Exam MS-600 topic 3 question 10 discussion

https://learn.microsoft.com/en-us/azure/active-directory/develop/consent-types-developer#incremental-and-dynamic-user-consent

"Currently, App1 can read user profile information." , Just by altering the code you can't access to Calendars.Read, the dev must first add "Calendars.Read" to the scope on app registration then alter the code to get the consent.

A is correct. There is no reason to assume from the question that we have to use application permissions or access another user's calendar. To access your own calendar in an interactive app, we can use delegated permission scope dynamically. Use delegated Calendars.Read: https://docs.microsoft.com/en-us/graph/permissions-reference#calendars-permissions "... you can specify the scopes your app needs at any time by including the new scopes in the scope parameter when requesting an access token - without the need to pre-define them in the application registration information. If the user hasn't yet consented to new scopes added to the request, they'll be prompted to consent only to the new permissions. Incremental, or dynamic consent, only applies to delegated permissions and not to application permissions." https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#incremental-and-dynamic-user-consent

No: A third-party app can request these permissions from users and administrators, who must approve the request before the app can access data or act on a user's behalf.

I cannot find any context means which is an Application permission app

Calendars.read can be requested dynamically so answer should be A.

We can use dynamic permissions