Microsoft Microsoft Certifications SC-300 Questions & Answers

• Question 41:

  You create a conditional access policy that blocks access when a user triggers a high-severity sign-in alert. You need to test the policy under the following conditions:

  1.

  A user signs in from another country.

  2.

  A user triggers a sign-in risk. What should you use to complete the test?

  A. the Conditional Access What If tool

  B. sign-ins logs in Azure Active Directory (Azure AD)

  C. the activity logs in Microsoft Defender for Cloud Apps

  D. access reviews in Azure Active Directory (Azure AD)

  Correct Answer: A

• Question 42:

  You have an Azure Active Directory (Azure AD) Azure AD tenant.

  You need to bulk create 25 new user accounts by uploading a template file.

  Which properties are required in the template file?

  A. displayName, identityIssuer, usageLocation, and userType

  B. accountEnabled, givenName, surname, and userPrincipalName

  C. accountEnabled, displayName, userPrincipalName, and passwordProfile

  D. accountEnabled, passwordProfile, usageLocation, and userPrincipalName

  Correct Answer: C

• Question 43:

  Your company has two divisions named Contoso East and Contoso West. The Microsoft 365 identity architecture for both divisions is shown in the following exhibit.

  

  You need to assign users from the Contoso East division access to Microsoft SharePoint Online sites in the Contoso West tenant. The solution must not require additional Microsoft 365 licenses. What should you do?

  A. Configure Azure AD Application Proxy in the Contoso West tenant.

  B. Invite the Contoso East users as guests in the Contoso West tenant.

  C. Deploy a second Azure AD Connect server to Contoso East and configure the server to sync the Contoso East Active Directory forest to the Contoso West tenant.

  D. Configure the existing Azure AD Connect server in Contoso East to sync the Contoso East Active Directory forest to the Contoso West tenant.

  Correct Answer: B

• Question 44:

  You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

  

  You have an administrative unit named Au1. Group1, User2, and User3 are members of Au1.

  User5 is assigned the User administrator role for Au1.

  For which users can User5 reset passwords?

  A. User1, User2, and User3

  B. User1 and User2 only

  C. User3 and User4 only

  D. User2 and User3 only

  Correct Answer: D

• Question 45:

  You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

  

  You create a dynamic user group and configure the following rule syntax.

  user.usageLocation -in ["US","AU"] -and (user.department -eq "Sales") -and -not (user.jobTitle -eq "Manager") –or (user. jobTitle -eq "SalesRep")

  Which users will be added to the group?

  A. User1 only

  B. User2 only

  C. User3 only

  D. User1 and User2 only

  E. User1 and User3 only

  F. User1, User2, and User3

  Correct Answer: D

• Question 46:

  You have a Microsoft 365 E5 subscription.

  You create a user named User1.

  You need to ensure that User1 can update the status of Identity Secure Score improvement actions.

  Solution: You assign the Exchange Administrator role to User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 47:

  You have an Azure AD tenant that contains a user named User1.

  User1 needs to manage license assignments and reset user passwords.

  Which role should you assign to User1?

  A. Helpdesk administrator

  B. Billing administrator

  C. License administrator

  D. User administrator

  Correct Answer: D

• Question 48:

  You have a Microsoft 365 E5 subscription.

  You create a user named User1.

  You need to ensure that User1 can update the status of Identity Secure Score improvement actions.

  Solution: You assign the User Administrator role to User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 49:

  You have a Microsoft 365 tenant.

  All users have mobile phones and laptops.

  The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptop to a wired network that has internet access.

  You plan to implement multi-factor authentication (MFA).

  Which MFA authentication method can the users use from the remote location?

  A. a notification through the Microsoft Authenticator app

  B. email

  C. security questions

  D. a verification code from the Microsoft Authenticator app

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-authenticator-app#verification-code-from-mobile-app

• Question 50:

  You have an Azure Active Directory (Azure AD) tenant that uses Azure AD Identity Protection and contains the resources shown in the following table.

  

  Azure Multi-factor Authentication (MFA) is enabled for all users.

  User1 triggers a medium severity alert that requires additional investigation.

  You need to force User1 to reset his password the next time he signs in.

  The solution must minimize administrative effort.

  What should you do?

  A. Reconfigure the user risk, policy to trigger on medium or low severity.

  B. Mark User1 as compromised.

  C. Reset the Azure MIFA registration for User1.

  D. Configure a sign-in risk policy.

  Correct Answer: B