Exam SC-300 topic 3 question 41 discussion

Actual exam question from Microsoft's SC-300

Question #: 41
Topic #: 3

You have an Azure subscription that contains a user named User1.

The App registration settings for the Azure AD tenant are configured as shown in the following exhibit.

User1 builds an ASP.NET web app named App1.

You need to ensure that User1 can register App1. The solution must use the principle of least privilege.

Which role should you assign to User1?

A. Application Developer
B. Cloud App Security Administrator
C. Cloud Application Administrator
D. Application Administrator

Show Suggested Answer

Suggested Answer: A 🗳️

by OrangeSG at Nov. 13, 2023, 2:26 p.m.

Comments

Submit Cancel

OrangeSG

Highly Voted 1 year, 2 months ago

Selected Answer: A

"Assign the Application Developer role to grant the ability to create application registrations when the Users can register applications setting is set to No. This role also grants permission to consent on one's own behalf when the Users can consent to apps accessing company data on their behalf setting is set to No." https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-app-roles#grant-individual-permissions-to-create-and-consent-to-applications-when-the-default-ability-is-disabled

upvoted 5 times

...

Obi_Wan_Jacoby

Most Recent 3 months, 2 weeks ago

Selected Answer: A

Answer A: Application Developer The only 3 roles that can register an app are below. In order from least to highest permissions holdder. Application Administrator Cloud Application Administrator Application Administrator

upvoted 1 times

Obi_Wan_Jacoby

3 months, 2 weeks ago

Wrong list, sorry. Least to highest Application Developer Cloud Application Administrator Application Administrator

upvoted 2 times

...

Sozo

11 months, 2 weeks ago

Selected Answer: A

A. Application Developer. The Application Developer role is an Azure AD role that allows users to register and manage applications in their own name. It also allows users to consent to permissions requested by applications they register. This role follows the principle of least privilege, as it only grants the minimum permissions needed to register and manage applications.

upvoted 3 times

...