SC-300 Exam Questions
433 real SC-300 exam questions with expert-verified answers and explanations. Page 8 of 9.
- Question #369Plan and implement workload identities
Hotspot Question You have an Azure subscription that contains the resources shown in the following table. You create a Microsoft Entra user named User1. Which identities can you ad...
managed identityuser-assigned managed identitysystem-assigned managed identityAzure VM - Question #370Implement authentication and access management solution
You have an Azure subscription that contains the resources shown in the following table. You need to grant permissions to the resources by using attribute-based access control (ABA...
Azure ABACAccess ControlAzure StoragePermissions - Question #371Implement access management for apps
You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains a registered app named App1. You have a partner organization that has a Microsoft Ent...
Application authenticationService principalsClient credentialsCross-tenant access - Question #372Plan and implement workload identities
You have an Azure subscription that contains two virtual machines named VM1 and VM2 and an Azure SQL managed instance named SQL1. You need to ensure that VM1 and VM2 can retrieve d...
Managed IdentityWorkload IdentityAzure SQL AuthenticationMinimize Administrative Effort - Question #373Implement access management for apps
You have a Microsoft 365 E5 subscription. You plan to deploy a third-party software as a service (SaaS) app named App1. You need to onboard App1 to Microsoft Defender for Cloud App...
Microsoft Defender for Cloud AppsSession ControlSaaS App OnboardingCloud Discovery - Question #374Plan and implement workload identities
Hotspot Question You have an Azure subscription named Sub1. You plan to deploy Microsoft Entra Permissions Management. You need to ensure that Permission Management can onboard Sub...
Entra Permissions ManagementPowerShellrole assignmentsubscription onboarding - Question #375Implement and manage identity governance in Microsoft Entra ID - specifically configuring Privileged Identity Management (PIM) for role settings, eligible assignments, and activation approval workflows (Microsoft SC-300 / MS-102 certification domain: Manage Access and Governance)
SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, plac...
Privileged Identity Management (PIM)Microsoft Entra ID GovernanceRole Activation and ApprovalPrinciple of Least Privilege - Question #376Implement and manage identity governance in Microsoft Entra ID, specifically configuring entitlement management catalogs and resource assignment for access packages (Microsoft SC-300 / AZ-104 Identity domain)
SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, plac...
Microsoft Entra ID GovernanceAccess PackagesEntitlement ManagementIdentity Governance Catalogs - Question #378Plan and implement identity governance
You have a Microsoft Entra tenant that uses Microsoft Entra ID Premium licenses. You plan to configure a terms of use (ToU) for the tenant. You need to upload the ToU document. Whi...
terms of usePDF formatToU documentMicrosoft Entra ID - Question #379Plan and implement identity governance
You have a Microsoft 365 E5 subscription. You need to ensure that users are prompted to accept a custom terms of use (ToU) agreement when they sign in to the subscription. What sho...
terms of useConditional Accesssign-in enforcementuser acceptance - Question #380Plan and implement workload identities
You have a Microsoft 365 E5 subscription. You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains a user named User1. You plan to deploy Micr...
Entra Permissions ManagementPermissions Management Administratorrole assignmentleast privilege - Question #381Plan and implement identity governance
You have an Azure subscription named Sub1. You purchase a Microsoft Entra Permissions Management license. You need to onboard Permissions Management. Which two actions should you p...
Microsoft Entra Permissions ManagementData collectionRole assignmentOnboarding - Question #382Implement and manage user identities
You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users. From the Groups blade in the Microsoft Entra admin...
License ManagementPowerShellMicrosoft Entra IDBulk Operations - Question #383Implement and manage user identities
You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users. From the Groups blade in the Microsoft Entra admin...
License managementMicrosoft Entra admin centerBulk operationsUser licenses - Question #384Plan and implement workload identities
Hotspot Question You have an Azure subscription that uses Microsoft Entra Permissions Management. You have an Amazon Web Services (AWS) account. You plan to connect Permissions Man...
Entra Permissions ManagementAWS integrationPowerShellapp registration - Question #385Manage identity and access - Implement and manage Microsoft Entra ID governance features including access reviews for groups and guest users
Hotspot Question You have a Microsoft Entra tenant that contains two groups named Group1 and Group2 and the users shown in the following table. Group2 is a member of Group1. You co...
Microsoft Entra IDAccess ReviewsIdentity GovernanceGroup Membership - Question #386Plan and implement identity governance
Hotspot Question You have a Microsoft Entra tenant that contains the identities shown in the following table. Group1 has the following configurations: - Owners: User1, User4 - Memb...
Access ReviewsIdentity GovernanceReviewer AssignmentGroup Membership - Question #387Plan and implement workload identities
Hotspot Question You have a Microsoft Entra tenant that contains a user named User1. You have an Azure subscription named Sub1. User1 is assigned the Owner role for Sub1. You need...
Entra Permissions Managementleast privilegeUser Access AdministratorPermissions Management Administrator - Question #388Plan and implement workload identities
Hotspot Question You have an Azure subscription that is onboarded to Microsoft Entra Permissions Management. You need to perform the following actions: - Identify billable Azure re...
Entra Permissions ManagementAutopilot rulesAnalyticsbillable resources - Question #389Plan and implement identity governance
Hotspot Question You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains the identities shown in the following table. The tenant is onboarded...
Permissions ManagementEntra Insightsprivileged role assignmentsservice principals - Question #390Implement and manage user identities
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
Microsoft Entra B2BGuest usersExternal identitiesApplication access - Question #391Implement and manage identity synchronization with Microsoft Entra ID (Microsoft 365 / SC-300 / MS-102 - Identity and Access Management)
Hotspot Question You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2 and the users shown in the following table. Group2 is a member of Group1....
Cross-Tenant SynchronizationMicrosoft Entra IDScoping FiltersIdentity Governance - Question #392Implement authentication and access management
Hotspot Question You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2 and the users shown in the following table. The subscription contains a C...
Conditional AccessMFAgroup assignmentspolicy exclusions - Question #393Implement and manage Microsoft Entra Internet Access and Microsoft Entra Private Access (Global Secure Access) - typically found in SC-100, MS-102, or SC-200 certification tracks covering Microsoft 365 security and identity.
Drag and Drop Question Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server and...
Microsoft Entra Private AccessGlobal Secure AccessPrivate Network ConnectorZero Trust Networking - Question #394Implement access management for apps
You have a Microsoft 365 subscription. You have an Azure subscription that contains an Azure App Service web app named App1. You have multiple devices that run Windows and are enro...
Global Secure AccessPrivate AccessTraffic ForwardingApp Access - Question #395Implement authentication and access management
Hotspot Question You have a Microsoft 365 subscription. You configure a Global Secure Access security profile named SecurityProfile1. You need to create a Conditional Access policy...
Global Secure Accesssecurity profileConditional Accessnetwork settings - Question #396Implement access management for apps
Hotspot Question You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains two Azure key vaults named KV1 and KV2 that use Azure role-based a...
Azure RBACKey Vaultsecret accessrole scope inheritance - Question #397Implement authentication and access management
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to enable Microsoft Defender for Cloud Apps session control for Site...
Defender for Cloud Appssession controlConditional Access prerequisiteapp governance - Question #398Plan and implement identity governance
You have a Microsoft Entra tenant that contains an access package named Package1 and a user named User1. Package1 is configured as shown in the following exhibit. You need to ensur...
access packagesIdentity Governance Administratorreview frequencyleast privilege - Question #399Plan and implement workload identities
You have a Microsoft 365 subscription that is onboarded to Microsoft Entra Permissions Management. You need to identify managed identities that are assigned permissions and remove...
Permissions Managementmanaged identitiesAutopilot rulesunused permissions - Question #400Implement authentication and access management
You have a Microsoft 365 subscription. You need to create a Conditional Access policy that will use a Global Secure Access security profile. The solution must ensure that users are...
Global Secure Accessweb content filteringsecurity profileConditional Access - Question #401Plan and implement identity governance
You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains the groups shown in the following table. Which groups can you manage by using Privile...
Privileged Identity ManagementPIM-enabled groupsrole-assignable groupsgroup types - Question #402Implement and manage user identities
You have two Microsoft Entra tenants named contoso.com and fabrikam.com. Contoso.com contains the identities shown in the following table. You configure cross-tenant synchronizatio...
cross-tenant synchronizationidentity provisioningmulti-tenantsync scope - Question #403Implement and manage user identities
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
B2B collaborationguest invitationNew-MgInvitationexternal users - Question #405Implement identity management solution
Hotspot Question Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains computers that run Windows 11. You have a Microsoft 365 E...
Hybrid IdentityDevice ManagementIntune EnrollmentAzure AD Join - Question #406Implement and manage user identities
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
B2B collaborationexternal user accessMicrosoft Graph cmdletsguest user - Question #407Implement and manage user identities
You have a Microsoft 365 subscription. You need to ensure that when users access the Microsoft 365 portal from Microsoft Edge and have their browser language set to Spanish, they a...
company brandingsign-in page localizationlanguage settingsuser experience - Question #408Implement and manage user identities
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
B2B collaborationguest user accountexternal contractoruser creation - Question #409Implement and manage identity synchronization between on-premises AD DS and Microsoft Entra ID (formerly Azure AD Connect / Cloud Sync configuration)
Hotspot Question Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains the identities shown in the following...
Microsoft Entra Cloud SyncScoping FiltersIdentity SynchronizationActive Directory - Question #410Plan and implement identity governance
Hotspot Question You have a Microsoft 365 E5 subscription that contains the groups shown in the following table. You plan to manage the lifecycles of the groups. Which groups can b...
Group lifecycle managementMicrosoft 365 GroupsAzure AD Group expirationIdentity governance - Question #411Implement and manage user identities
Hotspot Question You have two Microsoft Entra tenants named contoso.com and fabrikam.com. Contoso.com contains the users shown in the following table. You configure cross-tenant sy...
cross-tenant synchronizationattribute mapping filtersscoping filtersprovisioning logic - Question #412Implement authentication and access management
You have a Microsoft Entra tenant. You have the end-user desktop environments shown in the following table. You need to deploy Global Secure Access. In which environments can you i...
Global Secure Access clientOS compatibilityclient deploymentendpoint requirements - Question #413Implement authentication and access management
Hotspot Question You have a Microsoft 365 E5 subscription that has a Conditional Access policy named Policy1. You need to perform the following actions: - Create a Conditional Acce...
Conditional Access App Controlsession policyDefender for Cloud Appscustom app control policy - Question #414Implement authentication and access management
You have multiple on-premises devices that run either Windows or Linux. You have a Microsoft 365 E5 subscription. You configure Microsoft Entra Internet Access. You need to ensure...
Global Secure Accessremote networkon-premises devicesInternet Access - Question #415Implement authentication and access management
Hotspot Question You have a Microsoft 365 subscription that contains three users named User1, User2, and User3 and an enterprise app named App1. The subscription contains the devic...
Conditional Accessblock accessdevice compliancepolicy interaction - Question #416Implement authentication and access management
Hotspot Question You have a Microsoft 365 E5 subscription that contains three groups named Group1, Group2, and Group3, and the users shown in the following table. You create a Cond...
Conditional AccessMFA enforcementblock accesspolicy exclusions - Question #417Implement and manage identity and access in Microsoft Entra ID - specifically configuring protected actions to enforce step-up authentication for sensitive operations (Microsoft SC-300 / AZ-104 Identity domain)
Drag and Drop Question You have a Microsoft Entra tenant. You need to implement protected actions. Which three actions should you perform in sequence? To answer, move the appropria...
Microsoft Entra IDProtected ActionsConditional AccessAuthentication Context - Question #418Implement authentication and access management solution
Hotspot Question You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains three users named User1, User2 and User3. You have the devices shown...
VM login with Entra IDAzure role assignmentsdevice complianceMicrosoft Entra credentials - Question #419Manage identity and access - specifically managing Azure role-based access control (RBAC) assignments at subscription, resource group, and resource scopes, including understanding data plane vs. management plane roles.
Hotspot Question You have an Azure subscription that contains two resource groups named RG1 and RG2, a storage account named storage1. You assign roles for the subscription as show...
Azure RBACRole AssignmentsScope InheritanceStorage Account Permissions - Question #420Implement authentication and access management
You have a Microsoft Entra tenant that contains 1,000 users. The users are assigned Microsoft Entra Suite licenses. You are deploying Global Secure Access. Access. Which profiles s...
Global Secure Accesstraffic forwarding profilesInternet access profileMicrosoft Entra Suite