SC-300 Exam Questions
433 real SC-300 exam questions with expert-verified answers and explanations. Page 3 of 9.
- Question #104Implement identity management solution
Your company is currently reviewing all of its operating procedures and looking for ways to optimize efficiencies. One area of concern is the amount of time that Help Desk Administ...
Self Service Password ResetSSPRHelp Desk OptimizationUser Identity Management - Question #105Manage Azure Active Directory (Azure AD) identities and authentication - specifically configuring and monitoring Multi-Factor Authentication (MFA) policies and understanding MFA status states (Disabled, Enabled, Enforced)
You create the Azure Active Directory (Azure AD) users shown in the following table. On February 1, 2021, you configure the multi-factor authentication (MFA) settings as shown in t...
Azure AD MFAMulti-Factor Authentication StatusRemember MFA on Trusted DevicesIdentity Management - Question #106Implement and manage user identities
Your company has two divisions named Contoso East and Contoso West. The Microsoft 365 identity architecture tor both divisions is shown in the following exhibit. You need to assign...
B2B collaborationguest userscross-tenant accessSharePoint Online - Question #107Implement authentication and access management solution
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Azure AD alertsAzure MonitorRBACNotification management - Question #108Implement authentication and access management
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Azure Monitorsign-in logsalert rulesactivity logs - Question #109Implement authentication and access management solution
Due to a recent company acquisition, you have inherited a new Azure tenant with 1 subscription associated that you have the manage. The security has been neglected and you are look...
Security DefaultsMulti-factor authentication (MFA)Legacy authenticationAzure AD security - Question #110Implement and manage user identities
assigned a default domain of whizlabs.onmicorosft.com. You want to use your own custom domain of whizlabs.com. You added the custom domain via the Azure portal and now you have to...
Custom DomainsDomain VerificationDNS RecordsAzure Active Directory - Question #111Implement authentication and access management
You are looking to improve your organizations security posture after hearing about breaches and hacks of other organizations on the news. You have been looking into Azure Identity...
Azure Identity ProtectionAzure AD Built-in RolesPrinciple of Least PrivilegeAccess Control - Question #112Implement and manage user identities
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains a user named User1. An administrator deletes User1. You need to identify the following: - How ma...
deleted usersuser restore30-day recoveryUser administrator role - Question #113Implement and manage hybrid identity - specifically configuring Azure AD Connect high availability using staging mode for failover readiness (Microsoft Identity and Access Administrator / AZ-104 / SC-300)
Drag and Drop Question Your network contains an Active Directory forest named contoso.com that is linked to an Azure Active Directory (Azure AD) tenant named contoso.com by using A...
Azure AD ConnectHybrid IdentityStaging ModeDirectory Synchronization - Question #114Implement and manage user identities
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. For which users can you configure the Job title property...
user propertiessynced userscloud-only usersUsage location - Question #115Implement identity management solution
will be in charge of Azure AD Support issues. This new employee needs the ability to reset the passwords for all types of users when requested, including users with the user admin,...
Azure AD RolesPassword ResetLeast PrivilegeAdministrative Roles - Question #116Implement access management for apps
Your organization is considering allowing employees to work remotely and to use their own devices to access many of the organizations resources. However, to help protect against po...
Conditional AccessApplication ControlBYODData Loss Prevention - Question #117Implement authentication and access management
Your organization is looking to tighten its security posture when it comes to Azure AD users passwords. There has been reports on local news recently of various organizations havin...
Azure AD Password ProtectionPassword PoliciesIdentity SecurityWeak Password Prevention - Question #118Implement access management for apps
You have hired a new Azure Engineer that will be responsible for managing all aspects of enterprise applications and app registrations. This engineer will not need to manage anythi...
Azure AD RolesLeast PrivilegeApplication RegistrationsEnterprise Applications - Question #119Implement authentication and access management solution
You have a Microsoft 365 tenant. You currently allow email clients that use Basic authentication to conned to Microsoft Exchange Online. You need to ensure that users can connect t...
Modern AuthenticationLegacy AuthenticationExchange OnlineEndpoint Manager - Question #120Implement authentication and access management
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Azure Monitorsign-in logsalert rulesactivity logs - Question #121Plan and implement identity governance
You have a Microsoft 365 subscription that contains the following: An Azure Active Directory (Azure AD) tenant that has an Azure Active Directory Premium P2 license A Microsoft Sha...
entitlement managementaccess packagescatalogidentity governance - Question #122Implement authentication and access management
You have an Azure subscription that contains the custom roles shown in the following table. You need to create a custom Azure subscription role named Role3 by using the Azure porta...
custom rolesRBACrole cloningAzure subscription roles - Question #123Implement access management for apps
Your organization is a 100% Azure cloud based organization with no on-premise resources. You recently completed an acquisition of another company that is 100% on-premise with no cl...
Azure AD Application ProxyOn-premise application accessHybrid accessSecure remote access - Question #124Plan and implement identity governance
Your organization is working with a new consulting firm to help with the design, development, and deployment of a new IT service. The consultants will be joining your organization...
Azure AD Entitlement ManagementIdentity GovernanceAccess ManagementExternal Access - Question #125Implement and manage Azure AD application registrations and configure API permissions for service applications - typically mapped to 'Implement Identities' or 'Manage Application Access' in AZ-104/AZ-204/MS-500 certification domains.
Drag and Drop Question Your company has an Azure Active Directory (Azure AD) tenant named contoso.com. The company is developing a web service named App1. You need to ensure that A...
Azure Active DirectoryMicrosoft Graph APIApp RegistrationAdmin Consent - Question #126Implement authentication and access management
Hotspot Question You have a Microsoft 36S tenant. You create a named location named HighRiskCountries that contains a list of high-risk countries. You need to limit the amount of t...
Conditional Accessnamed locationssign-in frequencysession controls - Question #127Implement and manage user identities
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that has multi-factor authentication (MFA) enabled. The account lockout settings are configured as shown in th...
Azure ADAccount Lockout PolicyMFA SecurityAuthentication Configuration - Question #128Implement authentication and access management
You have a Microsoft 365 tenant. All users have mobile phones and laptops. The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivit...
MFAMicrosoft Authenticatoroffline authenticationverification code - Question #129Manage Azure Active Directory identities and devices - specifically device registration, device limits, local administrator configuration, and MFA policies for Azure AD joined/registered devices (AZ-104 / SC-300)
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that has an Azure Active Directory Premium Plan 2 license. The tenant contains the users shown in the followin...
Azure AD Device SettingsDevice Join LimitsLocal Administrator RightsMulti-Factor Authentication - Question #130Implement authentication and access management
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Azure Monitorsign-in logsalert rulesactivity logs - Question #131Implement authentication and access management
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Azure Monitorsign-in logsalert rulesactivity logs - Question #132Manage Microsoft 365 identity, compliance, and device services using the appropriate administrative portals - aligning to the MS-102 (Microsoft 365 Administrator) or MS-900 exam objectives covering administration tool selection and portal navigation.
Drag and Drop Question You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3. You need to configure the users as shown in the following t...
Microsoft 365 Admin PortalsAzure Active DirectoryEndpoint ManagementCompliance and Governance - Question #133Implement authentication and access management
You have an Active Directory forest that syncs to an Azure Active Directory (Azure AD) tenant. The tenant uses pass-through authentication. A corporate security policy states the f...
pass-through authenticationPTA agenthigh availabilityAzure AD Connect - Question #134Implement and manage user identities
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains an Azure AD enterprise application named App1. A contractor uses the credentials of user1@outlo...
B2B collaborationguest invitationexternal usersNew-AzureADMSInvitation - Question #135Implement and manage user identities
You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users. From the Groups blade in the Azure Active Director...
license managementgroup-based licensingPowerShell cmdletsuser administration - Question #136Implement identity management solution
Hotspot Question You have an Azure Active Directory (Azure AD) tenant and an Azure web app named App1. You need to provide guest users with self-service sign-up for App1. The solut...
self-service sign-upidentity provideruser flowsexternal identities - Question #137Implement and manage user identities
You have an Azure Active Directory (Azure AD) Azure AD tenant. You need to bulk create 25 new user accounts by uploading a template file. Which properties are required in the templ...
bulk user creationCSV templateuser propertiesAzure AD users - Question #138Implement authentication and access management
Hotspot Question A user named User1 attempts to sign in to the tenant by entering the following incorrect passwords: Pa55w0rd12 Pa55w0rd12 Pa55w0rd12 Pa55w.rd12 Pa55w.rd123 Pa55w.r...
smart lockoutSSPRlockout durationpassword protection - Question #139Implement access management for apps
You have an Azure Active Directory (Azure AD) tenant that contains cloud-based enterprise apps. You need to group related apps into categories in the My Apps portal. What should yo...
My Apps portalcollectionsapp organizationenterprise apps - Question #140Implement and manage user identities
You have an Azure Active Directory Premium P2 tenant. You create a Log Analytics workspace. You need to ensure that you can view Azure Active Directory (Azure AD) audit log informa...
Azure MonitorLog Analyticsdiagnostic settingsaudit logs - Question #141Manage Azure Active Directory identities and governance - specifically configuring and managing Privileged Identity Management (PIM) for role activation policies, approval workflows, and MFA requirements (AZ-104 / SC-300 Identity Management Domain)
Hotspot Question You have an Azure Active Directory (Azure AD) tenant contains the users shown in the following table. In Azure AD Privileged Identity Management (PIM), you configu...
Azure AD Privileged Identity ManagementPIM Role SettingsAzure MFARole Assignment Management - Question #146Implement authentication and access management
You need to resolve the issue of the sales department users. What should you configure for the Microsoft Entra tenant?
device settingsAzure AD joindevice registrationConditional Access - Question #147Manage identity and access - specifically implementing and managing Azure AD Identity Governance features and assigning appropriate administrative roles using least privilege principles (Microsoft SC-300 / MS-102 certification domains).
Drag and Drop Question You have a Microsoft 365 E5 subscription that contains two users named User1 and User2. You need to ensure that User1 can create access reviews for groups, a...
Azure AD Identity GovernanceAccess ReviewsRole-Based Access ControlPrinciple of Least Privilege - Question #148Implement and manage user identities
Hotspot Question You have a Microsoft 365 tenant that has 5,000 users. One hundred of the users are executives. The executives have a dedicated support team. You need to ensure tha...
administrative unitsdelegated administrationleast privilegeAuthentication administrator - Question #149Implement authentication and access management
You need to support the planned changes and meet the technical requirements for MFA. Which feature should you use, and how long before the users must complete the registration? To...
MFA registrationConditional Accessregistration enforcementAzure AD MFA - Question #150Plan and implement identity governance
You need to modify the settings of the User administrator role to meet the technical requirements. Which two actions should you perform for the role? Each correct answer presents p...
PIMrole activationeligible assignmentsprivileged identity management - Question #151Implement identity management solution
You need to resolve the issue of the guest user invitations. What should you do for the Azure AD tenant?
external collaborationB2Bguest userstenant settings - Question #152Plan and implement identity governance
You have an Azure Active Directory (Azure AD) tenant that: contains a user named User1. You need to ensure that User1 can create new catalogs and add1 resources to the catalogs the...
entitlement managementcatalogsidentity governanceresource access - Question #153Manage Azure Active Directory (Azure AD) identities and secure access - specifically configuring authentication methods and understanding the impact of Security Defaults on MFA registration options (AZ-104 / SC-300 Identity and Access Management)
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. User2 reports that he can only configure multi-factor au...
Azure AD Security DefaultsMulti-Factor Authentication (MFA)Azure AD Roles and PermissionsIdentity Management - Question #154Implement authentication and access management
You have an Azure Active Directory (Azure AD) tenant. You configure self-service password reset (SSPR) by using the following settings: - Require users to register when signing in:...
SSPRauthentication methodsmobile app codepassword reset - Question #155Implement authentication and access management
You have an Azure Active Directory (Azure AD) tenant that uses Azure AD Identity Protection and contains the resources shown in the following table. Azure Multi-factor Authenticati...
Identity Protectionuser riskcompromised accountforced password reset - Question #156Implement authentication and access management
Hotspot Question You have an Azure Active Directory (Azure AD) tenant: that contains the users shown in the following table. In Azure. AD Identity Protection, you configure a user...
Identity Protectionuser risk policysign-in risk policyanonymous IP - Question #157Implement authentication and access management
You have an Azure Active Directory (Azure AD) tenant. You configure self-service password reset (SSPR) by using the following settings: - Require users to register when signing in:...
SSPRauthentication methodsexternal emailpassword reset