Microsoft
SC-300 · Question #433
Hotspot Question You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Entra tenant that contains an app registration named App1. App1 has Microsoft Graph applica
Sign in or unlock SC-300 to reveal the answer and full explanation for question #433. The question stem and answer options stay visible for context.
Submitted by yuki_2020· Mar 6, 2026Plan and implement workload identities
Question
Hotspot Question You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Entra tenant that contains an app registration named App1. App1 has Microsoft Graph application permissions. You need to configure the environment to support App1. The solution must meet the following requirements: - App1 must be accessible only from the corporate network. - The credentials for App1 must NOT be stored as plain text. - Non-interactive scheduled tasks on Server1 must be able to authenticate to App1. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:
Answer Area
- In the tenant configure:An authentication methodA Conditional Access policyA Microsoft Entra application proxyA permission classification
- Configure scheduled tasks on Server1 to authenticate by using a:CertificateClient secretSystem-assigned managed identityUser-assigned managed identity
Unlock SC-300 to see the answer
You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Conditional Access policy#workload identity#certificate authentication#corporate network restriction