Microsoft SC-300 Online Practice Questions and Exam Preparation

Microsoft SC-300 Online Questions & Answers

• Question 111:

  You have a Microsoft 365 tenant.

  All users have mobile phones and Windows 10 laptops.

  The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptop to a wired network that has internet access.

  You plan to implement multi-factor authentication (MFA).

  Which MFA authentication method can the users use from the remote location?

  A. a notification through the Microsoft Authenticator app
  B. an email verification code
  C. a verification code from the Microsoft Authenticator app
  D. an SMS verification code
  C. a verification code from the Microsoft Authenticator app

• Question 112:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You configure a Global Secure Access security profile named SecurityProfile1.

  You need to create a Conditional Access policy named CAPolicy1 that will use SecurityProfile1.

  Which two settings should you configure to ensure that CAPolicy1 uses SecurityProfile1? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Target resources

  Apply Conditional Access policies to Global Secure Access traffic 1. Under Target resources > Resources (formerly cloud apps). 1a. Choose All internet resources with Global Secure Access

  Box 2: Access controls: Grant

  1. Under Access controls > Grant.

  2a. Select Require multifactor authentication, Require device to be marked as compliant, and Require Microsoft Entra hybrid joined device 2b. For multiple controls select Require one of the selected controls.

  2. Select Select.

  References:

  https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-target-resource-microsoft-profile

• Question 113:

  You have a Microsoft Entra tenant that contains an access package named Package1 and a user named User1. Package1 is configured as shown in the following exhibit.

  

  You need to ensure that User1 can modify the review frequency of Package1. The solution must use the principle of least privilege.

  Which role should you assign to User1?

  A. Privileged Role Administrator
  B. External Identity Provider Administrator
  C. Identity Governance Administrator
  D. Security Administrator
  C. Identity Governance Administrator

• Question 114:

  You have a Microsoft 365 tenant that uses the domain named fabrikam.com.

  The Guest invite settings for Azure Active Directory (Azure AD) are configured as shown in the exhibit. (Click the Exhibit tab.)

  

  A user named [email protected] shares a Microsoft SharePoint Online document library to the users shown in the following table.

  

  Which users will be emailed a passcode?

  A. User2 only
  B. User1 only
  C. User1 and User2 only
  D. User1, User2, and User3
  A. User2 only

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/external-identities/one-time-passcode

• Question 115:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that has Email one-time passcode for guests set to Yes.

  You invite the guest users shown in the following table.

  

  Which users will receive a one-time passcode, and how long will the passcode be valid? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 116:

  You have a Microsoft 365 subscription.

  You need to ensure that users can grant enterprise applications access to their profile.

  The solution must ensure that the users can consent only to the User. Read and profile delegated permissions.

  What should you configure first?

  A. Security defaults
  B. Admin consent settings
  C. Permission classifications
  D. Identity Protection settings
  B. Admin consent settings

• Question 117:

  DRAG DROP

  You have an Azure subscription that contains the resources shown in the following table.

  

  The subscription uses Privileged Identity Management (PIM).

  You need to configure the following access controls by using PIM:

  1. Ensure that User1 can read and update Secret1.

  2. Ensure that User2 can read the contents of the secrets stored in Vault2.

  The solution must follow the principle of least privilege.

  Which authorization method should you use for each user? To answer, drag the appropriate authorization methods to the correct users. Each authorization method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: The Key Vault Secrets Officer RBAC role Ensure that User1 can read and update Secret1.

  Use the Key Vault Secrets Officer RBAC role and set the scope to Secret1.

  Azure RBAC allows users to manage Key, Secrets, and Certificates permissions. It provides one place to manage all permissions across all key vaults.

  * The Key Vault Secrets Officer RBAC role

  Perform any action on the secrets of a key vault, except manage permissions. Only works for key vaults that use the 'Azure role-based access control' permission model.

  Box 2: The Key Vault Secrets User RBAC role Ensure that User2 can read the contents of the secrets stored in Vault2.

  Use the The Key Vault Secrets User RBAC role and set the scope to secrets.

  * Key Vault Secrets User RBAC role

  Read secret contents including secret portion of a certificate with private key. Only works for key vaults that use the 'Azure role-based access control' permission model.

  Incorrect:

  * The Key Vault Reader RBAC Role

  Read metadata of key vaults and its certificates, keys, and secrets. Cannot read sensitive values such as secret contents or key material. Only works for key vaults that use the 'Azure role-based access control' permission model.

  * The GET Secret Permissions Access Policy permission

  References:

  https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guide

• Question 118:

  You have an Azure AD tenant that contains a user named User1 and a registered app named App1.

  User1 deletes the app registration of App1.

  You need to restore the app registration.

  What is the maximum number of days you have to restore the app registration from when it was deleted?

  A. 14
  B. 30
  C. 60
  D. 180
  B. 30

• Question 119:

  You have an Azure subscription that contains the custom roles shown in the following table.

  

  You need to create a custom Azure subscription role named Role3 by using the Azure portal. Role3 will use the baseline permissions of an existing role.

  Which roles can you clone to create Role3?

  A. Role2 only
  B. built-in Azure subscription roles only
  C. built-in Azure subscription roles and Role2 only
  D. built-in Azure subscription roles and built-in Azure AD roles only
  E. Role1, Role2 built-in Azure subscription roles, and built-in Azure AD roles
  C. built-in Azure subscription roles and Role2 only

• Question 120:

  HOTSPOT

  You have an Azure AD tenant that contains a user named User1. User1 is assigned the User Administrator role.

  You need to configure External collaboration settings for the tenant to meet the following requirements: |

  1. Guest users must be prevented from querying staff email addresses.

  2. Guest users must be able to access the tenant only if they are invited by User1.

  Which three settings should you configure? To answer, select the appropriate settings in the answer area.

  

  

  ---

  Box1 = User access is restricted to properties and memberships of their own directory objects (most restrictive). This setting ensures that guest users are prevented from querying staff email addresses and can access the tenant only if they are invited by User1.

  Box2 = Only users assigned to specific admin roles can invite guest users. This setting ensures that guest users can access the tenant only if they are invited by User1.

  Box3 = This setting enables guest users to sign up for the tenant only if they are invited by User1.