SC-300 Exam Questions
433 real SC-300 exam questions with expert-verified answers and explanations. Page 9 of 9.
- Question #421Implement and manage user identities
You have a Microsoft 365 E5 subscription and an Azure subscription. You plan to analyze Microsoft Entra sign-in logs by using Azure Monitor. You need to configure diagnostic settin...
diagnostic settingsAzure Monitorsign-in logsLog Analytics workspace - Question #422Implement access management for apps
You have a Microsoft Entra ID P2 tenant named contoso.com that contains a registered app named App1. On January 1, App1 was deleted. You need to restore App1. What is the last day...
app registrationsoft deleterestore deleted app30-day retention - Question #423Plan and implement workload identities
Hotspot Question You have an Azure subscription named Sub1 that contains an Azure key vault named Vault1 and an Azure Automation account named Automation1. You need to ensure that...
system-assigned managed identityKey Vault Secrets Userleast privilegeAzure Automation - Question #424Implement authentication and access management solution
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to be notified if a user downloads more than 50 files in one minute...
Defender for Cloud Appsactivity policyanomaly detectionfile download threshold - Question #425Manage identities and governance in Azure - specifically configuring role-based access control (RBAC) with attribute-based conditions (ABAC) for Azure Storage, covering how conditional expressions on role assignments restrict or permit access to blob resources based on resource attributes or blob index tags.
Hotspot Question You have an Azure subscription named Sub1 that contains two storage accounts named storage1 and storage2 and the blob containers shown in the following table. Sub1...
Azure RBACAttribute-Based Access Control (ABAC)Azure Blob StorageConditional Role Assignments - Question #426Manage identities and governance in Microsoft 365 - specifically implementing and managing custom security attributes and delegated administrative roles in Microsoft Entra ID (Azure Active Directory)
Hotspot Question You have a Microsoft 365 E5 subscription that contains two attribute sets named Set1 and Set2. The subscription contains the users shown in the following table. Yo...
Custom Security AttributesAzure AD RBACAttribute Definition AdministratorMicrosoft Entra ID Governance - Question #427Plan and implement identity governance
Hotspot Question You have a Microsoft Entra tenant that contains the users shown in the following table. The tenant contains the Microsoft 365 groups shown in the following table....
access reviewsguest usersMicrosoft 365 groupsself-review scope - Question #428Manage identities in Microsoft Entra ID - specifically configuring and understanding Administrative Unit membership types (assigned vs. dynamic) and how dynamic user rules evaluate individual user attributes rather than group memberships.
Hotspot Question You have a Microsoft Entra tenant that contains an administrative unit named AU1. AU1 is configured for assigned membership. The tenant contains the users shown in...
Microsoft Entra IDAdministrative UnitsDynamic Membership RulesIdentity Governance - Question #429Implement and manage external identities and cross-tenant access in Microsoft Entra ID - typically mapped to the 'Manage Identities and Governance' or 'Implement Access Management' domain in SC-300 or AZ-104 certification exams.
Hotspot Question You have a Microsoft Entra tenant named contoso.com that has cross-tenant access configured as shown in the following table. You have two partner organizations nam...
Microsoft Entra External IDCross-Tenant Access SettingsB2B CollaborationMicrosoft Entra ID Governance - Question #430Implement access management for apps
You have a Microsoft 365 subscription. You need to ensure that users can grant enterprise applications access to their profile. The solution must ensure that the users can consent...
enterprise application consentpermission classificationsdelegated permissionsuser consent settings - Question #431Plan and implement identity governance
You have a Microsoft 365 E5 subscription. You create an access review named Review1. Review1 requires that every six months, Microsoft 365 group owners review guest user access to...
access reviewsupon completion settingsauto-remove guest accessaccess review lifecycle - Question #432Implement authentication and access management solution
You have an Azure subscription that contains a user named User1 and an Azure key vault named Vault1. You need to ensure that User1 can read the metadata of certificates, keys, and...
Key Vault Readerleast privilegecertificate metadataKey Vault RBAC - Question #433Plan and implement workload identities
Hotspot Question You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Entra tenant that contains an app registration named App1. App1 has Mic...
Conditional Access policyworkload identitycertificate authenticationcorporate network restriction - Question #434Implement access management for apps
You have a Microsoft Entra tenant that contains the identities shown in the following table. You register an app named App1 in the tenant. To which identities can you assign the Ow...
app registration ownerservice principalrole assignment eligibilityenterprise application - Question #435Implement access management for apps
Hotspot Question You have an Azure subscription that contains a group named Group1 and two users named User1 and User2. User1 is a member of Group1. You register an enterprise appl...
self-service application accessapproval workflowgroup assignmententerprise applications - Question #436Implement identity management solution
You have a Microsoft Entra tenant. You need to add the Facebook social identity provider to the tenant. What should you do first?
social identity providerFacebookuser flowsguest self-service sign-up - Question #437Implement identity management solution
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
B2B collaborationguest invitationNew-MgInvitationexternal contractor access - Question #438Implement and manage user identities
You have 2,500 users who are assigned Microsoft 365 E3 licenses. The licenses are assigned to individual users. You assign Microsoft 365 E5 licenses to a group that includes all us...
license managementgroup-based licensingbulk license removalMicrosoft 365 - Question #439Implement and manage user identities
Hotspot Question You have a Microsoft Entra tenant that contains the users shown in the following table. The tenant contains the administrative units shown in the following table....
administrative unitsscoped role assignmentsUser AdministratorGroups Administrator - Question #440Implement identity management solution
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
B2B collaborationguest user accountexternal identitycontractor access - Question #441Implement authentication and access management
You have on-premises Linux devices. You have a Microsoft 365 E5 subscription. You plan to configure Global Secure Access Internet Access. You need to ensure that the devices can co...
Global Secure AccessLinux devicesAzure Connected Machine agentInternet Access - Question #442Implement authentication and access management
Hotspot Question You have a Microsoft Entra tenant that contains 1,000 users. The users are assigned Microsoft Entra Suite licenses. You perform the following actions: Deploy Globa...
Global Secure AccessConditional Accesssecurity profilestraffic forwarding profiles - Question #443Implement authentication and access management
Hotspot Question Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains 500 Windows 11 devices. You have a Microsoft 365 subscrip...
Conditional AccessMicrosoft Entra hybrid joindevice complianceMicrosoft Intune - Question #444Implement authentication and access management
You have a Microsoft Entra tenant. You need to use Microsoft Entra workbooks to monitor identity activity. To what should you set Destination details in the Diagnostic settings?
Entra workbooksDiagnostic settingsLog Analytics workspaceidentity monitoring - Question #445
Hotspot Question You have a Microsoft Entra tenant that contains two remote networks named RemoteNetwork1 and RemoteNetwork2 and the users shown in the following table. You have th...
- Question #447Implement authentication and access management
You have a Microsoft Entra tenant. You have 500 devices that run either Windows 11, macOS, iOS, or Android and are enrolled in Microsoft Intune. You plan to deploy the Global Secur...
Global Secure Access clientmacOS deploymentIntunepackage format - Question #448Implement authentication and access management
You have a Microsoft 365 tenant. All users have mobile phones and Windows 11 laptops. The users frequently work from remote locations that do not have Wi-Fi access or mobile phone...
MFA methodsWindows Hello for Businessoffline authenticationpasswordless - Question #449Implement authentication and access management
You have a Microsoft Entra tenant. You need to configure protected actions to require privileged users to use phishing-resistant multifactor authentication (MFA). What should you d...
protected actionsauthentication contextphishing-resistant MFAConditional Access - Question #450Implement access management for apps
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps and Conditional Access policies. You need to block access to cloud apps when a user is assessed...
Defender for Cloud Appsaccess policysession controluser risk - Question #451Implement access management for apps
You have a Microsoft Entra tenant. You discover that a large number of new apps were added to the tenant. You need to implement an approval process for new enterprise applications....
enterprise applicationsadmin consentapp governanceapproval workflow - Question #452Implement access management for apps
You have a Microsoft Entra tenant. You need to ensure that users are prevented from consenting to high-privilege permission requests for enterprise applications. The solution must...
user consent settingspermission classificationsOAuth consententerprise applications - Question #453Implement access management for apps
You have a Microsoft 365 E5 subscription. Users authorize third-party cloud apps to access their data. You need to configure an alert that will be triggered when an app requires hi...
OAuth app policyDefender for Cloud Appsapp permissionsalert policy - Question #454Plan and implement identity governance
You have a Microsoft Entra tenant that contains three users named User1, User2, and User3. You need to configure just-in-time (JIT) access to admin roles by using Privileged Identi...
Privileged Identity Managementjust-in-time accessrole assignmentsapproval workflow