Microsoft SC-300 Online Practice Questions and Exam Preparation

Microsoft SC-300 Online Questions & Answers

• Question 101:

  HOTSPOT

  You have a Microsoft Entra tenant that contains two groups named Group1 and Group2 and the users shown in the following table.

  

  Group2 is a member of Group1.

  You configure an access review that has the following settings:

  1. Name: Review 1

  2. Select what to review: Teams + Groups

  3. Review scope: Select Teams + groups

  4. Group: Group1

  5. Scope: Guest users only

  6. Select reviewers: Group owners(s)

  7.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 102:

  You have an Azure AD tenant that has multi-factor authentication (MFA) enforced and self-service password reset (SSPR) enabled.

  You enable combined registration in interrupt mode.

  You create a new user named User1.

  Which two authentication methods can User1 use to complete the combined registration process? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. a FID02 security key
  B. a hardware token
  C. a one-time passcode email
  D. Windows Hello for Business
  E. the Microsoft Authenticator app
  C. a one-time passcode email
  E. the Microsoft Authenticator app

  ---

  Explanation

  Incorrect: * a FIDO2 security key FIDO2 security keys, can only be added in Manage mode

  Note: Combined security information registration for Azure Active Directory Before combined registration, users registered authentication methods for Azure AD Multi-Factor Authentication and self-service password reset (SSPR) separately.

  People were confused that similar methods were used for multifactor authentication and SSPR but they had to register for both features. Now, with combined registration, users can register once and get the benefits of both multifactor authentication and SSPR.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr-combined

• Question 103:

  You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses.

  The licenses are assigned to individual users.

  From the Groups blade in the Microsoft Entra admin center, you assign Microsoft Office 365 Enterprise E5 licenses to a group that includes all users.

  You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort.

  What should you use?

  A. the Licenses blade in the Microsoft Entra admin center
  B. the Set-WindowsProductKey cmdlet
  C. the Identity Governance blade in the Microsoft Entra admin center
  D. the Update-MgUser cmdlet
  A. the Licenses blade in the Microsoft Entra admin center

  ---

  Explanation

  When you assign licenses through groups in Microsoft Entra, the Licenses blade in the Microsoft Entra admin center allows you to manage and remove individual license assignments easily. Since you've assigned the Microsoft Office 365 Enterprise E5 license to all users through a group, you can use the Licenses blade to remove the individually assigned Office 365 Enterprise E3 licenses from users with minimal administrative effort.

• Question 104:

  HOTSPOT

  You have a Microsoft Entra tenant that contains the identities shown in the following table.

  

  Group1 has the following configurations:

  1. Owners: User1, User4

  2. Members: User1, Managed2, Gioup2

  You create an access review that has the following settings:

  1. Name: Review1

  2. Review scope: Select Teams + Groups

  3. Group: Group1

  4. Scope: All users

  5. Select reviewers: Group owner(s)

  The Fallback reviewers: setting is NOT configured.

  

  

• Question 105:

  You create a Log Analytics workspace.

  You need to implement the technical requirements for auditing.

  What should you configure in Azure AD?

  A. Company branding
  B. Diagnostics settings
  C. External Identities
  D. App registrations
  B. Diagnostics settings

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/overview-monitoring

• Question 106:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 ES subscription.

  You create a user namedUser1.

  You need to ensure that User1 can update the status of identity Secure Score improvement actions.

  Solution: You assign the Security Operator role User1.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 107:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

  

  You plan to manage the lifecycles of the groups.

  Which groups can be set to expire, and what is the shortest group lifetime you can set? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 108:

  You have a Microsoft Entra tenant that has a Microsoft Entra ID P1 license.

  You need to review the Microsoft Entra ID sign-in logs to investigate sign-ins that occurred in the past.

  For how long does Microsoft Entra ID store events in the sign-in logs?

  A. 14 days
  B. 30 days
  C. 90 days
  D. 365 days
  B. 30 days

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/reference-reports-data-retention#how-long-does-azure-ad-store-the-data

• Question 109:

  SIMULATION

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click the username below.

  To enter your password, place your cursor in the Enter password box and click the password below.

  Microsoft 365 Username: [email protected]

  Microsoft 365 Password: 1122334455667788

  If the Microsoft 365 portal does not load successfully in the browser, press CTRL+K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 99999999

  You need to lock out accounts for five minutes when they have 10 failed sign-in attempts.

  To complete this task, sign in to the appropriate admin center.

  A. See the explanation below
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the explanation below

  ---

  Explanation

  

  Protect user accounts from attacks with Microsoft Entra smart lockout

  Manage Microsoft Entra smart lockout values Based on your organizational requirements, you can customize the Microsoft Entra smart lockout values.

  To check or modify the smart lockout values for your organization, complete the following steps:

  Step 1: Sign in to the Microsoft Entra admin center as at least an Authentication Administrator.

  Step 2: Browse to Protection > Authentication methods > Password protection.

  Step 3: Set the Lockout threshold, based on how many failed sign-ins are allowed on an account before its first lockout.

  Step 4: The default is 10 for Azure Public tenants and 3 for Azure US Government tenants. [Specify: 10]

  Step 5: Set the Lockout duration in seconds, to the length in seconds of each lockout. [Specify 300 seconds]

  The default is 60 seconds (one minute).

  References:

  https://learn.microsoft.com/en-us/entra/identity/authentication/howto-password-smart-lockout

• Question 110:

  You have a Microsoft Entra tenant that contains the identities shown in the following table.

  You register an app named App1 in the tenant.

  To which identities can you assign the Owner role for App1?

  A. User1 only
  B. User1 and Group1 only
  C. User1 and SP1 only
  D. User1, Group1, and Group2 only
  E. User1, Group1, and SP1 only
  F. User1, Groupl, Group2, and SP1
  C. User1 and SP1 only

  ---

  Explanation

  In Microsoft Entra ID, the Owner role for a registered application can be assigned to users [User1] and service principals [SP1]. Groups cannot be assigned as owners of enterprise applications. A user is automatically added as an owner when they register an application, unless they have administrator roles. Service principals, which represent applications, hosted services, or automated tools, can also be owners.

  References:

  https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference