Microsoft Microsoft Certifications SC-300 Questions & Answers

• Question 21:

  You have a Microsoft 365 ES subscription that user Microsoft Defender for Cloud Apps and Yammer.

  You need prevent users from signing in to Yammer from high-risk locations.

  What should you do in the Microsoft Defender for Cloud Apps portal?

  A. Create an access Policy.

  B. Create an activity policy.

  C. Unsanction Yammer.

  D. Create an anomaly detection policy.

  Correct Answer: A

• Question 22:

  You need implement the planned changes for application access to organizational data. What should you configure?

  A. authentication methods

  B. the User consent settings

  C. access packages

  D. an application proxy

  Correct Answer: D

• Question 23:

  You have the Azure resources show in the following table.

  

  Which identities can you assign the Contributor role for RG1?

  A. User1 only

  B. User1 and Group1 only

  C. User1 and VW1 only

  D. User1, VM1, and App1 only

  E. User1, Group1, Vm1, and App1

  Correct Answer: E

• Question 24:

  You have a Microsoft 365 subscription that contains a user named User1.

  You need to ensure that User1 can create access reviews for Azure AD roles. The solution must use the principal of least privilege.

  Which role should you assign to User1?

  A. Privileged role administrator

  B. Identify Governance administrator

  C. User administrator

  D. User Access Administrate

  Correct Answer: B

• Question 25:

  You have a Microsoft 365 ES subscription.

  You create a user namedUser1.

  You need to ensure that User1 can update the status of identity Secure Score improvement actions.

  Solution: You assign the Security Operator role User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 26:

  You have an Azure AD tenant

  You configure User consent settings to allow users to provide consent to apps from verified publishers.

  You need to ensure that the users can only provide consent to apps that require low impact permissions.

  What should you do?

  A. Create an access package.

  B. Configure permission classifications.

  C. Create an enterprise application collection.

  D. Create an access review.

  Correct Answer: B

• Question 27:

  You have a Microsoft 365 E5 subscription.

  You create a user named User1.

  You need to ensure that User1 can update the status of identity Secure Score improvement actions.

  Solution: You assign the SharePoint Administrator role to User1

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 28:

  Your network contains an on-premises Active Directory domain that syncs to an Azure AD tenant.

  Users sign in to computers that run Windows 10 and are joined to the domain.

  You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).

  You need to configure the Windows 10 computers to support Azure AD Seamless SSO.

  What should you do?

  A. Modify the Local intranet zone settings

  B. Configure Sign-in options from the Settings app.

  C. Enable Enterprise State Roaming.

  D. Install the Azure AD Connect Authentication Agent.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start

• Question 29:

  You have a Microsoft 365 tenant.

  You have an Active Directory domain that syncs to the Azure Active Directory {Azure AD) tenant.

  Users connect to the internet by using a hardware firewall at your company. The users authenticate to the firewall by using their Active Directory credentials.

  You plan to manage access to external applications by using Azure AD.

  You need to use the firewall logs to create a list of unmanaged external applications and the users who access them.

  What should you use to gather the information?

  A. Cloud App Discovery in Microsoft Defender for Cloud Apps

  B. enterprise applications in Azure AD

  C. access reviews in Azure AD

  D. Application Insights in Azure Monitor

  Correct Answer: A

• Question 30:

  You have an Azure AD tenant named contoso.com that contains the resources shown in the following table. You create a user named Admin 1.

  

  You need to ensure that Admin can enable Security defaults for contoso.com. What should you do first?

  A. Configure Identity Governance.

  B. Delete Package1.

  C. Delete CAPolicy1.

  D. Assign Admin1 the Authentication administrator role for Au1

  Correct Answer: D

  To enable Security defaults for contoso.com, you should first sign in to the Azure portal as a security administrator, Conditional Access administrator, or global administrator. Then, browse to Azure Active Directory > Properties and select Manage security defaults. Set the Enable security defaults toggle to Yes and select Save. After that, you can assign Admin1 the Identity Administrator role for Au1 to enable them to manage security defaults for the tenant. https://practical365.com/what-are-azure-ad-security-defaults-and-should-you-use-them/