Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location PL
Mob_nav_barsMENU

Microsoft Exam SC-300 Topic 1 Question 87 Discussion

Actual exam question for Microsoft's SC-300 exam
Question #: 87
Topic #: 1
[All SC-300 Questions]

You have a Microsoft 365 subscription.

You plan to deploy an app named App1 that will have the following configurations:

* Will be registered in Microsoft Entra

* Will run as a service without user interaction

* Will collect audit logs associated with user sign-ins

* Will access resources by using the Microsoft Graph API

You need to ensure that App1 can access Microsoft Graph.

What should you use?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Nobuko at Apr 14, 2024, 08:30 AM

Limited Time Offer

25%

Off

Get Premium SC-300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Scarlet
10 months ago
Custom RBAC roles can be tailored to specific needs, but application permissions seem more fitting for App1.
upvoted 0 times
...
Raylene
10 months ago
I believe a custom role-based access control (RBAC) role would be the best choice for App1 in this case.
upvoted 0 times
...
Ernestine
10 months ago
Delegated permissions require user interaction, so they may not be suitable for App1.
upvoted 0 times
...
Rhea
10 months ago
Would delegated permissions work as well for this scenario?
upvoted 0 times
...
Scarlet
11 months ago
I agree with User1, application permissions will allow App1 to access resources without user interaction.
upvoted 0 times
...
Ernestine
11 months ago
I think we should use application permissions for App1 to access Microsoft Graph.
upvoted 0 times
...
Lindsey
11 months ago
I think it could also be C) a custom role-based access control (RBAC) role, as it allows you to define specific permissions.
upvoted 0 times
...
Penney
11 months ago
I agree with Paola, A) application permissions makes sense because the app needs access without user interaction.
upvoted 0 times
...
Brynn
11 months ago
I disagree, I believe it is B) delegated permissions.
upvoted 0 times
...
Paola
1 years ago
I think the answer is A) application permissions.
upvoted 0 times
...
Edwin
1 years ago
Hold up, everyone. I think Daniel might be onto something. What if we could use a built-in RBAC role instead of setting up application permissions? That seems like it could be a more straightforward solution. But, you know, I'm not the Microsoft expert here, so I'll defer to the rest of you.
upvoted 0 times
Mitzie
1 years ago
Let's go with a built-in RBAC role for App1 to access Microsoft Graph API.
upvoted 0 times
...
Mi
1 years ago
Yeah, I agree. It seems like a simpler solution than setting up application permissions.
upvoted 0 times
...
Goldie
1 years ago
I think using a built-in RBAC role could work well for this scenario.
upvoted 0 times
...
Gracie
1 years ago
D) a built-in role-based access control (RBAC) role
upvoted 0 times
...
Jestine
1 years ago
C) a custom role-based access control (RBAC) role
upvoted 0 times
...
Amie
1 years ago
B) delegated permissions
upvoted 0 times
...
Gerald
1 years ago
A) application permissions
upvoted 0 times
...
...
Tomas
1 years ago
Exactly. Keep it simple, right? Although, I do wonder if there's some kind of trick here, you know? Like, maybe they're trying to get us to overthink it or something.
upvoted 0 times
...
Laurel
1 years ago
I was thinking the same thing. No need to complicate it with custom RBAC roles or built-in roles. Just application permissions should do the trick.
upvoted 0 times
...
Rasheeda
1 years ago
You know, this question is making my head spin. All this talk about permissions and roles is giving me a headache. Can we just skip this one and move on to the easy questions? I need a break from all this Microsoft jargon.
upvoted 0 times
...
Bulah
1 years ago
Yeah, I agree. Application permissions make the most sense here since the app doesn't need to act on behalf of a specific user. It's just going to be collecting audit logs and accessing resources directly.
upvoted 0 times
...
Lonna
1 years ago
Hmm, this seems like a straightforward question about permissions in a Microsoft 365 environment. Since the app will be running without user interaction and accessing the Microsoft Graph API, I think we'll want to use application permissions rather than delegated permissions.
upvoted 0 times
...
Sage
1 years ago
I think Tamra and 2 have the right idea. Application permissions are the way to go here. I mean, who wants to deal with all the hassle of setting up custom RBAC roles, am I right? Keep it simple, folks!
upvoted 0 times
...
Daniel
1 years ago
Hmm, I'm not so sure. What if we used a built-in RBAC role instead? That might be a simpler solution than setting up application permissions. Although, I guess the question is specifically asking about how to access Microsoft Graph, so application permissions are probably the way to go.
upvoted 0 times
Emerson
11 months ago
I agree, application permissions are necessary for accessing Microsoft Graph.
upvoted 0 times
...
Krystal
12 months ago
I think we should use application permissions to access Microsoft Graph.
upvoted 0 times
...
...
Nikita
1 years ago
I agree with Tamra. Application permissions are the right choice here since the app is running without user interaction. The other options, like custom or built-in RBAC roles, don't seem to fit the requirements of the app.
upvoted 0 times
...
Tamra
1 years ago
This is a tricky question. The app is running as a service without user interaction, so I think we'll need to use application permissions, not delegated permissions. The question is specifically asking how to ensure the app can access Microsoft Graph, and application permissions are the way to go for that scenario.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77