Configuring App Registration Permission Scopes

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Microsoft Entra Application Access and Managed Identities

What you'll be asked

  1. Which type of permission in Microsoft Entra ID requires an administrator to grant consent on behalf of the entire organization?
  2. An application needs to read a user's calendar only when the user is actively logged into the app. Which permission type should you configure?
  3. You have configured an App Registration with the 'User.Read' delegated permission. Why might a user still receive an 'Access Denied' error when attempting to sign in?
  4. What is the primary benefit of using a Managed Identity for an Azure-hosted application instead of a Client Secret?
  5. You are debugging an application using a System-Assigned Managed Identity that is failing to access a Key Vault. You have verified the Managed Identity exists. What is the most likely missing configuration?

Answers and explanations come after you submit.