SC-300 Exam Questions
438 real SC-300 exam questions with expert-verified answers and explanations. Page 9 of 9.
- Question #416
Hotspot Question You have a Microsoft 365 E5 subscription that contains three groups named Group1, Group2, and Group3, and the users shown in the following table. You create a Cond...
- Question #417Implement and manage identity and access in Microsoft Entra ID - specifically configuring protected actions to enforce step-up authentication for sensitive operations (Microsoft SC-300 / AZ-104 Identity domain)
Drag and Drop Question You have a Microsoft Entra tenant. You need to implement protected actions. Which three actions should you perform in sequence? To answer, move the appropria...
Microsoft Entra IDProtected ActionsConditional AccessAuthentication Context - Question #418
Hotspot Question You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains three users named User1, User2 and User3. You have the devices shown...
- Question #419Manage identity and access - specifically managing Azure role-based access control (RBAC) assignments at subscription, resource group, and resource scopes, including understanding data plane vs. management plane roles.
Hotspot Question You have an Azure subscription that contains two resource groups named RG1 and RG2, a storage account named storage1. You assign roles for the subscription as show...
Azure RBACRole AssignmentsScope InheritanceStorage Account Permissions - Question #420
You have a Microsoft Entra tenant that contains 1,000 users. The users are assigned Microsoft Entra Suite licenses. You are deploying Global Secure Access. Access. Which profiles s...
- Question #421
You have a Microsoft 365 E5 subscription and an Azure subscription. You plan to analyze Microsoft Entra sign-in logs by using Azure Monitor. You need to configure diagnostic settin...
- Question #422
You have a Microsoft Entra ID P2 tenant named contoso.com that contains a registered app named App1. On January 1, App1 was deleted. You need to restore App1. What is the last day...
- Question #423
Hotspot Question You have an Azure subscription named Sub1 that contains an Azure key vault named Vault1 and an Azure Automation account named Automation1. You need to ensure that...
- Question #424
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to be notified if a user downloads more than 50 files in one minute...
- Question #425Manage identities and governance in Azure - specifically configuring role-based access control (RBAC) with attribute-based conditions (ABAC) for Azure Storage, covering how conditional expressions on role assignments restrict or permit access to blob resources based on resource attributes or blob index tags.
Hotspot Question You have an Azure subscription named Sub1 that contains two storage accounts named storage1 and storage2 and the blob containers shown in the following table. Sub1...
Azure RBACAttribute-Based Access Control (ABAC)Azure Blob StorageConditional Role Assignments - Question #426Manage identities and governance in Microsoft 365 - specifically implementing and managing custom security attributes and delegated administrative roles in Microsoft Entra ID (Azure Active Directory)
Hotspot Question You have a Microsoft 365 E5 subscription that contains two attribute sets named Set1 and Set2. The subscription contains the users shown in the following table. Yo...
Custom Security AttributesAzure AD RBACAttribute Definition AdministratorMicrosoft Entra ID Governance - Question #427
Hotspot Question You have a Microsoft Entra tenant that contains the users shown in the following table. The tenant contains the Microsoft 365 groups shown in the following table....
- Question #428Manage identities in Microsoft Entra ID - specifically configuring and understanding Administrative Unit membership types (assigned vs. dynamic) and how dynamic user rules evaluate individual user attributes rather than group memberships.
Hotspot Question You have a Microsoft Entra tenant that contains an administrative unit named AU1. AU1 is configured for assigned membership. The tenant contains the users shown in...
Microsoft Entra IDAdministrative UnitsDynamic Membership RulesIdentity Governance - Question #429Implement and manage external identities and cross-tenant access in Microsoft Entra ID - typically mapped to the 'Manage Identities and Governance' or 'Implement Access Management' domain in SC-300 or AZ-104 certification exams.
Hotspot Question You have a Microsoft Entra tenant named contoso.com that has cross-tenant access configured as shown in the following table. You have two partner organizations nam...
Microsoft Entra External IDCross-Tenant Access SettingsB2B CollaborationMicrosoft Entra ID Governance - Question #430
You have a Microsoft 365 subscription. You need to ensure that users can grant enterprise applications access to their profile. The solution must ensure that the users can consent...
- Question #431
You have a Microsoft 365 E5 subscription. You create an access review named Review1. Review1 requires that every six months, Microsoft 365 group owners review guest user access to...
- Question #432
You have an Azure subscription that contains a user named User1 and an Azure key vault named Vault1. You need to ensure that User1 can read the metadata of certificates, keys, and...
- Question #433
Hotspot Question You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Entra tenant that contains an app registration named App1. App1 has Mic...
- Question #434
You have a Microsoft Entra tenant that contains the identities shown in the following table. You register an app named App1 in the tenant. To which identities can you assign the Ow...
- Question #435
Hotspot Question You have an Azure subscription that contains a group named Group1 and two users named User1 and User2. User1 is a member of Group1. You register an enterprise appl...
- Question #436
You have a Microsoft Entra tenant. You need to add the Facebook social identity provider to the tenant. What should you do first?
- Question #437
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
- Question #438
You have 2,500 users who are assigned Microsoft 365 E3 licenses. The licenses are assigned to individual users. You assign Microsoft 365 E5 licenses to a group that includes all us...
- Question #439
Hotspot Question You have a Microsoft Entra tenant that contains the users shown in the following table. The tenant contains the administrative units shown in the following table....
- Question #440
You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure t...
- Question #441
You have on-premises Linux devices. You have a Microsoft 365 E5 subscription. You plan to configure Global Secure Access Internet Access. You need to ensure that the devices can co...
- Question #442
Hotspot Question You have a Microsoft Entra tenant that contains 1,000 users. The users are assigned Microsoft Entra Suite licenses. You perform the following actions: Deploy Globa...
- Question #443
Hotspot Question Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains 500 Windows 11 devices. You have a Microsoft 365 subscrip...
- Question #444
You have a Microsoft Entra tenant. You need to use Microsoft Entra workbooks to monitor identity activity. To what should you set Destination details in the Diagnostic settings?
- Question #445
Hotspot Question You have a Microsoft Entra tenant that contains two remote networks named RemoteNetwork1 and RemoteNetwork2 and the users shown in the following table. You have th...
- Question #447
You have a Microsoft Entra tenant. You have 500 devices that run either Windows 11, macOS, iOS, or Android and are enrolled in Microsoft Intune. You plan to deploy the Global Secur...
- Question #448
You have a Microsoft 365 tenant. All users have mobile phones and Windows 11 laptops. The users frequently work from remote locations that do not have Wi-Fi access or mobile phone...
- Question #449
You have a Microsoft Entra tenant. You need to configure protected actions to require privileged users to use phishing-resistant multifactor authentication (MFA). What should you d...
- Question #450
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps and Conditional Access policies. You need to block access to cloud apps when a user is assessed...
- Question #451
You have a Microsoft Entra tenant. You discover that a large number of new apps were added to the tenant. You need to implement an approval process for new enterprise applications....
- Question #452
You have a Microsoft Entra tenant. You need to ensure that users are prevented from consenting to high-privilege permission requests for enterprise applications. The solution must...
- Question #453
You have a Microsoft 365 E5 subscription. Users authorize third-party cloud apps to access their data. You need to configure an alert that will be triggered when an app requires hi...
- Question #454
You have a Microsoft Entra tenant that contains three users named User1, User2, and User3. You need to configure just-in-time (JIT) access to admin roles by using Privileged Identi...