strategy include?

Assign the API's app role to the client applications

Expose the API scopes and configure the client app registrations with the required permissions

Create a single app registration for both the API and all clients

Use application roles instead of scopes for the API

A custom application has an app role named 'Manager'. You need to grant the 'Manager' role to a group of users. The group is a Microsoft 365 group that already exists. What should you do?

Add the group as a member of the app registration.

Use Azure AD administrative units to assign the role.

From the Enterprise Application blade, select the app, go to Users and groups, and assign the group with the 'Manager' role.

From the app registration, add the group to the 'Manager' role in the manifest.

Your company has a custom application that supports two roles: 'Admin' and 'Viewer'. You need to control access within the application by using Microsoft Entra ID. The application currently has no roles defined. You want to assign the 'Admin' role to a group of users and the 'Viewer' role to another group. What should you do?

Create two security groups in Microsoft Entra ID and assign them as app roles directly in the app registration.

Use Azure AD built-in roles to assign 'Admin' and 'Viewer' to the groups.

Define app roles in the app registration, then assign the roles to the groups from the Enterprise Application blade.

Add the groups as members of the app registration and configure the app to read group membership.

A company is building a partner portal that will be used by external users from different organizations. The app needs to show different features based on the user's role: 'Admin', 'Contributor', or 'Viewer'. The app will receive the role in its token. What should you configure in the app registration?

Add a custom claim to the token using a claims mapping policy

Use the directory role 'Global Administrator' to control access

Create three separate app registrations, one for each role

Define app roles for Admin, Contributor, and Viewer, and assign them to users or groups

What is the purpose of a redirect URI in an app registration?

To specify where the application's logs are sent

To define the endpoint where Microsoft Entra ID sends authentication responses

To configure the application's home page

To set the URL of the application's privacy policy

Microsoft Certified:Identity and Access Administrator Associate

Domain 3Objective 3

Plan and Implement App Registrations SC-300 Practice Questions (Page 1)

Part of the Plan and implement workload identities domain, which accounts for 20–25% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

9concepts

20–25%of the exam

Questions 1–5

1application · medium
A company is planning to register a new API that will be consumed by multiple client applications. The API needs to expose custom scopes, and the clients will require consent. The security team wants to ensure that only approved clients can call the API. What should the planning strategy include?
Select an answer first
2application · medium
A custom application has an app role named 'Manager'. You need to grant the 'Manager' role to a group of users. The group is a Microsoft 365 group that already exists. What should you do?
Select an answer first
3application · medium
Your company has a custom application that supports two roles: 'Admin' and 'Viewer'. You need to control access within the application by using Microsoft Entra ID. The application currently has no roles defined. You want to assign the 'Admin' role to a group of users and the 'Viewer' role to another group. What should you do?
Select an answer first
4application · medium
A company is building a partner portal that will be used by external users from different organizations. The app needs to show different features based on the user's role: 'Admin', 'Contributor', or 'Viewer'. The app will receive the role in its token. What should you configure in the app registration?
Select an answer first
5foundation · easy
What is the purpose of a redirect URI in an app registration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.

Plan and Implement App Registrations SC-300 Practice Questions (Page 1)

Questions 1–5

A company is planning to register a new API that will be consumed by multiple client applications. The API needs to expose custom scopes, and the clients will require consent. The security team wants to ensure that only approved clients can call the API. What should the planning strategy include?

A custom application has an app role named 'Manager'. You need to grant the 'Manager' role to a group of users. The group is a Microsoft 365 group that already exists. What should you do?

What is the purpose of a redirect URI in an app registration?

Keep studying — Plan and implement workload identities