Exam MS-600 topic 3 question 9 discussion

Actual exam question from Microsoft's MS-600

Question #: 9
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).
Currently, App1 can read user profile information.
You need to allow App1 to read the user's calendar.
Solution: Add https://graph.windows.net/user.read to the list of scopes during the initial login request.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Microsoft Graph Calendars.Read allows the app to read events in user calendars.
For your app to access data in Microsoft Graph, the user or administrator must grant it the correct permissions via a consent process.
Application permissions are used by apps that run without a signed-in user present; for example, apps that run as background services or daemons. Application permissions can only be consented by an administrator.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent https://docs.microsoft.com/en-us/graph/permissions-reference

by Shaowei at Jan. 12, 2021, 2:42 a.m.

Comments

Submit Cancel

DJbraboz

9 months, 2 weeks ago

Shouldn't this be https://graph.microsoft.com?

upvoted 3 times

...

VaMa6

1 year, 3 months ago

User.Read will not allow to read the user's calendar. Permission should be Calendars.Read

upvoted 3 times

...

krzycherek

1 year, 7 months ago

Answer is correct: Read a user's calendar Write to a user's calendar Send mail as a user Because of these types of permission definitions, the resource has fine-grained control over its data and how API functionality is exposed. A third-party app can request these permissions from users and administrators, who must approve the request before the app can access data or act on a user's behalf.

upvoted 4 times

...

Shaowei

1 year, 10 months ago

what kind of app? demon app is No, SPA or Web app using delegate permission is yes

upvoted 1 times

...

Exam MS-600 All Questions

View all questions & answers for the MS-600 exam