Building Applications and Solutions with Microsoft 365 Core Services 온라인 연습
최종 업데이트 시간: 2024년11월08일
당신은 온라인 연습 문제를 통해 Microsoft MS-600 시험지식에 대해 자신이 어떻게 알고 있는지 파악한 후 시험 참가 신청 여부를 결정할 수 있다.
시험을 100% 합격하고 시험 준비 시간을 35% 절약하기를 바라며 MS-600 덤프 (최신 실제 시험 문제)를 사용 선택하여 현재 최신 59개의 시험 문제와 답을 포함하십시오.
/ 5
Question No : 1
HOTSPOT
You need to create a messaging extension search command for Microsoft Teams.
How should you complete the app manifest? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
정답:
Explanation:
Graphical user interface, text, application, email
Description automatically generated
Question No : 2
You are developing a Microsoft Team application. To host a webpage in a Teams tab, the manifest file must include the contentUrl property within the staticTabs property.
Instructions: Review the underline text. If the makes the statement correct, select ‘’ No change is needed. ‘’ If the statement is incorrect, select the answer choice that makes the statement correct.
정답:
Question No : 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to deploy a Microsoft Teams app. The app will create a Microsoft Teams personal tab that displays a website.
Solution: You create a Microsoft Teams manifest file that includes a staticTabs section containing the name, ID, and content URL of the website.
Does this meet the goal?
HOTSPOT
You are building a single-page application (SPA) that will have the following parameters:
• App Id: DBA22F72-64PA4C44-AA2C-FAA0DA5A471B
• Tenant Id: DC045C4D-5881-43C7-97AB-3C5A1ADB8DBC
• AppName: Contoso.Spa
You have a line-of-business API for invoicing that is secured by using the Microsoft identity platform.
The API has the following parameters:
* App Id: 8/9A43D7-1794-47A0-AB2B-440B63FEC248
* Tenant Id: DC04SC4D S881-43C7-97AB 3C5A1ADB8DBC
* AppName: Contoso.lnvoicing
Contoso.Invoicing declares the following custom scopes:
* Invoices-Read
* Invoices. Read Write
Contoso.Spa needs to call Contoso.lnvoicing to create new invoices.
Which code should you use in Contoso.Spa to obtain an access token for Contoso.Invoicing? To answer, select the appropriate options in the answer area. NOTE: Each correct select is worth one point.
정답:
Question No : 5
DRAG DROP
You plan to create a bot as part of a Microsoft Teams app. The bot will use Microsoft 365 services on behalf of a user.
You add token.botframework.com to the list of valid domains in the app manifest.
You need to configure the authentication environment to ensure that the bot can access Microsoft 365 services on behalf of the user.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
정답:
Explanation:
Graphical user interface, text, application, chat or text message
Description automatically generated
Step 1: Create a Bot Channels Registration in Azure and register the application in Azure Active Directory (Azure AD)
Register a bot by creating a Bot Channels Registration through Azure Bot Channel Registration.
The Azure AD portal provides a central platform for you to register and configure your apps. Your app must be registered in the Azure AD portal to integrate with the identity platform and call Microsoft Graph APIs.
Step 2: Create a new OAuth Connection in the Bot Channels Registration
The first step to getting an access token for many OpenID Connect (OIDC) and OAuth 2.0 flows is to redirect the user to the Microsoft identity platform /authorize endpoint. Azure AD will sign the user in and ensure their consent for the permissions your app requests. In the authorization code grant flow, after consent is obtained, Azure AD will return an authorization_code to your app that it can redeem at the Microsoft identity platform /token endpoint for an access token.
Step 3: Set the reply URL to the web service that hosts the bot.
Fill in the Webhook (for calling) where you will receive incoming notifications. E.g.
https://{your domain}/api/calls.
Question No : 6
You are developing a Microsoft Teams app in a tenant.
You pilot the app to only 10 users in the tenant and test the app.
You need to deploy the app to all the users in the tenant.
What should you do?
You need to develop a SharePoint Framework (SPFx) solution that interacts with Microsoft SharePoint and Teams. The solution must share the same code base.
What should you include in the solution?
You are developing a daemon application that reads all the emails in the Inbox of a specific Microsoft 365 mailbox. Some emails contain meeting dates and room mailbox names.
The application has the following requirements:
* Move each processed email to a subfolder in the mailbox.
* If an email contains meeting data, create an event in the corresponding room mailbox calendar.
Which Microsoft Graph permissions should you grant for the application?
You are developing an outgoing webhook in Microsoft Teams.
In the service that receives the outgoing webhook request, what should you validate to ensure that calls are coming from Microsoft Teams?
정답: Explanation:
A Hash-based Message Authentication Code (HMAC) is a security token used to authenticate calls between Teams and the designated outside service, such as an outgoing webhook request. The HMAC security token doesn't expire and is unique for each configuration.
Reference: https://docs.microsoft.com/en-us/microsoftteams/platform/webhooks-and-connectors/how-to/add-outgoing-webhook
Question No : 10
You plan to develop a TypeScript client-side app that will use the MSGraphClient library.
You need to configure Microsoft Visual Studio Code to use IntelliSense and support code completion for the MSGraph client library.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
정답:
Question No : 11
You are developing a Microsoft Teams solution to host an existing webpage as a Teams tab.
Which requirement must the page meet?
정답: Explanation:
Make sure that all domains used in your tab pages are listed in the manifest.json validDomains array.
Reference: https://docs.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/create-tab-pages/configuration-page
Question No : 12
You are developing an application that will use Microsoft Graph.
You attempt to retrieve a list of the groups in your organization by using a URI of https://graph.microsoft.eom/vi.0/groups on behalf of the user.
The application fails. The diagnostic logs show the following information:
* An HTTP 403 Forbidden status code
* An Authorization_RequestDenied error code
* The following error message: "Insufficient privileges to complete the operation."
You need to ensure that the application can retrieve the list of groups. The solution must use the principle of least privilege.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE; Each correct selection is worth one point.
You have a SharePoint Framework (SPFx) web part that includes the manifest shown in the following exhibit.
Which task can the web part perform?
정답: Explanation:
In SPFx we will get the user context using the object “context”. We have msGraphClientFactory available in the same object which will take care of generating the Access Token based on the user context.
Reference: https://www.c-sharpcorner.com/article/how-to-send-email-using-graph-api-in-sharepoint-framework-spfx/
Question No : 14
You are building a Microsoft Office Add-in for Outlook that will use the Microsoft Graph REST API to retrieve a user’s documents from a Microsoft SharePoint Online site.
What should the add-in provide to retrieve the documents on behalf of the user?
정답: Explanation:
Get an access token.
Note: The Outlook REST APIs require a bearer token in the Authorization header. Typically, apps use OAuth2 flows to retrieve a token. However, add-ins can retrieve a token without implementing OAuth2 by using the new Office.context.mailbox.getCallbackTokenAsync method introduced in the Mailbox requirement set 1.5.
After your add-in has the access token, item ID, and REST API URL, it can either pass that information to a back-end service which calls the REST API, or it can call it directly using AJAX.
Reference: https://docs.microsoft.com/en-us/office/dev/add-ins/outlook/use-rest-api
Question No : 15
You need to develop a server-based web app that will be registered with the Microsoft identity platform. The solution must ensure that the app can perform operations on behalf of the user?
Which type of authorization flow should you use?
정답: Explanation:
In web server apps, the sign-in authentication flow takes these high-level steps:
A picture containing table
Description automatically generated
You can ensure the user's identity by validating the ID token with a public signing key that is received from the Microsoft identity platform endpoint. A session cookie is set, which can be used to identify the user on subsequent page requests.
In addition to simple sign-in, a web server app might need to access another web service, such as a REST API. In this case, the web server app engages in a combined OpenID Connect and OAuth 2.0 flow, by using the OAuth 2.0 authorization code flow.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-app-types
