SC-300 Exam Questions
438 real SC-300 exam questions with expert-verified answers and explanations. Page 8 of 9.
- Question #364Implement access management for apps
Hotspot Question You have an Azure subscription that contains the resources shown in the following table. You create a Microsoft Entra user named User1. Which identities can you ad...
Managed IdentitiesAzure RBACSystem-assigned identityUser-assigned identity - Question #365Manage Microsoft Entra identities and applications - specifically registering and configuring application identities in Microsoft Entra ID (formerly Azure Active Directory), which falls under the 'Manage identity and access' domain of certifications such as MS-102, SC-300, or AZ-104.
SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, plac...
Microsoft Entra IDApp RegistrationRedirect URIIdentity Management - Question #366Manage identity and access in Microsoft 365 - specifically configuring application consent policies and admin consent request workflows in Microsoft Entra ID (MS-102 / SC-300 domain: Implement and manage identity and access)
SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, plac...
Microsoft Entra IDAdmin Consent WorkflowEnterprise ApplicationsIdentity Governance - Question #367Manage identity and access in Microsoft 365 / Configure application consent and permission policies in Microsoft Entra ID (Azure AD)
SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, plac...
Microsoft Entra IDUser Consent SettingsPermission ClassificationsEnterprise Applications - Question #368Manage identity and access in Microsoft Entra ID - specifically configuring My Apps collections to organize application visibility for user groups, typically tested under the Microsoft 365 Administrator (MS-102) or Azure AD/Entra identity management objectives.
SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, plac...
My Apps PortalMicrosoft Entra IDApp CollectionsEnterprise Applications - Question #369
Hotspot Question You have an Azure subscription that contains the resources shown in the following table. You create a Microsoft Entra user named User1. Which identities can you ad...
- Question #370Implement authentication and access management solution
You have an Azure subscription that contains the resources shown in the following table. You need to grant permissions to the resources by using attribute-based access control (ABA...
Azure ABACAccess ControlAzure StoragePermissions - Question #371Implement access management for apps
You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains a registered app named App1. You have a partner organization that has a Microsoft Ent...
Application authenticationService principalsClient credentialsCross-tenant access - Question #372Plan and implement workload identities
You have an Azure subscription that contains two virtual machines named VM1 and VM2 and an Azure SQL managed instance named SQL1. You need to ensure that VM1 and VM2 can retrieve d...
Managed IdentityWorkload IdentityAzure SQL AuthenticationMinimize Administrative Effort - Question #373Implement access management for apps
You have a Microsoft 365 E5 subscription. You plan to deploy a third-party software as a service (SaaS) app named App1. You need to onboard App1 to Microsoft Defender for Cloud App...
Microsoft Defender for Cloud AppsSession ControlSaaS App OnboardingCloud Discovery - Question #374
Hotspot Question You have an Azure subscription named Sub1. You plan to deploy Microsoft Entra Permissions Management. You need to ensure that Permission Management can onboard Sub...
- Question #375Implement and manage identity governance in Microsoft Entra ID - specifically configuring Privileged Identity Management (PIM) for role settings, eligible assignments, and activation approval workflows (Microsoft SC-300 / MS-102 certification domain: Manage Access and Governance)
SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, plac...
Privileged Identity Management (PIM)Microsoft Entra ID GovernanceRole Activation and ApprovalPrinciple of Least Privilege - Question #376Implement and manage identity governance in Microsoft Entra ID, specifically configuring entitlement management catalogs and resource assignment for access packages (Microsoft SC-300 / AZ-104 Identity domain)
SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, plac...
Microsoft Entra ID GovernanceAccess PackagesEntitlement ManagementIdentity Governance Catalogs - Question #378
You have a Microsoft Entra tenant that uses Microsoft Entra ID Premium licenses. You plan to configure a terms of use (ToU) for the tenant. You need to upload the ToU document. Whi...
- Question #379
You have a Microsoft 365 E5 subscription. You need to ensure that users are prompted to accept a custom terms of use (ToU) agreement when they sign in to the subscription. What sho...
- Question #380
You have a Microsoft 365 E5 subscription. You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains a user named User1. You plan to deploy Micr...
- Question #381Plan and implement identity governance
You have an Azure subscription named Sub1. You purchase a Microsoft Entra Permissions Management license. You need to onboard Permissions Management. Which two actions should you p...
Microsoft Entra Permissions ManagementData collectionRole assignmentOnboarding - Question #382Implement and manage user identities
You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users. From the Groups blade in the Microsoft Entra admin...
License ManagementPowerShellMicrosoft Entra IDBulk Operations - Question #383Implement and manage user identities
You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users. From the Groups blade in the Microsoft Entra admin...
License managementMicrosoft Entra admin centerBulk operationsUser licenses - Question #384
Hotspot Question You have an Azure subscription that uses Microsoft Entra Permissions Management. You have an Amazon Web Services (AWS) account. You plan to connect Permissions Man...
- Question #385Manage identity and access - Implement and manage Microsoft Entra ID governance features including access reviews for groups and guest users
Hotspot Question You have a Microsoft Entra tenant that contains two groups named Group1 and Group2 and the users shown in the following table. Group2 is a member of Group1. You co...
Microsoft Entra IDAccess ReviewsIdentity GovernanceGroup Membership - Question #386Plan and implement identity governance
Hotspot Question You have a Microsoft Entra tenant that contains the identities shown in the following table. Group1 has the following configurations: - Owners: User1, User4 - Memb...
Access ReviewsIdentity GovernanceReviewer AssignmentGroup Membership - Question #387
Hotspot Question You have a Microsoft Entra tenant that contains a user named User1. You have an Azure subscription named Sub1. User1 is assigned the Owner role for Sub1. You need...
- Question #388
Hotspot Question You have an Azure subscription that is onboarded to Microsoft Entra Permissions Management. You need to perform the following actions: - Identify billable Azure re...
- Question #389
Hotspot Question You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains the identities shown in the following table. The tenant is onboarded...
- Question #390Implement and manage user identities
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
Microsoft Entra B2BGuest usersExternal identitiesApplication access - Question #391Implement and manage identity synchronization with Microsoft Entra ID (Microsoft 365 / SC-300 / MS-102 - Identity and Access Management)
Hotspot Question You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2 and the users shown in the following table. Group2 is a member of Group1....
Cross-Tenant SynchronizationMicrosoft Entra IDScoping FiltersIdentity Governance - Question #392
Hotspot Question You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2 and the users shown in the following table. The subscription contains a C...
- Question #393Implement and manage Microsoft Entra Internet Access and Microsoft Entra Private Access (Global Secure Access) - typically found in SC-100, MS-102, or SC-200 certification tracks covering Microsoft 365 security and identity.
Drag and Drop Question Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server and...
Microsoft Entra Private AccessGlobal Secure AccessPrivate Network ConnectorZero Trust Networking - Question #394Implement access management for apps
You have a Microsoft 365 subscription. You have an Azure subscription that contains an Azure App Service web app named App1. You have multiple devices that run Windows and are enro...
Global Secure AccessPrivate AccessTraffic ForwardingApp Access - Question #395
Hotspot Question You have a Microsoft 365 subscription. You configure a Global Secure Access security profile named SecurityProfile1. You need to create a Conditional Access policy...
- Question #396
Hotspot Question You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains two Azure key vaults named KV1 and KV2 that use Azure role-based a...
- Question #397
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to enable Microsoft Defender for Cloud Apps session control for Site...
- Question #398
You have a Microsoft Entra tenant that contains an access package named Package1 and a user named User1. Package1 is configured as shown in the following exhibit. You need to ensur...
- Question #399
You have a Microsoft 365 subscription that is onboarded to Microsoft Entra Permissions Management. You need to identify managed identities that are assigned permissions and remove...
- Question #400
You have a Microsoft 365 subscription. You need to create a Conditional Access policy that will use a Global Secure Access security profile. The solution must ensure that users are...
- Question #401
You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains the groups shown in the following table. Which groups can you manage by using Privile...
- Question #402
You have two Microsoft Entra tenants named contoso.com and fabrikam.com. Contoso.com contains the identities shown in the following table. You configure cross-tenant synchronizatio...
- Question #403
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
- Question #405Implement identity management solution
Hotspot Question Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains computers that run Windows 11. You have a Microsoft 365 E...
Hybrid IdentityDevice ManagementIntune EnrollmentAzure AD Join - Question #406
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
- Question #407
You have a Microsoft 365 subscription. You need to ensure that when users access the Microsoft 365 portal from Microsoft Edge and have their browser language set to Spanish, they a...
- Question #408
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
- Question #409Implement and manage identity synchronization between on-premises AD DS and Microsoft Entra ID (formerly Azure AD Connect / Cloud Sync configuration)
Hotspot Question Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains the identities shown in the following...
Microsoft Entra Cloud SyncScoping FiltersIdentity SynchronizationActive Directory - Question #410Plan and implement identity governance
Hotspot Question You have a Microsoft 365 E5 subscription that contains the groups shown in the following table. You plan to manage the lifecycles of the groups. Which groups can b...
Group lifecycle managementMicrosoft 365 GroupsAzure AD Group expirationIdentity governance - Question #411
Hotspot Question You have two Microsoft Entra tenants named contoso.com and fabrikam.com. Contoso.com contains the users shown in the following table. You configure cross-tenant sy...
- Question #412
You have a Microsoft Entra tenant. You have the end-user desktop environments shown in the following table. You need to deploy Global Secure Access. In which environments can you i...
- Question #413
Hotspot Question You have a Microsoft 365 E5 subscription that has a Conditional Access policy named Policy1. You need to perform the following actions: - Create a Conditional Acce...
- Question #414
You have multiple on-premises devices that run either Windows or Linux. You have a Microsoft 365 E5 subscription. You configure Microsoft Entra Internet Access. You need to ensure...
- Question #415
Hotspot Question You have a Microsoft 365 subscription that contains three users named User1, User2, and User3 and an enterprise app named App1. The subscription contains the devic...