Microsoft SC-300 Online Practice Questions and Exam Preparation

Microsoft SC-300 Online Questions & Answers

• Question 241:

  You have a Microsoft Entra tenant.

  You need to monitor OAuth app activity.

  What should you configure?

  A. Activity policy
  B. OAuth app policy
  C. Access review
  D. Conditional Access
  B. OAuth app policy

  ---

  Explanation

  OAuth app policies monitor permissions granted to applications and detect suspicious behavior.

• Question 242:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  The users are assigned the roles shown in the following table.

  

  For which users can User1 and User4 reset passwords? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 243:

  You have a Microsoft 365 tenant.

  The Azure Active Directory (Azure AD) tenant contains the groups shown in the following table.

  

  In Azure AD, you add a new enterprise application named Appl.

  Which groups can you assign to App1?

  A. Group1 and Group3
  B. Group2 only
  C. Group3 only
  D. Group1 only
  E. Group1 and Group4
  A. Group1 and Group3

  ---

  Explanation

  Using Azure Active Directory (Azure AD) with an Azure AD Premium license plan, you can use groups to assign access to a SaaS application that's integrated with Azure AD. For example, if you want to assign access for the marketing department to use five different SaaS applications, you can create an Office 365 or security group that contains the users in the marketing department, and then assign that group to these five SaaS applications that are needed by the marketing department.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-saasapps

• Question 244:

  You have accounts for the following cloud platforms:

  1. Azure

  2. Alibaba Cloud

  3. Amazon Web Services (AWS)

  4. Google Cloud Platform (GCP)

  You configure an Azure subscription to use Microsoft Entra Permissions Management to manage the permissions in Azure only.

  Which additional cloud platforms can be managed by using Permissions Management?

  A. AWS only
  B. Alibaba Cloud and AWS only
  C. Alibaba Cloud and GCP only
  D. AWS and GCP only
  E. Alibaba Cloud, AWS, and GCP
  D. AWS and GCP only

  ---

  Explanation

  Microsoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM) product that provides comprehensive visibility and control over permissions for any identity and any resource in Microsoft Azure, Amazon Web Services (AWS) and Google Cloud Platform (GCP).

  References:

  https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-permissions-management

• Question 245:

  HOTSPOT

  You have a Microsoft Entra tenant that contains a user named User1.

  You have an Azure subscription named Sub1. User1 is assigned the Owner role for Sub1.

  You need to ensure that User1 can onboard Sub1 to Permissions Management. The solution must follow the principle of least privilege.

  Which role should you assign for Sub1, and which role should you assign to User1 for the tenant? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Sub1: User Access Administrator

  Tenant: Permissions Management Administrator

  Role for Sub1: User Access Administrator.

  The User Access Administrator role allows User1 to manage access and assign roles within the subscription (Sub1), which is necessary for configuring permissions during the onboarding process.

  Role for Tenant: Permissions Management Administrator.

  The Permissions Management Administrator role at the tenant level allows User1 to manage Permissions Management settings and onboard resources across the tenant. This role provides the necessary permissions specifically for Permissions Management without granting excessive administrative access.

• Question 246:

  Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. The tenant contains the users shown in the following table.

  

  All the users work remotely.

  Azure AD Connect is configured in Azure AD as shown in the following exhibit.

  

  Connectivity from the on-premises domain to the internet is lost.

  Which users can sign in to Azure AD?

  A. User1 only
  B. User1 and User 3 only
  C. User1, and User2 only
  D. User1, User2, and User3
  B. User1 and User 3 only

  ---

  Explanation

  https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta-current-limitations#unsupported-scenariosReadtheNote:EnablingPasswordHashSynchronizationgivesyoutheoptiontofailoverauthenticationifyouron-premisesinfrastructureisdisrupted.ThisfailoverfromPass-throughAuthenticationtoPasswordHashSynchronizationisnotautomatic.You'llneedtoswitchthesign-inmethodmanuallyusingAzureADConnect.IftheserverrunningAzureADConnectgoesdown,you'llrequirehelpfromMicrosoftSupporttoturnoffPass-throughAuthentication.SincethePasswordHashsyncfailoverisnotautomatic,inthiscasetheanswerisA.User2thatisdirectorysyncwillneedPass-ThroughAuthentication,whichwillbeunavailableatthatmoment.

• Question 247:

  You have an Azure subscription that contains a resource group named RG1 and four users named User1, User2, User3, and User4.

  You plan to assign the users the following roles for RG1:

  1. User1: Reader

  2. User2: Contributor

  3. User3: Storage Blob Data Reader

  4. User4: Virtual Machine Contributor

  You are evaluating the use of attribute-based access control (ABAC).

  Which user's role will support the use of ABAC?

  A. User1
  B. User2
  C. User3
  D. User4
  C. User3

• Question 248:

  DRAG DROP

  You have a Microsoft 365 E5 tenant.

  You purchase a cloud app named App1.

  You need to enable real-time session-level monitoring of App1 by using Microsoft Cloud App Security.

  In which order should you perform the actions? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Reference -

  https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-blocking-data-downloads-via-microsoft-cloud-app/ba-p/326357

• Question 249:

  You have a Microsoft Entra tenant.

  You need to ensure that only users from specific external domains can be invited as guests to the tenant.

  Which settings should you configure?

  A. External collaboration settings
  B. All identity providers
  C. Cross-tenant access settings
  D. Linked subscriptions
  A. External collaboration settings

  ---

  Explanation

  Configure external collaboration settings

  External collaboration settings let you specify what roles in your organization can invite external users for B2B collaboration. These settings also include options for allowing or blocking specific domains, and options for restricting what external guest users can see in your Microsoft Entra directory.

  References:

  https://learn.microsoft.com/en-us/entra/external-id/external-collaboration-settings-configure

• Question 250:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2 and the users shown in the following table.

  

  Group2 is a member of Group1.

  You configure cross-tenant synchronization with a partner organization named fabrikam.com by using the following configurations:

  1. Provisioning status: On

  2. Users and groups: Group1

  3. Prevent accidental deletion: 500

  4. Scope: Sync only assigned users and groups

  5. Scoping filter: Department EQUALS Marketing

  From the Cross-tenant synchronization settings, you set Provisioning Mode to Automatic.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes - User1 will be provisioned in the Microsoft Entra tenant of fabrikam.com.

  User1 belongs to the Marketing Department, and is a member of Group1. Cross-tenant synchronization settings:

  1. Sync Group1

  2. Filter Department EQUALS Marketing

  Box 2: No - User2 will be provisioned in the Microsoft Entra tenant of fabrikam.com.

  User2 belongs to the marketing Department, and is a member of Group2. Group2 will not be synchronized.

  Box 3: No - User3 will be provisioned in the Microsoft Entra tenant of fabrikam.com.

  User3 belongs to the HR Department, and is a member of Group1. HR department will not be synchronized.