Microsoft Microsoft Certifications SC-300 Questions & Answers

• Question 91:

  HOTSPOT

  You have a Microsoft 36S tenant.

  You create a named location named HighRiskCountries that contains a list of high-risk countries.

  You need to limit the amount of time a user can stay authenticated when connecting from a high-risk country.

  What should you configure in a conditional access policy? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 92:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that has multi-factor authentication (MFA) enabled.

  The account lockout settings are configured as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 93:

  HOTSPOT

  You have a Microsoft 365 tenant.

  You configure a conditional access policy as shown in the Conditional Access policy exhibit. (Click the Conditional Access policy tab.)

  

  You view the User administrator role settings as shown in the Role setting details exhibit. (Click the Role setting details tab.)

  

  You view the User administrator role assignments as shown in the Rote assignments exhibit. (Click the Role assignments lab.)

  

  For each of the following statement, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 94:

  HOTSPOT

  Your company has an Azure Active Directory (Azure AD) tenant named contoso.com. The company has a business partner named Fabrikam, Inc.

  Fabrikam uses Azure AD and has two verified domain names of fabrikam.com and litwareinc.com. Both domain names are used for Fabrikam email addresses.

  You plan to create an access package named package1 that will be accessible only to the users at Fabrikam.

  You create a connected organization for Fabrikam.

  You need to ensure that the package1 will be accessible only to users who have fabrikam.com email addresses.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 95:

  HOTSPOT

  You have a Microsoft 365 tenant and an Active Directory domain named adatum.com.

  You deploy Azure AD Connect by using the Express Settings.

  You need to configure self-service password reset (SSPR) to meet the following requirements:

  1.

  When users reset their password, they must be prompted to respond to a mobile app notification or answer three predefined security questions.

  2.

  Passwords must be synced between the tenant and the domain regardless of where the password was reset.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-security-questions

• Question 96:

  HOTSPOT

  You have a Microsoft 365 tenant that contains a group named Group1 as shown in the Group1 exhibit. (Click the Group1 tab.)

  

  You create an enterprise application named App1 as shown in the App1 Properties exhibit. (Click the App1 Properties tab.)

  

  You configure self-service for App1 as shown in the App1 Self-service exhibit. (Click the App1 Self-service tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  No No No

  a) When you assign a group to an application, only users in the group will have access. The assignment does not cascade to nested groups. b) Tested in lab, existing owners will be replaced. Also direct assignment (resource owner) is path of least privilege. (replicated in test) c) Application setting 'visible to users' is set to No, then no users see this application on their My Apps portal and O365 launcher.

  Reference a) https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/assign-user-or-group-access-portal b) maybe https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-manage-groups c) https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-properties#visible-to-users

• Question 97:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that contains Azure AD Privileged Identity Management (PIM) role settings for the User administrator role as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 98:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1.

  User1 has the devices shown in the following table.

  

  On November 5, 2020, you create and enforce terms of use in contoso.com that has the following settings:

  Name: Terms1 Display name: Contoso terms of use Require users to expand the terms of use: On Require users to consent on every device: On Expire consents: On Expire starting on: December 10, 2020 Frequency: Monthly

  On November 15, 2020, User1 accepts Terms1 on Device3.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 99:

  HOTSPOT

  You have a custom cloud app named App1 that is registered in Azure Active Directory (Azure AD).

  App1 is configured as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 100:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that has the default App registrations settings. The tenant contains the users shown in the following table.

  

  You purchase two cloud apps named App1 and App2. The global administrator registers App1 in Azure AD.

  You need to identify who can assign users to App1, and who can register App2 in Azure AD.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: