Microsoft SC-300 Exam Dumps

Microsoft Identity and Access Administrator

Microsoft SC-300 Sample Questions

Question # 1

Task 8You need to prevent all users from using legacy authentication protocols whenauthenticating to Microsoft Entra ID.

Show Answer

Question # 2

Task 5You need to assign a Windows 10/11 Enterprise E3 license to the Sg-Retail group.

Show Answer

Question # 3

Task 7You need to lock out accounts for five minutes when they have 10 failed sign-in attempts.

Show Answer

Question # 4

Task 1You need to deploy multi factor authentication (MFA). The solution must meet the followingrequirements:• Require MFA registration only for members of the Sg-Finance group.• Exclude Debra Berger from having to register for MFA.• Implement the solution without using a Conditional Access policy.

Show Answer

Question # 5

Task 6You need to implement additional security checks before the members of the Sg-Executivecan access any company apps. The members must meet one of the following conditions:• Connect by using a device that is marked as compliant by Microsoft Intune.• Connect by using client apps that are protected by app protection policies.

Show Answer

Question # 6

Task 2You need to implement a process to review guest users who have access to the Salesforceapp. The review must meet the following requirements:• The reviews must occur monthly.• The manager of each guest user must review the access.• If the reviews are NOT completed within five days, access must be removed.• If the guest user does not have a manager, Megan Bowen must review the access.

Show Answer

Question # 7

Task 10You need to create a group named Audit. The solution must ensure that the members ofAudit can activate the Security Reader role.

Show Answer

Question # 8

You need to ensure that all users can consent to apps that require permission to read theiruser profile. Users must be prevented from consenting to apps that require any otherpermissions.

Show Answer

Question # 9

Task 9You need to ensure that when users in the Sg-Operations group go to the My Apps portal atab named Operations appears that contains only the following applications:• Unkedln• Box

Show Answer

Question # 10

You need to add the Linkedln application as a resource to the Sales and Marketing accesspackage. The solution must NOT remove any other resources from the access package.

Show Answer

Question # 11

Your network contains an on-premises Active Directory domain that syncs to an Azure ADtenant.Users sign in to computers that run Windows 10 and are joined to the domain.You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).You need to configure the Windows 10 computers to support Azure AD Seamless SSO.What should you do?

A. Modify the Local intranet zone settings 
B. Configure Sign-in options from the Settings app. 
C. Enable Enterprise State Roaming. 
D. Install the Azure AD Connect Authentication Agent. 

Show Answer

Question # 12

You use Azure Monitor to analyze Azure Active Directory (Azure AD) activity logs.Yon receive more than 100 email alerts each day for tailed Azure Al) user sign-in attempts.You need to ensure that a new security administrator receives the alerts instead of you.Solution: From Azure AD, you create an assignment for the Insights at administrator role.Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 13

You have a Microsoft 36S subscription. The subscription contains users that use MicrosoftOutlook 2016 and Outlook 2013 clients. You need to implement tenant restrictions. Thesolution must minimize administrative effort. What should you do first?

A. Upgrade the Outlook 2013 clients to Outlook 2016. 
B. Configure the Outlook 2013 clients to use modem authentication. 
C. Upgrade all the Outlook clients to Outlook 2019. 
D. From the Exchange admin center, configure Organization Sharing. 

Show Answer

Question # 14

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online sitenamed Site!. Site! hosts PDF filesYou need to prevent users from printing the files directly from Sitel.Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

A. activity policy 
B. file policy 
C. access policy 
D. session policy 

Show Answer

Question # 15

You have an Azure subscription that contains a virtual machine named VM1 and an Azurekey vault named Vault1. VM1 has a system-assigned managed identity. You need toensure that VM1 can retrieve the values of secrets stored in Vault 1. The solution mustminimize administrative effort. What should you do first?

A. Configure the Resource access settings for Vault1. 
B. Configure the permissions model for Vault1 
C. Add a user-assigned managed identity to VM1. 
D. Assign an Azure role to VM1. 

Show Answer

Question # 16

You have an Azure Active Directory (Azure AD) tenant named contoso.com that containsan Azure ADenterprise application named App1.A contractor uses the credentials of [email protected] need to ensure that you can provide the contractor with access to App1. Thecontractor must be able toauthenticate as [email protected] should you do?

A. Run the New-AzADUser cmdlet.  
B. Configure the External collaboration settings. 
C. Add a WS-Fed identity provider. 
D. Create a guest user account in contoso.com.

Show Answer

Question # 17

You have a Microsoft 365 tenant.All users must use the Microsoft Authenticator app for multi-factor authentication (MFA)when accessing Microsoft 365 services.Some users report that they received an MFA prompt on their Microsoft Authenticator appwithout initiating a sign-in request.You need to block the users automatically when they report an MFA request that they didnot Initiate.Solution: From the Azure portal, you configure the Block/unblock users settings for multifactor authentication (MFA).Does this meet the goal?

A. Yes 
B. No

Show Answer

Question # 18

You have a Microsoft 365 tenant.In Azure Active Directory (Azure AD), you configure the terms of use.You need to ensure that only users who accept the terms of use can access the resourcesin the tenant. Otherusers must be denied access.What should you configure?

A. an access policy in Microsoft Cloud App Security.
B. Terms and conditions in Microsoft Endpoint Manager.
C. a conditional access policy in Azure AD 
D. a compliance policy in Microsoft Endpoint Manager 

Show Answer

Question # 19

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it. As a result,these questions will not appear in the review screen.You have a Microsoft 365 tenant.All users must use the Microsoft Authenticator app for multi-factor authentication (MFA)when accessing Microsoft 365 services.Some users report that they received an MFA prompt on their Microsoft Authenticator appwithout initiating a sign-in request.You need to block the users automatically when they report an MFA request that they didnot initiate.Solution: From the Microsoft Entra admin center, you configure the Notifications settings formulti-factor authentication (MFA).Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 20

Your company has a Microsoft Entra tenant that contains a user named User 1. The company has two departments named marketing and finance. You need to grant permissions to User1 to manage only the users in the marketing department. What should you create first?

A. an administrative unit 
B. a Microsoft 365 group 
C. a management group 
D. a resource group

Show Answer

Question # 21

You have a Microsoft Entra tenant.You need to configure continuous access evaluation for app sign-ins and assign theconfiguration to users that are assigned the Application Administrator role.What should you configure?

A. a Conditional Access policy 
B. the Admin consent settings 
C. a sign-in risk policy 
D. an access review 

Show Answer

Question # 22

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps andConditional Access policies. You need to block access to cloud apps when a user isassessed as high risk.Which type of policy should you create in the Microsoft Defender for Cloud Apps?

A. OAuth app policy 
B. anomaly detection polio 
C. access policy 
D. activity policy 

Show Answer

Question # 23

You create a new Microsoft 365 E5 tenant.You need to ensure that when users connect to the Microsoft 365 portal from ananonymous IP address, they are prompted to use multi-factor authentication (MFA).What should you configure?

A. a sign-in risk policy 
B. a user risk policy 
C. an MFA registration policy 

Show Answer

Question # 24

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.You need to identify which users access Facebook from their devices and browsers. Thesolution must minimize administrative effort.What should you do first?

A. From the Microsoft Defender for Cloud Apps portal, unsanctioned Facebook. 
B. Create an app configuration policy in Microsoft Endpoint Manager. 
C. Create a Defender for Cloud Apps access policy. 
D. Create a Conditional Access policy. 

Show Answer

Question # 25

Your company has a Microsoft 365 tenant.The company has a call center that contains 300 users. In the call center, the users share desktop computersand might use a different computer every day. The call center computers are NOTconfigured for biometricidentification.The users are prohibited from having a mobile phone in the call center.You need to require multi-factor authentication (MFA) for the call center users when theyaccess Microsoft 365services.What should you include in the solution?

A. a named network location 
B. the Microsoft Authenticator app 
C. Windows Hello for Business authentication 
D. FIDO2 tokens 

Show Answer

Question # 26

You have a Microsoft 365 tenant.You have an Active Directory domain that syncs to the Azure Active Directory {Azure AD)tenant.Users connect to the internet by using a hardware firewall at your company. The usersauthenticate to the firewall by using their Active Directory credentials.You plan to manage access to external applications by using Azure AD.You need to use the firewall logs to create a list of unmanaged external applications andthe users who access them.What should you use to gather the information?

A. Cloud App Discovery in Microsoft Defender for Cloud Apps 
B. enterprise applications in Azure AD 
C. access reviews in Azure AD 
D. Application Insights in Azure Monitor 

Show Answer