Microsoft Microsoft Certifications SC-300 Questions & Answers

• Question 11:

  You need to configure the detection of multi-staged attacks to meet the monitoring requirements. What should you do?

  A. Customize the Azure Sentinel rule logic.

  B. Create a workbook.

  C. Add Azure Sentinel data connectors.

  D. Add an Azure Sentinel playbook.

  Correct Answer: A

• Question 12:

  You need to configure the MFA settings for users who connect from the Boston office. The solution must meet the authentication requirements and the access requirements. What should you include in the configuration?

  A. named locations that have a private IP address range

  B. named locations that have a public IP address range

  C. trusted IPs that have a public IP address range

  D. trusted IPs that have a private IP address range

  Correct Answer: C

  Location offer your country set, IP ranges MFA trusted IP and corporate network VPN gateway IP address: This is the public IP address of the VPN device for your on-premises network. The VPN device requires an IPv4 public IP address.

  Specify a valid public IP address for the VPN device to which you want to connect. It must be reachable by Azure

  Client Address space: List the IP address ranges that you want routed to the local onpremises network through this gateway. You can add multiple address space ranges. Make sure that the ranges you specify here do not overlap with ranges

  of other networks your virtual network connects to, or with the address ranges of the virtual network itself.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

• Question 13:

  You need to modify the settings of the User administrator role to meet the technical requirements. Which two actions should you perform for the role? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. Select Require justification on activation.

  B. Set all assignments to Active.

  C. Set all assignments to Eligible.

  D. Modify the Expire eligible assignments after setting.

  E. Select Require ticket information on activation.

  Correct Answer: AC

• Question 14:

  You need to resolve the issue of the sales department users. What should you configure for the Azure AD tenant?

  A. the User settings

  B. the Device settings

  C. the Access reviews settings

  D. Security defaults

  Correct Answer: B

• Question 15:

  You need to resolve the issue of the guest user invitations. What should you do for the Azure AD tenant?

  A. Configure the Continuous access evaluation settings.

  B. Modify the External collaboration settings.

  C. Configure the Access reviews settings.

  D. Configure a Conditional Access policy.

  Correct Answer: B

• Question 16:

  You need to implement the planned changes for Package!. Which users can create and manage the access review?

  A. User3 only

  B. User4 only

  C. User5 only

  D. User3 and User4

  E. User3 and User5

  F. User4and User5

  Correct Answer: C

• Question 17:

  You need to meet the authentication requirements for leaked credentials. What should you do?

  A. Enable password hash synchronization in Azure AD Connect.

  B. Configure Azure AD Password Protection.

  C. Configure an authentication method policy in Azure AD.

  D. Enable federation with PingFederate in Azure AD Connect.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/security/fundamentals/steps-secure-identity

• Question 18:

  You need to implement the planned changes for litware.com. What should you configure?

  A. Azure AD Connect cloud sync between the Azure AD tenant and litware.com

  B. Azure AD Connect to include the litware.com domain

  C. staging mode in Azure AD Connect for the litware.com domain

  Correct Answer: C

• Question 19:

  You need to resolve the issue of IT.Group1. What should you do first?

  A. Recreate the IT_Group 1 group.

  B. Change Membership type of IT.Group1 to Dynamic Device.

  C. Add an owner to IT_Group1.

  D. Change Membership type of IT.Group1 to Dynamic User.

  Correct Answer: B

• Question 20:

  You have a Microsoft 365 ES subscription that contains a user named User1. User1 is eligible for the Application administrator role.

  User1 needs to configure a new connector group for an application proxy.

  What should you to activate the role for User1?

  A. the Microsoft Defender for Cloud Apps portal

  B. the Microsoft 365 admin center

  C. the Azure Active Directory admin center

  D. the Microsoft 365 Defender portal

  Correct Answer: C