nerdexam
Microsoft

SC-300 · Question #417

Drag and Drop Question You have a Microsoft Entra tenant. You need to implement protected actions. Which three actions should you perform in sequence? To answer, move the appropriate actions from…

The correct answer is Create an authentication context.; Create a Conditional Access policy.; Add the protected actions. Implementing protected actions in Microsoft Entra ID requires three specific steps in sequence: First, create an authentication context (which defines a higher assurance level requirement), then create a Conditional Access policy that targets that authentication context…

Submitted by kwame.gh· Mar 6, 2026Implement and manage identity and access in Microsoft Entra ID - specifically configuring protected actions to enforce step-up authentication for sensitive operations (Microsoft SC-300 / AZ-104 Identity domain)

Question

Drag and Drop Question You have a Microsoft Entra tenant. You need to implement protected actions. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select. Answer:

Answer Area

Drag items

Create a custom Microsoft Entra role.Create an access package.Create a Conditional Access policy.Create an authentication strength.Add the protected actions.Create an authentication context.

Correct arrangement

  • Create an authentication context.
  • Create a Conditional Access policy.
  • Add the protected actions.

Explanation

Implementing protected actions in Microsoft Entra ID requires three specific steps in sequence: First, create an authentication context (which defines a higher assurance level requirement), then create a Conditional Access policy that targets that authentication context (enforcing step-up authentication like MFA or compliant device), and finally add the protected actions by associating specific sensitive permissions (such as deleting a tenant or modifying Conditional Access policies) with that authentication context. This workflow ensures that when a user attempts to perform a protected action, they are challenged with additional authentication requirements before proceeding.

Topics

#Microsoft Entra ID#Protected Actions#Conditional Access#Authentication Context

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SC-300 Practice