Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 5 question 14 discussion

Actual exam question from Microsoft's AZ-500

Question #: 14
Topic #: 5

DRAG DROP -
Your company has an Azure Active Directory (Azure AD) tenant named contoso.com.
The company is developing an application named App1. App1 will run as a service on server that runs Windows Server 2016. App1 will authenticate to contoso.com and access Microsoft Graph to read directory data.
You need to delegate the minimum required permissions to App1.
Which three actions should you perform in sequence from the Azure portal? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer

Suggested Answer:

Step 1: Create an app registration
First the application must be created/registered.
Step 2: Add an application permission
Application permissions are used by apps that run without a signed-in user present.

Step 3: Grant permissions -
Incorrect Answers:

Delegated permission -
Delegated permissions are used by apps that have a signed-in user present.
Application Proxy:
Azure Active Directory's Application Proxy provides secure remote access to on-premises web applications.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent

by AS007 at April 21, 2020, 3:26 a.m.

Comments

Submit Cancel

gfhbox0083

Highly Voted 4 years, 5 months ago

Correct Answers Application permissions allow an application in Azure Active Directory to act as it's own entity, rather than on behalf of a specific user. Delegated permissions allow an application in Azure Active Directory to perform actions on behalf of a particular user

upvoted 49 times

Loga

4 years ago

Agreed, for sure.

upvoted 2 times

...

AS007

Highly Voted 4 years, 8 months ago

Correct Answers

upvoted 15 times

...

Ivan80

Most Recent 10 months, 3 weeks ago

In exam 1/28/24

upvoted 5 times

...

brooklyn510

11 months, 2 weeks ago

On exam 1/2/24

upvoted 4 times

...

wardy1983

1 year, 1 month ago

Step 1: Create an app registration First the application must be created/registered. Step 2: Add an application permission Application permissions are used by apps that run without a signed-in user present. Step 3: Grant permissions - Incorrect Answers: Delegated permission - Delegated permissions are used by apps that have a signed-in user present. Application Proxy: Azure Active Directory's Application Proxy provides secure remote access to on-premises web applicat

upvoted 3 times

...

majstor86

1 year, 9 months ago

1. Create an app registration 2. Add an app permision 3. Grant permisions

upvoted 3 times

...

tutonata

1 year, 9 months ago

Answer is correct. DDocs are there: https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-configure-permissions?tabs=http%2Cupdatepermissions-azureadgraph-powershell

upvoted 1 times

...

ltjones12

1 year, 11 months ago

Key phrase is "app will run as a service", in that case it's an app permission, not a delegated permission

upvoted 2 times

...

Diallo18

2 years, 2 months ago

In Exam 10/18/2022. One case study(6 ques), no lab.

upvoted 4 times

...

Amit3

2 years, 2 months ago

# In Exam 01-Oct-2022, correct answers.

upvoted 3 times

...

serget12

2 years, 2 months ago

The key part to the question "App1 will run as a service on server", this would indicate an application permission.

upvoted 2 times

...

scruzer

2 years, 9 months ago

on EXAM 03/10/2022

upvoted 5 times

...

Sandomj55

3 years, 4 months ago

In Exam 8/4/2021

upvoted 4 times

...

peacegrace

3 years, 7 months ago

When the question says "You need to delegate the minimum required permissions to App". So delegate would be the minimum permisssion right ? Application is too much. We alwasy use delegate and never application in my projects.

upvoted 4 times

DCarma

3 years, 5 months ago

Disagree, personally. If you use application permissions then you are just granting the application access to Microsoft Graph which is as about as minimal as you can ask for. It doesn't say anything about users using this application themselves and having the need for the app querying Microsoft Graph to do so on behalf of a user or anything. Provided answer is correct.

upvoted 3 times

...