- (Exam Topic 2)
You are developing in application named App1.
App1 needs to use the Microsoft Graph API to retrieve emails from Microsoft 365 for the current signed-in user. The solution must meet the following requirements:
Emails that have attachments and are from bill@contoso.com must be retrieved.
The results must show the subject of the email, the sender address, and the count of emails retrieved.
How should you complete the URI to retrieve the results? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Solution:
Box 1: $count
Use $count as a query parameter to include a count of the total number of items in a collection alongside the page of data values returned from the Graph, as in the following example:
GET https://graph.microsoft.com/v1.0/me/contacts?$count=true Box 2: $select
To specify a different set of properties to return than the default set provided by the Graph, use the $select query option. The $select option allows for choosing a subset or superset of the default set returned.
Box 3: $filter
To filter the response data based on a set of criteria, use the $filter query option.
The following example returns messages that have the address field of the from property equal to "jon@contoso.com".
The from property is of the complex type emailAddress.
GET https://graph.microsoft.com/v1.0/me/messages?$filter=from/emailAddress/address eq 'jon@contoso.com' Reference: https://developer.microsoft.com/en-us/graph/docs/overview/query_parameters

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 1)
You need to complete the MSAL.js code for SSO. Which code segment should you insert at line 06?

1. A. storeAuthStateInCookie: false
2. B. storeAuthStateInCookie: true
3. C. cacheLocation: ‘localStorage’
4. D. cacheLocation: ‘sessionStorage’

Correct Answer: C
Scenario: Implement single sign-on (SSO) and minimize login prompts across browser tabs.
When your application is open in multiple tabs and you first sign in the user on one tab, the user is also signed in on the other tabs without being prompted. MSAL.js caches the ID token for the user in the browser localStorage and will sign the user in to the application on the other open tabs.
By default, MSAL.js uses sessionStorage which does not allow the session to be shared between tabs. To get SSO between tabs, make sure to set the cacheLocation in MSAL.js to localStorage.
Reference: https://docs.microsoft.com/bs-latn-ba/Azure/active-directory/develop/msal-js-sso

- (Exam Topic 2)
What is the default permission scope when you request an access token by using MSGraphClient?

1. A. User.Read
2. B. People.Read.All
3. C. People.Read
4. D. User.Read.All

Correct Answer: D
By default, the service principal has no explicit permissions granted to access the Microsoft Graph. However, if you request an access token for the Microsoft Graph, you get a token with the user_impersonation permission
scope that can be used for reading information about the users (that is, User.Read.All). Reference: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/use-msgraph

- (Exam Topic 2)
You have an application that uses the Microsoft Graph API.
You need to configure the application to retrieve the groups to which the current signed-in user belongs. The results must contain the extended priorities of the groups.
Which URI should you use?

1. A. https://graph.microsoft.com/v1.0/me/getMemberObjects
2. B. https://graph.microsoft.com/v1.0/me/getMemberGroups
3. C. https://graph.microsoft.com/v1.0/me/memberOf
4. D. https://graph.microsoft.com/v1.0/me/checkMemberGroups

Correct Answer: B
Get member groups returns all the groups that the specified user, group, or directory object is a member of. This function is transitive.
Reference: https://docs.microsoft.com/en-us/graph/api/directoryobject-getmembergroups