Microsoft Microsoft Certifications SC-300 Questions & Answers

• Question 81:

  HOTSPOT

  You have a Microsoft 365 tenant.

  You create a named location named HighRiskCountries that contains a list of high-risk countries.

  You need to limit the amount of time a user can stay authenticated when connecting from a high-risk country.

  What should you configure in a conditional access policy? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session

• Question 82:

  HOTSPOT

  You have a Microsoft 365 tenant.

  You need to identify users who have leaked credentials. The solution must meet the following requirements:

  1.

  Identify sign-ins by users who are suspected of having leaked credentials.

  2.

  Flag the sign-ins as a high-risk event.

  3.

  Immediately enforce a control to mitigate the risk, while still allowing the user to access applications.

  What should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks

• Question 83:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that has an Azure Active Directory Premium Plan 2 license. The tenant contains the users shown in the following table.

  

  You have the Device Settings shown in the following exhibit.

  

  User1 has the devices shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  Users may join 5 devices to Azure AD.

  Box 2: Yes

  Box 3: No

  An additional local device administrator has not been applied

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

• Question 84:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that contains three users named User1, User1, and User3,

  You create a group named Group1. You add User2 and User3 to Group1.

  You configure a role in Azure AD Privileged identity Management (PIM) as shown in the application administrator exhibit. (Click the application Administrator tab.)

  

  Group1 is configured as the approver for the application administrator role.

  You configure User2to be eligible for the application administrator role.

  For User1, you add an assignment to the Application administrator role as shown in the Assignment exhibit. (Click Assignment tab)

  

  For each of the following statement, select Yes if the statement is true, Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 85:

  HOTSPOT

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the objects shown in the following table.

  

  You install Azure AD Connect. You configure the Domain and OU filtering settings as shown in the Domain and OU Filtering exhibit. (Click the Domain and OU Filtering tab.) You configure the Filter users and devices settings as shown in the Filter Users and Devices exhibit. (Click the Filter Users and Devices tab.)

  

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

• Question 86:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that contains the following group:

  1.

  Name: Group1

  2.

  Members: User1, User2

  3.

  Owner: User3

  On January 15, 2021, you create an access review as shown in the exhibit. (Click the Exhibit tab.)

  

  Users answer the Review1 question as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 87:

  HOTSPOT

  Your company has a Microsoft 365 tenant.

  All users have computers that run Windows 10 and are joined to the Azure Active Directory (Azure AD) tenant.

  The company subscribes to a third-party cloud service named Service1. Service1 supports Azure AD authentication and authorization based on OAuth. Service1 is published to the Azure AD gallery.

  You need to recommend a solution to ensure that the users can connect to Service1 without being prompted for authentication. The solution must ensure that the users can access Service1 only from Azure AD-joined computers. The solution

  must minimize administrative effort.

  What should you recommend for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-how-applications-are-added https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/require-managed-devices

• Question 88:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

  

  For which users can you configure the Job title property and the Usage location property in Azure AD? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 89:

  HOTSPOT

  You have a Microsoft 365 tenant.

  You need to identify users who have leaked credentials. The solution must meet the following requirements.

  1.

  Identity sign-Ins by users who ate suspected of having leaked credentials.

  2.

  Rag the sign-ins as a high risk event.

  3.

  Immediately enforce a control to mitigate the risk, while still allowing the user to access applications.

  What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 90:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

  

  You plan to implement Azure AD Identity Protection.

  Which users can configure the user risk policy, and which users can view the risky users report? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: