Microsoft Microsoft Certifications SC-300 Questions & Answers

• Question 111:

  DRAG DROP

  You have an on-premises Microsoft Exchange organization that uses an SMTP address space of contoso.com.

  You discover that users use their email address for self-service sign-up to Microsoft 365 services.

  You need to gain global administrator privileges to the Azure Active Directory (Azure AD) tenant that contains the self-signed users.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 112:

  DRAG DROP

  You have a new Microsoft 365 tenant that uses a domain name of contoso.onmicrosoft.com.

  You register the name contoso.com with a domain registrar.

  You need to use contoso.com as the default domain name for new Microsoft 365 users.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://practical365.com/configure-a-custom-domain-in-office-365/

• Question 113:

  DRAG DROP

  You have a Microsoft 365 E5 tenant.

  You purchase a cloud app named App1.

  You need to enable real-time session-level monitoring of App1 by using Microsoft Cloud App Security.

  In which order should you perform the actions? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference - https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-blocking-data-downloads-via-microsoft-cloud-app/ba-p/326357

• Question 114:

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. Site1 hosts PDF files.

  You need to prevent users from printing the files directly from Site1.

  Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

  A. activity policy

  B. access policy

  C. file policy

  D. session policy

  Correct Answer: D

• Question 115:

  You have an Azure Active Directory (Azure AD) tenant named Contoso that contains a terms of use (Toll) named Terms and an access package. Contoso users collaborate with an external organization named Fabrikam. Fabrikam users must

  accept Terms1 before being allowed to use the access package.

  You need to identify which users accepted or declined Terms.

  What should you use?

  A. sign-in logs

  B. the Usage and Insights report

  C. provisioning logs

  D. audit logs

  Correct Answer: D

• Question 116:

  You have a Microsoft 365 E5 subscription that contains a web app named App1.

  Guest users are regularly granted access to App1.

  You need to ensure that the guest users that have NOT accessed App1 during the past 30 days have their access removed. The solution must minimize administrative effort.

  What should you configure?

  A. a Conditional Access policy

  B. a compliance policy

  C. a guest access review

  D. an access review for application access

  Correct Answer: D

• Question 117:

  You have an Azure AD tenant that contains a user named User1 and a registered app named App1.

  User1 deletes the app registration of App1.

  You need to restore the app registration.

  What is the maximum number of days you have to restore the app registration from when it was deleted?

  A. 14

  B. 30

  C. 60

  D. 180

  Correct Answer: B

• Question 118:

  Your company has an Azure AD tenant that contains the users shown in the following table.

  

  You have the app registrations shown in the following table.

  

  A company policy prevents changes to user permissions.

  Which user can create appointments in the calendar of each user at the company?

  A. User1

  B. User2

  C. User3

  D. User4

  Correct Answer: B

• Question 119:

  You have a Microsoft 365 E5 subscription.

  Users authorize third-party cloud apps to access their data.

  You need to configure an alert that will be triggered when an app requires high permissions and is authorized by more than 20 users.

  Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

  A. anomaly detection policy

  B. OAuth app policy

  C. access policy

  D. activity policy

  Correct Answer: B

  https://learn.microsoft.com/en-us/defender-cloud-apps/app-permission-policy

  Reason :In addition to the existing investigation of OAuth apps connected to your environment, you can set permission policies so that you get automated notifications when an OAuth app meets certain criteria. For example, you can automatically be alerted when there are apps that require a high permission level and were authorized by more than 50 users.

• Question 120:

  You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.

  You need to ensure that User1 can create new catalogs and add resources to the catalogs they own.

  What should you do?

  A. From the Roles and administrators blade, modify the Service support administrator role.

  B. From the identity Governance blade, modify the Entitlement management settings.

  C. From the Identity Governance blade, modify the roles and administrators for the General catalog

  D. From the Roles and administrators blade, modify the Groups administrator role.

  Correct Answer: B