Microsoft Microsoft Certifications SC-300 Questions & Answers

• Question 71:

  HOTSPOT

  You need to configure app registration in Azure AD to meet the delegation requirements.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-app-roles

• Question 72:

  HOTSPOT

  You need to create the LWGroup1 group to meet the management requirements.

  How should you complete the dynamic membership rule? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 73:

  You implement the planned changes for SSPR.

  What occurs when User3 attempts to use SSPR? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 74:

  HOTSPOT

  You need to configure the assignment of Azure AD licenses to the Litware users. The solution must meet the licensing requirements.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Litware recently added a custom user attribute named LWLicenses to the litware.com Active Directory forest. Litware wants to manage the assignment of Azure AD licenses by modifying the value of the LWLicenses attribute. Users who have the appropriate value for LWLicenses must be added automatically to a Microsoft 365 group that has the appropriate licenses assigned.

• Question 75:

  HOTSPOT

  You have a Microsoft 365 tenant.

  You need to Identity users who have leaked credentials. The solution must meet the following requirements:

  Identity sign-ms by users who are suspected of having leaked credentials.

  Flag the sign-ins as a high-risk event.

  Immediately enforce a control to mitigate the risk, while still allowing the user to access applications.

  What should you use? To answer, select the appropriate options m the answer area.

  Hot Area:

  

  Correct Answer:

  

• Question 76:

  HOTSPOT

  You need to support the planned changes and meet the technical requirements for MFA.

  Which feature should you use, and how long before the users must complete the registration? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 77:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that contains a user named User1. An administrator deletes User1. You need to identity the following:

  1.

  How many days after the account of User1 is deleted can you restore the account?

  2.

  Which is the least privileged role that can be used to restore User1?

  What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 78:

  HOTSPOT

  A user named User1 attempts to sign in to the tenant by entering the following incorrect passwords:

  1.

  Pa55w0rd12

  2.

  Pa55w0rd12

  3.

  Pa55w0rd12

  4.

  Pa55w.rd12

  5.

  Pa55w.rd123

  6.

  Pa55w.rd123

  7.

  Pa55w.rd123

  8.

  Pa55word12

  9.

  Pa55word12 10.Pa55word12 11.Pa55w.rd12

  You need to identify how many sign-in attempts were tracked for User1, and how User1 can unlock her account before the 300-second lockout duration expires.

  What should identify? To answer, select the appropriate

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment

• Question 79:

  HOTSPOT

  You have a Microsoft 365 tenant that has 5,000 users. One hundred of the users are executives. The executives have a dedicated support team.

  You need to ensure that the support team can reset passwords and manage multi-factor authentication (MFA) settings for only the executives. The solution must use the principle of least privilege.

  Which object type and Azure Active Directory (Azure AD) role should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 80:

  HOTSPOT

  You have an Azure subscription.

  You need to create two custom roles named Role1 and Role2. The solution must meet the following requirements:

  1.

  Users that are assigned Role1 can create or delete instances of Azure Container Apps.

  2.

  Users that are assigned Role2 can enforce adaptive network hardening rules.

  Which resource provider permissions are required for each role? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: