SC-300 Certification Practice Question #278

Question

You need to configure app registration in Azure AD to meet the delegation requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

Row 1 is unambiguous: the delegation requirement is to prevent nonprivileged users from registering applications, and the tenant-level setting you modify (to No) is "Users can register applications" — JimboJones99's highly-voted point clarifies the dropdown lists the setting name, not its value. Row 2 is genuinely contested. The given answer and the top community comments choose Application Developer because MS Learn explicitly names it as the least-privilege role that restores app-registration ability once the global switch is set to No. However, a sizeable, well-reasoned minority points out the case study wording "create enterprise applications," for which MS Learn's delegate-by-task guidance lists Cloud Application Administrator as least privilege — Application Developer only covers application registrations. Because the official/most-voted answer (Application Developer) is supported by the directly relevant delegate-app-roles documentation while the dissent hinges on the "enterprise" wording, I weight toward Application Developer but lower confidence to reflect the legitimate split.

More SC-300 practice questions