Microsoft SC-300 Online Practice Questions and Exam Preparation

Microsoft SC-300 Online Questions & Answers

• Question 451:

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1 and a Microsoft Teams team named Team1. The subscription contains five security groups named Group1, Group2, Group3, Group4, and Group5.

  You need to implement access packages for Site1 and Team1. The solution must meet the following requirements:

  1. Members of Group3 must be able to request access to Site1 only.

  2. Members of Group1 must be able to request access to Site1 and Team1.

  3. Members of Group4 must be able to request access to Site1 and Team1.

  4. Only members of Group2 must be able to approve access package requests from Group1 members.

  5. Only members of Group5 must be able to approve access package requests from Group3 and Group4 members.

  What is the minimum number of access packages you should create?

  A. 2
  B. 3
  C. 4
  D. 5
  B. 3

  ---

  Explanation

  Members of Group3 must be able to request access to Site1 only.

  First access package

  Members of Group1 must be able to request access to Site1 and Team1.

  Second access package.

  Members of Group4 must be able to request access to Site1 and Team1. requests from Group1 members.

  Third access package needed as only members of Group2 must be able to approve access package

• Question 452:

  DRAG DROP

  You need to resolve the recent security incident issues.

  What should you configure for each incident? To answer, drag the appropriate policy types to the correct issues. Each policy type may be used once, more than once, or not at all.

  You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 453:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Amazon Web Services (AWS) account a Google Workspace subscription, and a GitHub account.

  You deploy an Azure subscription and enable Microsoft 365 Defender.

  You need to ensure that you can monitor OAuth authentication requests by using Microsoft Defender for Cloud Apps.

  Solution: From the Microsoft 365 Defender portal, you add the GitHub app connector Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 454:

  You have an Azure subscription that contains a user named User1.

  You need to meet the following requirements:

  1. Prevent User1 from being added as an owner of newly registered apps.

  2. Ensure that User1 can manage the application proxy settings.

  3. Ensure that User1 can register apps.

  4. Use the principle of least privilege.

  Which role should you assign to User1?

  A. Application developer
  B. Cloud application administrator
  C. Service support administrator
  D. Application administrator
  D. Application administrator

• Question 455:

  HOTSPOT

  Your on-premises network contains an Active Directory domain that uses Microsoft Entra Connect to sync with a Microsoft Entra tenant.

  You need to configure Microsoft Entra Connect to meet the following requirements:

  Microsoft Entra sign-ins must be authenticated by an Active Directory domain controller.

  Active Directory domain users must be able to use Microsoft Entra self-service password reset (SSPR).

  Minimize administrative effort.

  What should you use for each requirement? To answer, select the appropriate options in the answer area.

  

  

• Question 456:

  You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1.

  A contractor uses the credentials of [email protected].

  You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as [email protected].

  What should you do?

  A. Run the New-AzureADMSInvitation cmdlet.
  B. Configure the External collaboration settings.
  C. Add a WS-Fed identity provider.
  D. Implement Azure AD Connect.
  A. Run the New-AzureADMSInvitation cmdlet.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal

  https://docs.microsoft.com/en-us/powershell/module/azuread/new-azureadmsinvitation?view=azureadps-2.0

• Question 457:

  You need to configure the MFA settings for users who connect from the Boston office. The solution must meet the authentication requirements and the access requirements.

  What should you include in the configuration?

  A. named locations that have a private IP address range
  B. named locations that have a public IP address range
  C. trusted IPs that have a public IP address range
  D. trusted IPs that have a private IP address range
  C. trusted IPs that have a public IP address range

  ---

  Explanation

  Location offer your country set, IP ranges MFA trusted IP and corporate network VPN gateway IP address: This is the public IP address of the VPN device for your on-premises network. The VPN device requires an IPv4 public IP address.

  Specify a valid public IP address for the VPN device to which you want to connect. It must be reachable by Azure Client Address space: List the IP address ranges that you want routed to the local onpremises network through this gateway. You can add multiple address space ranges. Make sure that the ranges you specify here do not overlap with ranges of other networks your virtual network connects to, or with the address ranges of the virtual network itself.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

• Question 458:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that contains three users named User1, User1, and User3,

  You create a group named Group1. You add User2 and User3 to Group1.

  You configure a role in Azure AD Privileged identity Management (PIM) as shown in the application administrator exhibit. (Click the application Administrator tab.)

  

  Group1 is configured as the approver for the application administrator role.

  You configure User2to be eligible for the application administrator role.

  For User1, you add an assignment to the Application administrator role as shown in the Assignment exhibit. (Click Assignment tab)

  

  For each of the following statement, select Yes if the statement is true, Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 459:

  You have a Microsoft Entra tenant.

  You need to block legacy authentication protocols.

  Which condition should you configure in Conditional Access?

  A. Device platforms
  B. Client apps
  C. Locations
  D. User risk
  B. Client apps

  ---

  Explanation

  The Client apps condition allows filtering and blocking of legacy authentication protocols.

• Question 460:

  HOTSPOT

  You have a custom cloud app named App1 that is registered in Azure Active Directory (Azure AD).

  App1 is configured as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.