SC-300 Exam Questions
436 real SC-300 exam questions with expert-verified answers and explanations. Page 3 of 9.
- Question #104Implement identity management solution
Your company is currently reviewing all of its operating procedures and looking for ways to optimize efficiencies. One area of concern is the amount of time that Help Desk Administ...
Self Service Password ResetSSPRHelp Desk OptimizationUser Identity Management - Question #105Manage Azure Active Directory (Azure AD) identities and authentication - specifically configuring and monitoring Multi-Factor Authentication (MFA) policies and understanding MFA status states (Disabled, Enabled, Enforced)
You create the Azure Active Directory (Azure AD) users shown in the following table. On February 1, 2021, you configure the multi-factor authentication (MFA) settings as shown in t...
Azure AD MFAMulti-Factor Authentication StatusRemember MFA on Trusted DevicesIdentity Management - Question #106
Your company has two divisions named Contoso East and Contoso West. The Microsoft 365 identity architecture tor both divisions is shown in the following exhibit. You need to assign...
- Question #107Implement authentication and access management solution
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Azure AD alertsAzure MonitorRBACNotification management - Question #108
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
- Question #109Implement authentication and access management solution
Due to a recent company acquisition, you have inherited a new Azure tenant with 1 subscription associated that you have the manage. The security has been neglected and you are look...
Security DefaultsMulti-factor authentication (MFA)Legacy authenticationAzure AD security - Question #110Implement and manage user identities
assigned a default domain of whizlabs.onmicorosft.com. You want to use your own custom domain of whizlabs.com. You added the custom domain via the Azure portal and now you have to...
Custom DomainsDomain VerificationDNS RecordsAzure Active Directory - Question #111Implement authentication and access management
You are looking to improve your organizations security posture after hearing about breaches and hacks of other organizations on the news. You have been looking into Azure Identity...
Azure Identity ProtectionAzure AD Built-in RolesPrinciple of Least PrivilegeAccess Control - Question #112
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains a user named User1. An administrator deletes User1. You need to identify the following: - How ma...
- Question #113Implement and manage hybrid identity - specifically configuring Azure AD Connect high availability using staging mode for failover readiness (Microsoft Identity and Access Administrator / AZ-104 / SC-300)
Drag and Drop Question Your network contains an Active Directory forest named contoso.com that is linked to an Azure Active Directory (Azure AD) tenant named contoso.com by using A...
Azure AD ConnectHybrid IdentityStaging ModeDirectory Synchronization - Question #114
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. For which users can you configure the Job title property...
- Question #115Implement identity management solution
will be in charge of Azure AD Support issues. This new employee needs the ability to reset the passwords for all types of users when requested, including users with the user admin,...
Azure AD RolesPassword ResetLeast PrivilegeAdministrative Roles - Question #116Implement access management for apps
Your organization is considering allowing employees to work remotely and to use their own devices to access many of the organizations resources. However, to help protect against po...
Conditional AccessApplication ControlBYODData Loss Prevention - Question #117Implement authentication and access management
Your organization is looking to tighten its security posture when it comes to Azure AD users passwords. There has been reports on local news recently of various organizations havin...
Azure AD Password ProtectionPassword PoliciesIdentity SecurityWeak Password Prevention - Question #118Implement access management for apps
You have hired a new Azure Engineer that will be responsible for managing all aspects of enterprise applications and app registrations. This engineer will not need to manage anythi...
Azure AD RolesLeast PrivilegeApplication RegistrationsEnterprise Applications - Question #119Implement authentication and access management solution
You have a Microsoft 365 tenant. You currently allow email clients that use Basic authentication to conned to Microsoft Exchange Online. You need to ensure that users can connect t...
Modern AuthenticationLegacy AuthenticationExchange OnlineEndpoint Manager - Question #120
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
- Question #121
You have a Microsoft 365 subscription that contains the following: An Azure Active Directory (Azure AD) tenant that has an Azure Active Directory Premium P2 license A Microsoft Sha...
- Question #122
You have an Azure subscription that contains the custom roles shown in the following table. You need to create a custom Azure subscription role named Role3 by using the Azure porta...
- Question #123Implement access management for apps
Your organization is a 100% Azure cloud based organization with no on-premise resources. You recently completed an acquisition of another company that is 100% on-premise with no cl...
Azure AD Application ProxyOn-premise application accessHybrid accessSecure remote access - Question #124Plan and implement identity governance
Your organization is working with a new consulting firm to help with the design, development, and deployment of a new IT service. The consultants will be joining your organization...
Azure AD Entitlement ManagementIdentity GovernanceAccess ManagementExternal Access - Question #125Implement and manage Azure AD application registrations and configure API permissions for service applications - typically mapped to 'Implement Identities' or 'Manage Application Access' in AZ-104/AZ-204/MS-500 certification domains.
Drag and Drop Question Your company has an Azure Active Directory (Azure AD) tenant named contoso.com. The company is developing a web service named App1. You need to ensure that A...
Azure Active DirectoryMicrosoft Graph APIApp RegistrationAdmin Consent - Question #126
Hotspot Question You have a Microsoft 36S tenant. You create a named location named HighRiskCountries that contains a list of high-risk countries. You need to limit the amount of t...
- Question #127
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that has multi-factor authentication (MFA) enabled. The account lockout settings are configured as shown in th...
- Question #128
You have a Microsoft 365 tenant. All users have mobile phones and laptops. The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivit...
- Question #129Manage Azure Active Directory identities and devices - specifically device registration, device limits, local administrator configuration, and MFA policies for Azure AD joined/registered devices (AZ-104 / SC-300)
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that has an Azure Active Directory Premium Plan 2 license. The tenant contains the users shown in the followin...
Azure AD Device SettingsDevice Join LimitsLocal Administrator RightsMulti-Factor Authentication - Question #130
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
- Question #131
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
- Question #132Manage Microsoft 365 identity, compliance, and device services using the appropriate administrative portals - aligning to the MS-102 (Microsoft 365 Administrator) or MS-900 exam objectives covering administration tool selection and portal navigation.
Drag and Drop Question You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3. You need to configure the users as shown in the following t...
Microsoft 365 Admin PortalsAzure Active DirectoryEndpoint ManagementCompliance and Governance - Question #133
You have an Active Directory forest that syncs to an Azure Active Directory (Azure AD) tenant. The tenant uses pass-through authentication. A corporate security policy states the f...
- Question #134
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains an Azure AD enterprise application named App1. A contractor uses the credentials of user1@outlo...
- Question #135
You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users. From the Groups blade in the Azure Active Director...
- Question #136
Hotspot Question You have an Azure Active Directory (Azure AD) tenant and an Azure web app named App1. You need to provide guest users with self-service sign-up for App1. The solut...
- Question #137
You have an Azure Active Directory (Azure AD) Azure AD tenant. You need to bulk create 25 new user accounts by uploading a template file. Which properties are required in the templ...
- Question #138
Hotspot Question A user named User1 attempts to sign in to the tenant by entering the following incorrect passwords: Pa55w0rd12 Pa55w0rd12 Pa55w0rd12 Pa55w.rd12 Pa55w.rd123 Pa55w.r...
- Question #139
You have an Azure Active Directory (Azure AD) tenant that contains cloud-based enterprise apps. You need to group related apps into categories in the My Apps portal. What should yo...
- Question #140
You have an Azure Active Directory Premium P2 tenant. You create a Log Analytics workspace. You need to ensure that you can view Azure Active Directory (Azure AD) audit log informa...
- Question #141Manage Azure Active Directory identities and governance - specifically configuring and managing Privileged Identity Management (PIM) for role activation policies, approval workflows, and MFA requirements (AZ-104 / SC-300 Identity Management Domain)
Hotspot Question You have an Azure Active Directory (Azure AD) tenant contains the users shown in the following table. In Azure AD Privileged Identity Management (PIM), you configu...
Azure AD Privileged Identity ManagementPIM Role SettingsAzure MFARole Assignment Management - Question #142Implement identity management solution
Case Study 3 - A. Datum Corp Overview
Azure AD ConnectHybrid IdentityDomain IntegrationIdentity Synchronization - Question #143
Case Study 3 - A. Datum Corp Overview
- Question #144
Case Study 3 - A. Datum Corp Overview
- Question #146
Case Study 1 - Contoso, Ltd Overview Contoso, Ltd. is a consulting company that has a main office in Montreal and branch offices in London and Seattle. Contoso has a partnership wi...
- Question #147Manage identity and access - specifically implementing and managing Azure AD Identity Governance features and assigning appropriate administrative roles using least privilege principles (Microsoft SC-300 / MS-102 certification domains).
Drag and Drop Question You have a Microsoft 365 E5 subscription that contains two users named User1 and User2. You need to ensure that User1 can create access reviews for groups, a...
Azure AD Identity GovernanceAccess ReviewsRole-Based Access ControlPrinciple of Least Privilege - Question #148
Hotspot Question You have a Microsoft 365 tenant that has 5,000 users. One hundred of the users are executives. The executives have a dedicated support team. You need to ensure tha...
- Question #149
Case Study 2 - Litware, Inc Overview Litware, Inc. is a pharmaceutical company that has a subsidiary named Fabrikam, Inc. Litware has offices in Boston and Seattle, but has employe...
- Question #150
Case Study 1 - Contoso, Ltd Overview Contoso, Ltd. is a consulting company that has a main office in Montreal and branch offices in London and Seattle. Contoso has a partnership wi...
- Question #151
Case Study 1 - Contoso, Ltd Overview Contoso, Ltd. is a consulting company that has a main office in Montreal and branch offices in London and Seattle. Contoso has a partnership wi...
- Question #152
You have an Azure Active Directory (Azure AD) tenant that: contains a user named User1. You need to ensure that User1 can create new catalogs and add1 resources to the catalogs the...
- Question #153Manage Azure Active Directory (Azure AD) identities and secure access - specifically configuring authentication methods and understanding the impact of Security Defaults on MFA registration options (AZ-104 / SC-300 Identity and Access Management)
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. User2 reports that he can only configure multi-factor au...
Azure AD Security DefaultsMulti-Factor Authentication (MFA)Azure AD Roles and PermissionsIdentity Management - Question #154
You have an Azure Active Directory (Azure AD) tenant. You configure self-service password reset (SSPR) by using the following settings: - Require users to register when signing in:...