Microsoft Microsoft Certifications SC-300 Questions & Answers

• Question 61:

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.

  You need to ensure that users can request access to Site1. The solution must meet the following requirements:

  1.

  Automatically approve requests from users based on their group membership.

  2.

  Automatically remove the access after 30 days. What should you do?

  A. Create a Conditional Access policy.

  B. Create an access package.

  C. Configure Role settings in Azure AD Privileged Identity Management.

  D. Create a Microsoft Defender for Cloud Apps access policy.

  Correct Answer: B

• Question 62:

  You have an Azure subscription that contains a user named User1. You need to meet the following requirements:

  1.

  Prevent User1 from being added as an owner of newly registered apps.

  2.

  Ensure that User1 can manage the application proxy settings.

  3.

  Ensure that User1 can register apps.

  4.

  Use the principle of least privilege. Which role should you assign to User1?

  A. Application developer

  B. Cloud application administrator

  C. Service support administrator

  D. Application administrator

  Correct Answer: D

• Question 63:

  You create a Log Analytics workspace.

  You need to implement the technical requirements for auditing.

  What should you configure in Azure AD?

  A. Company branding

  B. Diagnostics settings

  C. External Identities

  D. App registrations

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/overview-monitoring

• Question 64:

  You need to sync the ADatum users. The solution must meet the technical requirements. What should you do?

  A. From the Microsoft Azure Active Directory Connect wizard, select Customize synchronization options.

  B. From PowerShell, run Set-ADSyncScheduler.

  C. From PowerShell, run Start-ADSyncSyncCycle.

  D. From the Microsoft Azure Active Directory Connect wizard, select Change user sign-in.

  Correct Answer: A

  You need to select Customize synchronization options to configure Azure AD Connect to sync the Adatum organizational unit (OU).

• Question 65:

  You need to meet the planned changes for the User administrator role. What should you do?

  A. Create an access review.

  B. Create an administrative unit.

  C. Modify Active assignments.

  D. Modify Role settings.

  Correct Answer: D

  Role Setting details is where you need to be: Role setting details - User Administrator Privileged Identity Management | Azure AD roles Default Setting State Require justification on activation Yes Require ticket information on activation No On activation, require Azure MFA Yes Require approval to activate No Approvers None

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-add-role-to-user?tabs=new

• Question 66:

  You need to locate licenses to the A. Datum users. The solution must need the technical requirements. Which type of object should you create?

  A. A Dynamic User security group

  B. An OU

  C. A distribution group

  D. An administrative unit

  Correct Answer: A

• Question 67:

  HOTSPOT

  You need to implement password restrictions to meet the authentication requirements.

  You install the Azure AD password Protection DC agent on DC1.

  What should you do next? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 68:

  HOTSPOT

  You need to meet the technical requirements for the probability that user identities were compromised.

  What should the users do first, and what should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-policies

• Question 69:

  HOTSPOT

  You need to identify which roles to use for managing role assignments. The solution must meet the delegation requirements.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

• Question 70:

  HOTSPOT

  You need to implement on-premises application and SharePoint Online restrictions to meet the authentication requirements and the access requirements.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/sharepoint/app-enforced-restrictions https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session