SC-300 Entra ID App Registrations Quiz

1. In an enterprise app, what is the purpose of assigning users or groups?

To control who can access the application

To automatically delete inactive users

To restrict all admin permissions

To enable passwordless sign-in globally

2. Which permission type allows an application to act on its own behalf without user interaction?

Delegated Permissions

User Consent Permissions

Application Permissions

Interactive Permissions

3. In Entra ID, what is the significance of the Application Manifest?

It is a JSON file that defines the app's configuration and properties

It is a list of all users who have accessed the app

It is a security audit log for compliance

It is automatically generated by the application itself

4. What is the purpose of API Permissions in an app registration?

To define which Microsoft APIs or resources the app can access

To block all external API calls

To automatically grant all permissions to all users

To encrypt API responses

5. How do you configure Conditional Access policies for an enterprise application?

In the app's Properties section only

In Entra ID > Security > Conditional Access, then assign cloud apps

By modifying the application manifest directly

Through the app's internal settings menu

6. What does Single Sign-On (SSO) enable in the context of enterprise applications?

Users authenticate once and gain access to multiple applications without re-entering credentials

Only administrators can access enterprise applications

All users must authenticate separately for each application

Applications share a common database of user passwords

7. In Entra ID, what is the maximum lifetime for an Access Token by default?

15 minutes

1 hour

24 hours

7 days

8. What is the role of a Refresh Token in OAuth 2.0 flows?

To temporarily store user credentials

To obtain new Access Tokens without requiring the user to re-authenticate

To encrypt all API communications

To grant permanent administrative access

9. How does PKCE (Proof Key for Code Exchange) enhance security in public clients?

It encrypts all network traffic

It prevents authorization code interception attacks by using a code challenge

It eliminates the need for client secrets

It enforces multi-factor authentication automatically

10. What is a Managed Identity in Entra ID?

A user-created service account for manual credential management

An automatically managed identity for Azure resources to authenticate without storing credentials

A shared password used by multiple applications

A legacy authentication method for on-premises services

11. What is the primary purpose of registering an application in Entra ID?

To enable the app to authenticate users and access protected resources

To automatically grant admin consent to all users

To bypass multi-factor authentication requirements

To create local user accounts in your organization

12. What does the Tenant ID represent in Entra ID?

The unique identifier for your Entra ID directory

The user's subscription ID

The application's version number

The resource group where the app is deployed

13. Which redirect URI format is required for a web application registered in Entra ID?

Http://localhost:3000 (for development only)

Https://yourdomain.com/auth/callback (HTTPS required for production)

Any URI format is acceptable

URIs are optional for web apps

14. What is a Service Principal in Entra ID?

A user account with elevated privileges

An instance of an application in a specific tenant

A managed identity for Azure services only

A group of administrators managing Entra ID

15. How do you expose an API in Entra ID so other applications can consume it?

Register the app and configure Scopes in the Expose an API section

Add the app to a security group

Assign the app a Global Administrator role

Configure conditional access policies

16. What is admin consent in the context of Entra ID app permissions?

Permission granted by a user to access their personal data

Permission granted by an administrator on behalf of all users in the organization

A temporary token that expires after one session

Consent required only for Microsoft-owned applications

17. Which of the following is required to establish a secure connection between an app and Entra ID?

Application ID and Tenant ID only

Application ID, Tenant ID, and a client secret or certificate

Username and password credentials

Multi-factor authentication code

18. What is an Application ID (Client ID) in Entra ID?

A unique identifier assigned to a registered application

The user's personal identification number

A shared secret between the app and Entra ID

A role-based access control identifier

19. In Entra ID, what is the difference between Application Permissions and Delegated Permissions?

Application Permissions require user context; Delegated Permissions do not

Delegated Permissions require user context; Application Permissions do not

Application Permissions are only for web apps

Delegated Permissions are only for service principals

20. Which authentication flow is most appropriate for a native mobile application?

Client Credentials Flow

Authorization Code Flow with PKCE

Implicit Flow

Resource Owner Password Credentials Flow

SC-300 Entra ID App Registrations and Enterprise Apps Quiz