A developer is creating a new app registration for a web API. The API will be called by multiple client apps, some of which use delegated permissions and some of which use application permissions. You need to configure the app registration to support both types of permissions. What should you do?

Define both delegated and application permissions in the app registration manifest.

Create two separate app registrations for the API, one for delegated and one for application permissions.

Define only application permissions and rely on client apps to use them for delegated scenarios.

Define only delegated permissions and use the same for application permissions.

A company is building an internal tool that will be used by employees and managers. The tool needs to differentiate between 'Employee' and 'Manager' roles. The app will check the role claim in the token to authorize actions. What should the administrator configure in the app registration?

Use the directory role 'User' and 'Manager'

Define two app roles: Employee and Manager, and assign them to users

Create two separate app registrations for each role

Add a custom claim using a claims mapping policy

What is an app role in an app registration?

A role that defines the administrative permissions for managing the app registration

A role that automatically assigns all users in the tenant to the application

A role that the application defines to control access to its own features or data

A role that defines the permissions the app has to Microsoft Graph

Your organization has a web API that exposes two delegated permissions: 'Data.Read' and 'Data.Write'. A client app needs to read data on behalf of users. You have been asked to configure the client app registration. You want to minimize the permissions granted to the client app. What should you do?

Add the 'Data.Read' application permission instead of the delegated permission.

Add no permissions and rely on the web API to grant access.

Add only the 'Data.Read' delegated permission to the client app registration.

Add both 'Data.Read' and 'Data.Write' to allow for future needs.

A company has an app that requires the Files.ReadWrite.All delegated permission. The tenant has user consent enabled for low-risk permissions, but Files.ReadWrite.All is considered a high-risk permission. An admin wants to allow users to consent to this permission without requiring admin consent for every request. What should the admin do?

Grant admin consent for the permission

Enable user consent for the specific permission using a consent policy

Use application permissions instead

Microsoft Certified:Identity and Access Administrator Associate

Domain 3Objective 3

Plan and Implement App Registrations SC-300 Practice Questions (Page 3)

Part of the Plan and implement workload identities domain, which accounts for 20–25% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

9concepts

20–25%of the exam

Questions 11–15

11expert · hard
A developer is creating a new app registration for a web API. The API will be called by multiple client apps, some of which use delegated permissions and some of which use application permissions. You need to configure the app registration to support both types of permissions. What should you do?
Select an answer first
12application · medium
A company is building an internal tool that will be used by employees and managers. The tool needs to differentiate between 'Employee' and 'Manager' roles. The app will check the role claim in the token to authorize actions. What should the administrator configure in the app registration?
Select an answer first
13foundation · easy
What is an app role in an app registration?
Select an answer first
14expert · hard
Your organization has a web API that exposes two delegated permissions: 'Data.Read' and 'Data.Write'. A client app needs to read data on behalf of users. You have been asked to configure the client app registration. You want to minimize the permissions granted to the client app. What should you do?
Select an answer first
15application · medium
A company has an app that requires the Files.ReadWrite.All delegated permission. The tenant has user consent enabled for low-risk permissions, but Files.ReadWrite.All is considered a high-risk permission. An admin wants to allow users to consent to this permission without requiring admin consent for every request. What should the admin do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.