A company is planning to register several new applications in Microsoft Entra ID. The security team wants to ensure that each application has a clear owner and that credentials are rotated regularly. The company also wants to avoid using shared credentials across applications. What should the planning strategy include?

Use the same client secret for all app registrations

Create a separate app registration for each application and assign an owner

Create app registrations only when the application is deployed

Use a single app registration for all applications to simplify management

What is a key consideration when using client secrets for an app registration?

Client secrets are automatically managed by Microsoft Entra ID

Client secrets must be protected and rotated regularly

Client secrets are stored in the app's code

A custom application has two app roles: 'Admin' and 'User'. You need to ensure that only members of the 'Global Administrators' group can be assigned the 'Admin' role. You also need to allow any user to be assigned the 'User' role. What should you do?

Use Azure AD built-in roles to control access to the app.

Define both app roles in the manifest and assign the 'Admin' role only to the 'Global Administrators' group. Assign the 'User' role to individual users as needed.

Define the 'Admin' role as a built-in role and the 'User' role as an app role.

Assign the 'Admin' role to all members of the organization and rely on the app to enforce restrictions.

Where in the Azure portal do you configure API permissions for an app registration?

Under the 'Certificates & secrets' blade

Under the 'Authentication' blade

Under the 'API permissions' blade

Microsoft Certified:Identity and Access Administrator Associate

Domain 3Objective 3

Plan and Implement App Registrations SC-300 Practice Questions (Page 4)

Part of the Plan and implement workload identities domain, which accounts for 20–25% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

9concepts

20–25%of the exam

Questions 16–20

16application · medium
A company is planning to register several new applications in Microsoft Entra ID. The security team wants to ensure that each application has a clear owner and that credentials are rotated regularly. The company also wants to avoid using shared credentials across applications. What should the planning strategy include?
Select an answer first
17foundation · easy
What is a key consideration when using client secrets for an app registration?
Select an answer first
18foundation · easy
Which credential type is considered more secure for a confidential client application?
Select an answer first
19expert · hard
A custom application has two app roles: 'Admin' and 'User'. You need to ensure that only members of the 'Global Administrators' group can be assigned the 'Admin' role. You also need to allow any user to be assigned the 'User' role. What should you do?
Select an answer first
20foundation · easy
Where in the Azure portal do you configure API permissions for an app registration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.

Plan and Implement App Registrations SC-300 Practice Questions (Page 4)

Questions 16–20

What is a key consideration when using client secrets for an app registration?

Which credential type is considered more secure for a confidential client application?

A custom application has two app roles: 'Admin' and 'User'. You need to ensure that only members of the 'Global Administrators' group can be assigned the 'Admin' role. You also need to allow any user to be assigned the 'User' role. What should you do?

Where in the Azure portal do you configure API permissions for an app registration?

Keep studying — Plan and implement workload identities