Microsoft SC-300 Online Practice Questions and Exam Preparation

Microsoft SC-300 Online Questions & Answers

• Question 161:

  You need to implement the planned changes for litware.com.

  What should you configure?

  A. Azure AD Connect cloud sync between the Azure AD tenant and litware.com
  B. Azure AD Connect to include the litware.com domain
  C. staging mode in Azure AD Connect for the litware.com domain
  C. staging mode in Azure AD Connect for the litware.com domain

• Question 162:

  You need to resolve the issue of the sales department users.

  What should you configure for the Azure AD tenant?

  A. the User settings
  B. the Device settings
  C. the Access reviews settings
  D. Security defaults
  B. the Device settings

• Question 163:

  HOTSPOT

  You have an Azure subscription that contains a resource group named RG1. RG1 contains two virtual machines named VM1 and VM2 that have Microsoft Entra ID login enabled.

  The subscription contains the users shown in the following table.

  

  Which users can sign in to VM1, and which users can sign in to VM2? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  VM1: User1 and User3 only VM2: User1 only

  User1: Has Virtual Machine User Login at the Subscription level, allowing User1 to log in as a non-admin user to any virtual machine within the subscription. Thus, User1 can log in to both VM1 and VM2.

  User2: Has Virtual Machine Contributor at the RG1 scope. This allows User2 to manage and perform actions on virtual machines within RG1, which includes VM1 and VM2. However, the Virtual Machine Contributor role does not explicitly include login permissions unless additional permissions are granted, so User2 might not be able to log in to the VMs by default.

  User3: Has Virtual Machine Administrator Login at the VM1 scope. This role gives User3 admin login access specifically to VM1 only, not VM2.

  Summary Based on Roles:

  VM1: User1 (subscription-level login), User2 (RG-level management, but not login), and User3 (administrator login to VM1).

  VM2: User1 (subscription-level login) can access VM2, but User2 lacks explicit login rights under the Virtual Machine Contributor role, and User3 has no scope over VM2.

• Question 164:

  You have a Microsoft Entra tenant.

  You create an enterprise application collection named HR Apps that has the following settings:

  1. Applications: App1, App2, App3

  2. Owners: Admin1

  3. Users and groups: HRUsers

  All three apps have the following Properties settings:

  1. Enabled for users to sign in: Yes

  2. User assignment required: Yes

  3. Visible to users: Yes

  Users report that when they go to the My Apps portal, they only see App1 and App2.

  You need to ensure that the users can also see App3.

  What should you do from App3?

  A. From Users and groups, add HRUsers.
  B. From Single sign-on, configure a sign-on method.
  C. From Properties, change User assignment required to No.
  D. From Permissions, review the User consent permissions.
  A. From Users and groups, add HRUsers.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/assign-user-or-group-access-portal

  https://docs.microsoft.com/en-us/azure/active-directory/user-help/my-applications-portal-workspaces

• Question 165:

  HOTSPOT

  You have an Azure subscription that contains the resources shown in the following table.

  

  The subscription contains the virtual machines shown in the following table.

  

  Which identities can be assigned the Owner role for RG1, and to which virtual machines can you assign Managed2? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Managed1, VM1, and VM3 only Identities with Owner role

  Managed1 - OK

  Managed2 - Not OK

  Different region.

  VM1 - OK

  Same region

  VM2 - Not OK

  Different region Box 2: VM2 and VM4 only Managed2 is in West US. VM2 and VM4 are also in West US.

  Moving User-assigned managed identities across Azure regions isn't supported. You can however, recreate a user-assigned managed identity in the target region.

  References:

  https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/managed-identities-faq

  https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/how-managed-identities-work-vm

  https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/how-to-managed-identity-regional-move

• Question 166:

  You have a Microsoft 365 E5 subscription.

  You need to be able to create a Microsoft Defender for Cloud Apps session policy.

  What should you do first?

  A. From the Microsoft Defender portal, select User monitoring.
  B. From the Microsoft Defender portal, select App onboarding/maintenance.
  C. From the Microsoft Entra admin center, create a Conditional Access policy that uses Conditional Access App Control.
  D. From the Microsoft Defender portal, create a continuous report.
  C. From the Microsoft Entra admin center, create a Conditional Access policy that uses Conditional Access App Control.

• Question 167:

  You need to sync the ADatum users. The solution must meet the technical requirements.

  What should you do?

  A. From the Microsoft Entra Connect Sync, select Customize synchronization options.
  B. From PowerShell, run Set-ADSyncScheduler.
  C. From PowerShell, run Start-ADSyncSyncCycle.
  D. From the Microsoft Entra Connect Sync, select Change user sign-in.
  A. From the Microsoft Entra Connect Sync, select Customize synchronization options.

  ---

  Explanation

  You need to select Customize synchronization options to configure Azure AD Connect to sync the Adatum organizational unit (OU).

• Question 168:

  DRAG DROP

  You have a Microsoft 365 E5 tenant.

  You purchase a cloud app named App1.

  You need to enable real-time session-level monitoring of App1 by using Microsoft Defender for Cloud Apps.

  In which order should you perform the actions? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 169:

  You have an Azure Active Directory (Azure Azure) tenant that contains the objects shown in the following table.

  1. A device named Device1

  2. Users named User1, User2, User3, User4, and User5

  3. Five groups named Group1, Group2, Group3, Ciroup4, and Group5

  The groups are configured as shown in the following table.

  

  How many licenses are used if you assign the Microsoft Office 365 Enterprise E5 license to Group1?

  B. 2
  C. 3
  D. 4
  B. 2

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/licensing-group-advanced

• Question 170:

  You have an Azure subscription that contains an Azure Automation account named Automation1.

  You need to grant Automation1 access to Azure resources. The solution must meet the following requirements:

  Ensure that any permissions granted to Automation1 are removed when the account is deleted. Minimize administrative effort.

  What should you use?

  A. a client secret
  B. a system-assigned managed identity
  C. a certificate
  D. user-assigned managed identity
  B. a system-assigned managed identity

  ---

  Explanation

  A system-assigned managed identity is automatically created for the resource and is tied to its lifecycle. When the resource is deleted, the managed identity is also deleted, and any permissions assigned to it are removed automatically.

  Incorrect:

  Option A: Client secret Requires manual management and does not automatically remove permissions when the resource is deleted.

  Option C: Certificate

  Also requires manual management and does not automatically remove permissions when the resource is deleted.

  Option D: User-assigned managed identity

  Exists independently of any resource. When the resource is deleted, the identity persists and retains its permissions, which does not meet the requirement.

  References:

  https://www.reddit.com/r/AZURE/comments/xkzxrc/azure_managed_identity_vs_user_assigned_manage