← Back to exam page

MS-600 – Building Applications and Solutions with Microsoft 365 Core Services (beta)

Loading demo links...

Showing 7–9 of 15 questions

Question 7 (New Update)

You are building a custom API.

Client applications will use access tokens to authenticate to the API.

You need to validate the integrity of the tokens.

Which three elements should you verity? Each correct answer presents part o( the solution.

NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

  • ○

    the let claim
  • ○

    the aud claim
  • ○

    the tld claim
  • ○

    the JSON Web Token (JWT) signature
  • ○

    the exp laim
Question 8 (Mixed Questions)

You plan to create a single-tenant console app that will use the Microsoft identity platform.

You need to ensure that the app can use the device code flow to access Microsoft Graph and read email on behalf of the authenticated user.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

  • ○

    Set Supported account types to Accounts in any organizational directory.
  • ○

    Add redirect URIs.
  • ○

    Set Supported account types to Accounts in this organizational directory only.
  • ○

    Enable the Default client type option.
  • ○

    From the Expose an API settings, create a custom scope.
  • ○

    Generate a client secret for the app.
Question 9 (Mixed Questions)

You are building a server-based web app that will use OAuth2 and will be registered with the Microsoft identity platform.

Which two values does the single-tenant app require to obtain tokens from the token endpoint for the Microsoft identity platform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

  • ○

    the tenant ID
  • ○

    the context token
  • ○

    the application ID
  • ○

    the application secret
  • ○

    the authorization code