Which type of redirect URI is commonly used for a native mobile application?

https://localhost:44321/callback

https://myapp.azurewebsites.net/signin-oidc

https://login.microsoftonline.com/common/oauth2/nativeclient

A company is deploying a third-party SaaS app that requires the User.Read.All and Group.Read.All delegated permissions. The tenant has user consent enabled for low-risk permissions, but these are high-risk. The app will be used by 50 users in the HR department. The security team wants to allow these users to consent without involving an admin for each request, but they do not want to grant consent for the entire tenant. What should the administrator do?

Grant admin consent for the entire tenant

Use application permissions instead of delegated permissions

Disable user consent and have each HR user request admin consent individually

Create a consent policy that allows user consent for the specific permissions and assign it to the HR users

Which organizational requirement is most directly addressed by planning which users can consent to app permissions?

Maintaining compliance with data protection regulations

Preventing users from granting excessive permissions to applications

Ensuring the application is available in all geographic regions

Reducing the number of app registrations in the tenant

Where are app roles defined for an app registration?

In the 'Certificates & secrets' blade

Which benefit does an app registration provide to an organization using Microsoft Entra ID?

It provides a central place to manage authentication, permissions, and consent for the application

It allows the application to bypass multi-factor authentication for its users

It automatically replicates the application to all Azure regions

It guarantees that the application can access all Microsoft Graph APIs without consent

Microsoft Certified:Identity and Access Administrator Associate

Domain 3Objective 3

Plan and Implement App Registrations SC-300 Practice Questions (Page 5)

Part of the Plan and implement workload identities domain, which accounts for 20–25% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

9concepts

20–25%of the exam

Questions 21–25

21foundation · easy
Which type of redirect URI is commonly used for a native mobile application?
Select an answer first
22expert · hard
A company is deploying a third-party SaaS app that requires the User.Read.All and Group.Read.All delegated permissions. The tenant has user consent enabled for low-risk permissions, but these are high-risk. The app will be used by 50 users in the HR department. The security team wants to allow these users to consent without involving an admin for each request, but they do not want to grant consent for the entire tenant. What should the administrator do?
Select an answer first
23foundation · easy
Which organizational requirement is most directly addressed by planning which users can consent to app permissions?
Select an answer first
24foundation · easy
Where are app roles defined for an app registration?
Select an answer first
25foundation · easy
Which benefit does an app registration provide to an organization using Microsoft Entra ID?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.