Microsoft SC-300 Online Practice Questions and Exam Preparation

Microsoft SC-300 Online Questions & Answers

• Question 461:

  You have a Microsoft 365 subscription that contains the following:

  1. An Azure Active Directory (Azure AD) tenant that has an Azure Active Directory Premium P2 license

  2. A Microsoft SharePoint Online site named Site1

  3. A Microsoft Teams team named Team1

  You need to create an entitlement management workflow to manage Site1 and Team1.

  What should you do first?

  A. Create an access package.
  B. Create a catalog.
  C. Create an administrative unit.
  D. Configure an app registration.
  B. Create a catalog.

• Question 462:

  You have a Microsoft Entra tenant.

  You need to ensure that users are prevented from consenting to high-privilege permission requests for enterprise applications. The solution must ensure that the users can consent to low-risk permission requests.

  What should you modify first?

  A. Admin consent settings
  B. Permission classifications
  C. User consent settings
  D. App registrations
  C. User consent settings

  ---

  Explanation

  To let users consent to low-risk permissions but block others in Microsoft Entra, use User Consent Settings in the Microsoft Entra admin center to select "Allow user consent for apps from verified publishers for selected permissions," then define those low-risk permissions under Permission classifications, requiring admin approval for anything beyond that, especially high-risk or unverified app requests. This balances security by restricting risky requests (often flagged by risk-based step-up consent) while allowing productivity for trusted apps.

  References:

  https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-user-consent

• Question 463:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant and an Azure web app named App1.

  You need to provide guest users with self-service sign-up for App1. The solution must meet the following requirements:

  1. Guest users must be able to sign up by using a one-time password.

  2. The users must provide their first name, last name, city, and email address during the sign-up process.

  What should you configure in the Azure Active Directory admin center for each requirement?

  To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 464:

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain and a certification authority (CA) named CA1.

  You have an Azure AD tenant.

  You need to implement certificate-based authentication in Azure AD. The solution must ensure that users can sign in by using certificates issued by CA1.

  What should you do first?

  A. Deploy an Azure key vault.
  B. Add CA1 as a Certificate Authority to the Microsoft Entra ID tenant.
  C. Enable auto-enrollment for CA1.
  D. Deploy Windows Hello for Business.
  B. Add CA1 as a Certificate Authority to the Microsoft Entra ID tenant.

  ---

  Explanation

  References:

  https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-certificate-based-authentication

• Question 465:

  You need to resolve the issue of the guest user invitations.

  What should you do for the Azure AD tenant?

  A. Configure the Continuous access evaluation settings.
  B. Modify the External collaboration settings.
  C. Configure the Access reviews settings.
  D. Configure a Conditional Access policy.
  B. Modify the External collaboration settings.