New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft SC-300 Exam - Topic 1 Question 123 Discussion

Actual exam question for Microsoft's SC-300 exam
Question #: 123
Topic #: 1
[All SC-300 Questions]

You have an Azure Active Directory (Azure AD) tenant.

For the tenant. Users can register applications Is set to No.

A user named Admin1 must deploy a new cloud app named App1.

You need to ensure that Admin1 can register App1 in Azure AD. The solution must use the principle of least privilege.

Which role should you assign to Admin1?

Show Suggested Answer Hide Answer
Suggested Answer: A

https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-app-roles

Contribute your Thoughts:

0/2000 characters
Bobbie
3 days ago
D. Cloud application administrator is the best option to ensure Admin1 can register the new app.
upvoted 0 times
...
Jennie
8 days ago
A. Application developer in Azure AD is the way to go. Gives Admin1 the least privilege needed.
upvoted 0 times
...
Dortha
13 days ago
D. Cloud application administrator in Azure AD seems like the right choice to me.
upvoted 0 times
...
Asha
18 days ago
I feel like the Managed Application Contributor might be too broad for just registering an app. I think we should focus on Azure AD roles.
upvoted 0 times
...
Tomoko
23 days ago
I'm a bit confused because I thought the Application developer role would allow registration too. Is that not correct?
upvoted 0 times
...
Ivette
28 days ago
I remember practicing a similar question where we had to assign roles based on least privilege. Could it be the Cloud application administrator?
upvoted 0 times
...
Monte
1 month ago
I think the role we need to assign is related to application management, but I'm not entirely sure which one fits best.
upvoted 0 times
...
Florinda
1 month ago
This is a good one. I'm pretty confident the answer is D, since that role specifically deals with app registration in Azure AD, which is what the question is asking about. The other choices seem too broad or not directly relevant.
upvoted 0 times
...
Ernie
1 month ago
Alright, I think I've got it. The key is to give Admin1 the least amount of privilege needed to register the app. Based on the information provided, option D - Cloud application administrator in Azure AD - seems like the best choice to meet the requirements.
upvoted 0 times
...
Junita
2 months ago
I'm a bit confused here. The question mentions Azure AD and a cloud app, but the answer choices include some subscription-level roles. I'll need to make sure I understand the relationship between the tenant, the subscription, and the app registration process.
upvoted 0 times
...
Fernanda
2 months ago
Okay, let's see. The question says users can't register apps by default, so I'm guessing we need to give Admin1 some kind of app registration permission. I'm leaning towards option D, but I'll double-check the other choices just to be sure.
upvoted 0 times
...
Naomi
2 months ago
Hmm, this seems like a tricky one. I'll need to think carefully about the principle of least privilege and which role would give Admin1 the minimum permissions needed to register the app.
upvoted 0 times
...

Save Cancel