Microsoft SC-300 Online Practice Questions and Exam Preparation

Microsoft SC-300 Online Questions & Answers

• Question 151:

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.

  You need to be notified if a user downloads more than 50 files in one minute from Site1.

  Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

  A. session policy
  B. activity policy
  C. file policy
  D. anomaly detection policy
  B. activity policy

• Question 152:

  HOTSPOT

  You have a Microsoft Entra ID tenant that contains the groups shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Group2 only.

  Managed identities can only be added to Security Groups.

  Incorrect:

  1. All Company, Group1 - Managed identities can only be added to Security Groups, not to Microsoft 365 groups.

  2. Group3 Cannot add a managed identity to a dynamic group 3. Group4 Cannot add a managed identity to a Windows Server AD group.

  Box 2: All Company, Group1, and Group2 only.

  Incorrect:

  Group3 is a dynamic group. based on member attributes. Dynamic group membership adds and removes group members automatically using membership rules Group4 is a Windows Server AD group. Cannot add a cloud user to Group4.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/

• Question 153:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription.

  You create a user named User1.

  You need to ensure that User1 can update the status of identity Secure Score improvement actions.

  Solution: You assign the SharePoint Administrator role to User1 Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 154:

  You have a Microsoft Entra tenant.

  You have 500 devices that run either Windows 11, macOS, iOS, or Android and are enrolled in Microsoft Intune.

  You plan to deploy the Global Secure Access client.

  From the Microsoft Entra admin center, you download the Global Secure Access client for each operating system.

  You need to deploy the client to the macOS devices by using Intune.

  Which file extension should you use when uploading the client to Intune?

  A. .ipa
  B. .apk
  C. .intunewin
  D. .pkg
  D. .pkg

  ---

  Explanation

  For macOS app deployment through Intune, you upload the installer package format used by macOS, which is a.pkg file.

• Question 155:

  HOTSPOT

  You have a Microsoft Entra tenant that contains the users shown in the following table.

  

  The tenant contains the Microsoft 365 groups shown in the following table.

  

  You create an access review named Access1 that has the following settings:

  1. Select what to review: Teams + Groups

  2. Review scope: All Microsoft groups with guest users

  3. Scope: Guest users only

  4. Select reviewers: Users review their own access

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No - User1 can review their membership in Group1 by using Access1.

  Group1 is a role-assignable group. Role-assignable groups are not included with the 'All Microsoft 365 groups with guest users' selected.

  Note: Review Scope Option All Microsoft 365 groups with guest users: Select this option if you want to create recurring reviews on all your guest users across all your Microsoft Teams and Microsoft 365 groups in your organization. Dynamic groups and role-assignable groups aren't included. You can also choose to exclude individual groups by selecting Select group(s) to exclude.

  Box 2: No - User2 can review their membership in Group3 by using Access1.

  Group3 is a dynamic group. Dynamic groups are not included with the 'All Microsoft 365 groups with guest users' selected.

  Box 3: No - User3 can review their membership in Group2 by using Access1.

  Scope is guest users only User3 is not a guest user.

  Note:

  Scope: Guest users only Access Review scope Guest users only Scope for the review.

  Guest users only: This option limits the access review to only the Microsoft Entra B2B guest users in your directory.

• Question 156:

  You have a Microsoft Entra tenant.

  You need to ensure that applications support automatic user provisioning.

  Which standard must the applications support?

  A. LDAP
  B. OAuth 2.0
  C. SCIM 2.0
  D. SAML
  C. SCIM 2.0

  ---

  Explanation

  SCIM 2.0 is the standard used for automatic user provisioning and deprovisioning.

• Question 157:

  SIMULATION

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Microsoft 365 Username: [email protected] Microsoft 365 Password: 1122334455667788

  If the Microsoft 365 portal does not load successfully in the browser, press CTRL+K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 99999999

  You need to configure Microsoft Entra ID Protection to meet the following requirements:

  - Require multi-factor authentication (MFA) for any sign-ins at the high risk level.

  - Apply the configuration to all users except for Mod Administrator.

  To complete this task, sign in to the appropriate admin center.

  A. See the explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the explanation below.

  ---

  Explanation

  Configure Microsoft Entra ID Protection to require multi-factor authentication (MFA) for high sign-in risk.

  To enable this policy, complete the following steps:

  Step 1: Sign in to the Microsoft Entra admin center as at least a Conditional Access Administrator.

  Step 2: Go to Protection > Conditional Access.

  Step 3: Select New policy.

  Step 4: Provide a name for the policy.

  Step 5: Under Assignments, select Users or workload identities.

  Step 5a: Under Include, select All users.

  Step 5b: Under Exclude, select Users and groups, and choose your organization's emergency access or break-glass accounts (select Mod Administrator).

  Step 6: Under Cloud apps or actions, select All cloud apps.

  Step 7: Under Conditions > Sign-in risk, set Configure to Yes, and select High.

  Step 8: Under Access controls > Grant, select Grant access and Require multifactor authentication.

  Step 9: Under Session, no configuration is required.

  Step 10: Set Enable policy to On.

  Step 11: Select Create.

  Note:

  Use risk detections for user sign-ins to trigger Microsoft Entra multifactor authentication or password changes. Risk-based Conditional Access policies automatically respond to risky behaviors by requiring MFA or blocking access, providing an additional layer of security.

  References:

  https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-risk-based-sspr-mfa

• Question 158:

  You have a Microsoft 365 E5 subscription.

  You plan to deploy a third-party software as a service (SaaS) app named App1.

  You need to onboard App1 to Microsoft Defender for Cloud Apps.

  The solution must ensure that you can implement session control policies.

  What should you do first?

  A. From the Microsoft Defender portal, configure Cloud discovery.
  B. From the Microsoft Entra admin center, configure a traffic forwarding profile.
  C. From the Microsoft Entra admin center, configure single sign-on (SSO) for App1.
  D. From the Microsoft Defender portal, create an OAuth app policy.
  A. From the Microsoft Defender portal, configure Cloud discovery.

• Question 159:

  You have a Microsoft Entra tenant.

  You need to ensure that guest users are automatically removed after access expires.

  Which feature should you configure?

  A. Access reviews
  B. Entitlement management settings
  C. Conditional Access
  D. Identity Protection
  B. Entitlement management settings

  ---

  Explanation

  Entitlement management settings allow automatic removal of external users after a defined period when access is no longer required.

• Question 160:

  HOTSPOT

  You have an Azure subscription that contains the following virtual machine:

  1. Name: V1

  2. Azure region: East US

  3. System-assigned managed identity: Disabled

  You create the managed identities shown in the following table.

  

  You perform the following actions:

  1. Assign Managed1 to V1.

  2. Create a resource group named RG1 in the West US region.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.