Microsoft SC-300 Online Practice Questions and Exam Preparation

Microsoft SC-300 Online Questions & Answers

• Question 11:

  HOTSPOT

  You have an Azure subscription named Sub1 that contains three users named User1, User2, and User3. Sub1 has a storage account named storage1 that contains the resources shown in the following table.

  

  Sub1 contains the users shown in the following table.

  

  Which users can read File1, and which users can read File2?

  To answer, select the appropriate options in the answer area.

  NOTE; Each correct selection is worth one point.

  

  

• Question 12:

  You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com.

  Several users use their contoso.com email address for self-service sign-up to 1 Microsoft Entra.

  You gain global administrator privileges to the Microsoft Entra tenant that contains the self-signed users.

  You need to prevent the users from creating user accounts in the contoso.com 2 Microsoft Entra tenant for self-service sign-up to Microsoft 365 services.

  Which PowerShell cmdlet should you run?

  A. Update-MgDomain
  B. Update-MgPolicyAuthorizationPolicy
  C. Update-MgPolicyPermissionGrantPolicyExclude
  D. Update-MgDomainFederationConfiguration
  C. Update-MgPolicyPermissionGrantPolicyExclude

• Question 13:

  You have a Microsoft Entra tenant that contains a user named User1 and a Microsoft 365 group named Group1. User1 is the owner of Group1.

  You need to ensure that User1 is notified every three months to validate the guest membership of Group1.

  What should you do?

  A. Configure the External collaboration settings.
  B. Create an access review.
  C. Configure an access package.
  D. Create a group expiration policy.
  B. Create an access review.

• Question 14:

  DRAG DROP

  You have a Microsoft 365 E5 subscription that contains two users named User1 and User2.

  You need to ensure that User1 can create access reviews for groups, and that User2 can review the history report for all the completed access reviews. The solution must use the principle of least privilege.

  Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 15:

  You plan to deploy a new Azure AD tenant.

  Which multifactor authentication (MFA) method will be enabled by default for the tenant?

  A. Microsoft Authenticator
  B. SMS
  C. voice call
  D. email OTP
  B. SMS

• Question 16:

  HOTSPOT

  You need to configure app registration in Azure AD to meet the delegation requirements.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-app-roles

• Question 17:

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  From the tenant, you configure a naming policy for groups.

  Which users are affected by the naming policy?

  A. User2 only
  B. User3only
  C. User2 and User3 only
  D. User3 and User4 only
  E. User1, User2, and User3 only
  F. User1, User2, User3, and User4
  D. User3 and User4 only

  ---

  Explanation

  Microsoft 365 Groups and Microsoft Teams naming policy Admin override Some administrators are exempted from these policies, across all group workloads and endpoints, so that they can create groups with these blocked words and with their desired naming conventions. The following are the list of administrator roles exempted from the group naming policy.

  Global admin (User1)

  Partner Tier 1 Support

  Partner Tier 2 Support

  User account admin (User2)

  Note: You can use a naming policy to enforce a consistent naming strategy for Microsoft 365 groups and teams created by users in your organization. A naming policy can help you and your users identify the function of the group, membership, geographic region, or who created the group. The naming policy can also help categorize groups in the address book. You can use the policy to block specific words from being used in group names and aliases.

  The naming policy is applied to groups that are created across all groups workloads (like Outlook, Microsoft Teams, SharePoint, Planner, Viva Engage, etc.). It gets applied to both the group name and group alias. It also gets applied when a user creates a group and when the group name, alias, description, or avatar is edited for an existing group.

  References:

  https://learn.microsoft.com/en-us/microsoft-365/solutions/groups-naming-policy

• Question 18:

  You have a Microsoft 365 tenant.

  All users must use the Microsoft Authenticator app for multi-factor authentication (MFA) when accessing Microsoft 365 services.

  Some users report that they received an MFA prompt on their Microsoft Authenticator app without initiating a sign-in request.

  You need to block the users automatically when they report an MFA request that they did not Initiate.

  Solution: From the Azure portal, you configure the Account lockout settings for multi-factor authentication (MFA).

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  You need to configure the fraud alert settings.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

• Question 19:

  HOTSPOT

  You have a Microsoft 365 tenant named contoso.com.

  Guest user access is enabled.

  Users are invited to collaborate with contoso.com as shown in the following table.

  

  From the External collaboration settings in the Azure Active Directory admin center, you configure the Collaboration restrictions settings as shown in the following exhibit.

  

  From a Microsoft SharePoint Online site, a user invites [email protected] to the site.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  Invitations can only be sent to outlook.com. Therefore, User1 can accept the invitation and access the application.

  Box 2. Yes

  Invitations can only be sent to outlook.com. However, User2 has already received and accepted an invitation so User2 can access the application.

  Box 3. No

  Invitations can only be sent to outlook.com. Therefore, User3 will not receive an invitation.

• Question 20:

  You have a Microsoft 365 tenant.

  The Azure Active Directory (Azure AD) tenant syncs to an on-premises Active Directory domain. The domain contains the servers shown in the following table.

  

  The domain controllers are prevented from communicating to the internet.

  You implement Azure AD Password Protection on Server1 and Server2.

  You deploy a new server named Server4 that runs Windows Server 2019.

  You need to ensure that Azure AD Password Protection will continue to work if a single server fails.

  What should you implement on Server4?

  A. Azure AD Connect
  B. Azure AD Application Proxy
  C. Password Change Notification Service (PCNS)
  D. the Azure AD Password Protection proxy service
  D. the Azure AD Password Protection proxy service

  ---

  Explanation

  To protect your on-premises Active Directory Domain Services (AD DS) environment, you can install and configure Azure AD Password Protection to work with your on-prem DC. You how to install and register the Azure AD Password Protection proxy service and Azure AD Password Protection DC agent in your on-premises environment.

  Note: Install and configure the proxy service.

  The Azure AD Password Protection proxy service is typically on a member server in your on-premises AD DS environment. Once installed, the Azure AD Password Protection proxy service communicates with Azure AD to maintain a copy of the global and customer banned password lists for your Azure AD tenant.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy