Microsoft Role-based SC-300 Questions & Answers

• Question 1:

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.

  You need to be notified if a user downloads more than 50 files in one minute from Site1.

  Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

  A. session policy

  B. activity policy

  C. file policy

  D. anomaly detection policy

  Correct Answer: B

• Question 2:

  You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

  

  You add an enterprise application named App1 to Azure AD and set User1 as the owner of App1. App1 requires admin consent to access Azure AD before the app can be used. You configure the Admin consent requests settings as shown in the following exhibit.

  

  Admin1, Admin2, Admin3, and User

  Correct Answer: D

• Question 3:

  You have a Microsoft 365 subscription. The subscription contains users that use Microsoft Outlook 2016 and Outlook 2013 clients.

  You need to implement tenant restrictions. The solution must minimize administrative effort.

  What should you do first?

  A. Configure the Outlook 2013 clients to use modern authentication.

  B. Upgrade the Outlook 2013 clients to Outlook 2016.

  C. From the Exchange admin center, configure Organization Sharing.

  D. Upgrade all the Outlook clients to Outlook 2019.

  Correct Answer: B

• Question 4:

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps and Conditional Access policies.

  You need to block access to cloud apps when a user is assessed as high risk.

  Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

  A. access policy

  B. OAuth app policy

  C. anomaly detection policy

  D. activity policy

  Correct Answer: A

• Question 5:

  HOTSPOT

  You need to meet the technical requirements for license management by the helpdesk administrators.

  What should you create first, and which tool should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/roles/administrative-units https://docs.microsoft.com/en-us/azure/active-directory/roles/admin-units-manage

• Question 6:

  You need to resolve the recent security incident issues.

  What should you configure for each incident? To answer, drag the appropriate policy types to the correct issues. Each policy type may be used once, more than once, or not at all.

  You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

• Question 7:

  HOTSPOT

  You need to implement the planned changes and technical requirements for the marketing department.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-organization

• Question 8:

  You need to meet the planned changes and technical requirements for App1. What should you implement?

  A. a policy set in Microsoft Endpoint Manager

  B. an app configuration policy in Microsoft Endpoint Manager

  C. an app registration in Azure AD

  D. Azure AD Application Proxy

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app

• Question 9:

  You need to track application access assignments by using Identity Governance. The solution must meet the delegation requirements. What should you do first?

  A. Modify the User consent settings for the enterprise applications.

  B. Create a catalog.

  C. Create a program.

  D. Modify the Admin consent requests settings for the enterprise applications.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlementmanagement-overview

• Question 10:

  You need to configure the detection of multi staged attacks to meet the monitoring requirements. What should you do?

  A. Customize the Azure Sentinel rule logic.

  B. Create a workbook.

  C. Add an Azure Sentinel playbook.

  D. Add Azure Sentinel data connectors.

  Correct Answer: A