Microsoft Exam SC-300 Topic 1 Question 87 Discussion

Actual exam question for Microsoft's SC-300 exam

Question #: 87
Topic #: 1

[All SC-300 Questions]

You have a Microsoft 365 subscription.

You plan to deploy an app named App1 that will have the following configurations:

* Will be registered in Microsoft Entra

* Will run as a service without user interaction

* Will collect audit logs associated with user sign-ins

* Will access resources by using the Microsoft Graph API

You need to ensure that App1 can access Microsoft Graph.

What should you use?

Aapplication permissions

Bdelegated permissions

Ca custom role-based access control (RBAC) role

Da built-in role-based access control (RBAC) role

Show Suggested Answer

Suggested Answer: B

by Nobuko at Apr 14, 2024, 08:30 AM

Limited Time Offer

25%

Off

Get Premium SC-300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Edwin

6 days ago

Hold up, everyone. I think Daniel might be onto something. What if we could use a built-in RBAC role instead of setting up application permissions? That seems like it could be a more straightforward solution. But, you know, I'm not the Microsoft expert here, so I'll defer to the rest of you.

upvoted 0 times

...

Tomas

6 days ago

Exactly. Keep it simple, right? Although, I do wonder if there's some kind of trick here, you know? Like, maybe they're trying to get us to overthink it or something.

upvoted 0 times

...

Laurel

7 days ago

I was thinking the same thing. No need to complicate it with custom RBAC roles or built-in roles. Just application permissions should do the trick.

upvoted 0 times

...

Rasheeda

8 days ago

You know, this question is making my head spin. All this talk about permissions and roles is giving me a headache. Can we just skip this one and move on to the easy questions? I need a break from all this Microsoft jargon.

upvoted 0 times

...

Bulah

8 days ago

Yeah, I agree. Application permissions make the most sense here since the app doesn't need to act on behalf of a specific user. It's just going to be collecting audit logs and accessing resources directly.

upvoted 0 times

...

Lonna

9 days ago

Hmm, this seems like a straightforward question about permissions in a Microsoft 365 environment. Since the app will be running without user interaction and accessing the Microsoft Graph API, I think we'll want to use application permissions rather than delegated permissions.

upvoted 0 times

...

Sage

9 days ago

I think Tamra and 2 have the right idea. Application permissions are the way to go here. I mean, who wants to deal with all the hassle of setting up custom RBAC roles, am I right? Keep it simple, folks!

upvoted 0 times

...

Daniel

10 days ago

Hmm, I'm not so sure. What if we used a built-in RBAC role instead? That might be a simpler solution than setting up application permissions. Although, I guess the question is specifically asking about how to access Microsoft Graph, so application permissions are probably the way to go.

upvoted 0 times

...

Nikita

12 days ago

I agree with Tamra. Application permissions are the right choice here since the app is running without user interaction. The other options, like custom or built-in RBAC roles, don't seem to fit the requirements of the app.

upvoted 0 times

...

Tamra

14 days ago

This is a tricky question. The app is running as a service without user interaction, so I think we'll need to use application permissions, not delegated permissions. The question is specifically asking how to ensure the app can access Microsoft Graph, and application permissions are the way to go for that scenario.

upvoted 0 times

...