You have an Azure Active Directory (Azure AD) tenant.You configure self-service password reset (SSPR) by using the following settings:• Require users to register when signing in: Yes• Number of methods required to reset: 1What is a valid authentication method available to users?

an email to an address in your organization

You have a Microsoft 365 tenant.You currently allow email clients that use Basic authentication to conned to Microsoft Exchange Online.You need to ensure that users can connect t to Exchange only run email clients that use Modern authentication protocols.What should you implement?You need to ensure that use Modern authentication

an application control profile in Microsoft Endpoint Manager

a compliance policy in Microsoft Endpoint Manager

a conditional access policy in Azure Active Directory (Azure AD)

an application control profile in Microsoft Endpoint Manager

an OAuth policy in Microsoft Cloud App Security

Your company has two divisions named Contoso East and Contoso West. The Microsoft 365 identity architecture tor both divisions is shown in the following exhibit. You need to assign users from the Contoso East division access to Microsoft SharePoint Online sites in the Contoso West tenant. The solution must not require additional Microsoft 3G5 licenses.What should you do?

Invite the Contoso East users as guests in the Contoso West tenant.

Configure The exiting Azure AD Connect server in Contoso Cast to sync the Contoso East Active Directory forest to the Contoso West tenant.

Configure Azure AD Application Proxy in the Contoso West tenant.

Deploy a second Azure AD Connect server to Contoso East and configure the server to sync the Contoso East Active Directory forest to the Contoso West tenant.

Invite the Contoso East users as guests in the Contoso West tenant.

You have a Microsoft Exchange organization that uses an SMTP' address space of contoso.com.Several users use their contoso.com email address for self-service sign up to Azure Active Directory (Azure AD).You gain global administrator privileges to the Azure AD tenant that contains the self-signed users.You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services.Which PowerShell cmdlet should you run?

Set-MsolDomainFederationSettings

Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant- Users sign in to computers that run Windows 10 and are joined to the domain.You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).You need to configure the computers for Azure AD Seamless SSO.What should you do?

Modify the Intranet Zone settings.

Enable Enterprise State Roaming.

Install the Azure AD Connect Authentication Agent.

Modify the Intranet Zone settings.

You have an Azure Active Directory (Azure AD) tenant that contains the following objects:A device named Device1Users named User1, User2, User3, User4, and User5Groups named Group1, Group2, Group3, Group4, and Group5The groups are configured as shown in the following table. To which groups can you assign a Microsoft Office 365 Enterprise E5 license directly?

Group1, Group2, Group3, Group4, and Group5

Group1, Group2, Group4, and Group5 only

You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users.From the Groups blade in the Azure Active Directory admin center, you assign Microsoft 365 Enterprise E5 licenses to the users.You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort.What should you use?

the Licenses blade in the Azure Active Directory admin center

the Identity Governance blade in the Azure Active Directory admin center

the Licenses blade in the Azure Active Directory admin center

the Set-WindowsProductKey cmdlet

You have an Azure Active Directory (Azure AD) tenant that contains the objects shown in the following table. Which objects can you add as members to Group3?

User1, User2, Group1 and Group2

You have an Azure Active Directory (Azure AD) tenant that contains a user named SecAdmin1.SecAdmin1 is assigned the Security administrator role.SecAdmin1 reports that she cannot reset passwords from the Azure AD Identity Protection portal.You need to ensure that SecAdmin1 can manage passwords and invalidate sessions on behalf of nonadministrative users. The solution must use the principle of least privilege.Which role should you assign to SecAdmin1?

Privileged authentication administrator

You configure Azure Active Directory (Azure AD) Password Protection as shown in the exhibit. (Click the Exhibit tab.) You are evaluating the following passwords:Pr0jectlitw@reT@ilw1ndC0nt0s0Which passwords will be blocked?

C0nt0s0, Pr0jectlitw@re, and T@ilw1nd

Pr0jectlitw@re and T@ilw1nd only

C0nt0s0, Pr0jectlitw@re, and T@ilw1nd

C0nt0s0 and Pr0jectlitw@re only

You have a Microsoft 365 tenant.All users have mobile phones and laptops.The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity.While working from the remote locations, the users connect their laptop to a wired network that has internet access.You plan to implement multi-factor authentication (MFA).Which MFA authentication method can the users use from the remote location?

a verification code from the Microsoft Authenticator app

You configure a new Microsoft 365 tenant to use a default domain name of contoso.com.You need to ensure that you can control access to Microsoft 365 resources by using conditional access policies.What should you do first?

Disable the User consent settings.

Configure a multi-factor authentication (MFA) registration policy.

Configure password protection for Windows Server Active Directory.

Your company has a Microsoft 365 tenant.The company has a call center that contains 300 users. In the call center, the users share desktop computers and might use a different computer every day. The call center computers are NOT configured for biometric identification.The users are prohibited from having a mobile phone in the call center.You need to require multi-factor authentication (MFA) for the call center users when they access Microsoft 365 services.What should you include in the solution?

the Microsoft Authenticator app

Windows Hello for Business authentication

You have an Azure Active Directory (Azure AD) tenant named contoso.com.All users who run applications registered in Azure AD are subject to conditional access policies.You need to prevent the users from using legacy authentication.What should you include in the conditional access policies to filter out legacy authentication attempts?

a cloud apps or actions condition

You have a Microsoft 365 tenant.All users have computers that run Windows 10. Most computers are company-owned and joined to Azure Active Directory (Azure AD). Some computers are user-owned and are only registered in Azure AD.You need to prevent users who connect to Microsoft SharePoint Online on their user-owned computer from downloading or syncing files. Other users must NOT be restricted.Which policy type should you create?

an Azure AD conditional access policy that has session controls configured

a Microsoft Cloud App Security activity policy that has Microsoft Office 365 governance actions configured

an Azure AD conditional access policy that has session controls configured

an Azure AD conditional access policy that has client apps conditions configured

a Microsoft Cloud App Security app discovery policy that has governance actions configured

You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory domain.The on-premises network contains a VPN server that authenticates to the on-premises Active Directory domain. The VPN server does NOT support Azure Multi-Factor Authentication (MFA).You need to recommend a solution to provide Azure MFA for VPN connections.What should you include in the recommendation?

an Azure AD Password Protection proxy

a pass-through authentication proxy

You have a Microsoft 365 tenant.The Azure Active Directory (Azure AD) tenant syncs to an on-premises Active Directory domain. The domain contains the servers shown in the following table. The domain controllers are prevented from communicating to the internet.You implement Azure AD Password Protection on Server1 and Server2.You deploy a new server named Server4 that runs Windows Server 2019.You need to ensure that Azure AD Password Protection will continue to work if a single server fails.What should you implement on Server4?

the Azure AD Password Protection proxy service

Password Change Notification Service (PCNS)

the Azure AD Password Protection proxy service

You have a Microsoft 365 tenant.The Azure Active Directory (Azure AD) tenant syncs to an on-premises Active Directory domain.Users connect to the internet by using a hardware firewall at your company. The users authenticate to the firewall by using their Active Directory credentials.You plan to manage access to external applications by using Azure AD.You need to use the firewall logs to create a list of unmanaged external applications and the users who access them.What should you use to gather the information?

Cloud App Discovery in Microsoft Cloud App Security

Application Insights in Azure Monitor

Cloud App Discovery in Microsoft Cloud App Security

enterprise applications in Azure AD

You have a Microsoft 365 tenant.The Azure Active Directory (Azure AD) tenant syncs to an on-premises Active Directory domain.You plan to create an emergency-access administrative account named Emergency1. Emergency1 will be assigned the Global administrator role in Azure AD. Emergency1 will be used in the event of Azure AD functionality failures and on- premises infrastructure failures.You need to reduce the likelihood that Emergency1 will be prevented from signing in during an emergency.What should you do?

Configure Azure Monitor to generate an alert if Emergency1 is modified or signs in.

Require Azure AD Privileged Identity Management (PIM) activation of the Global administrator role for Emergency1.

Configure a conditional access policy to restrict sign-in locations for Emergency1 to only the corporate network.

Configure a conditional access policy to require multi-factor authentication (MFA) for Emergency1.

You have a Microsoft 365 tenant.In Azure Active Directory (Azure AD), you configure the terms of use.You need to ensure that only users who accept the terms of use can access the resources in the tenant. Other users must be denied access.What should you configure?

a conditional access policy in Azure AD

an access policy in Microsoft Cloud App Security.

Terms and conditions in Microsoft Endpoint Manager.

a conditional access policy in Azure AD

a compliance policy in Microsoft Endpoint Manager

You have an Azure Active Directory (Azure AD) tenant that contains the groups shown in the following table. For which groups can you create an access review?

Group1, Group2, Group4, and Group5 only

Group1, Group2, Group3, Group4 and Group5

Your company recently implemented Azure Active Directory (Azure AD) Privileged Identity Management (PIM).While you review the roles in PIM, you discover that all 15 users in the IT department at the company have permanent security administrator rights.You need to ensure that the IT department users only have access to the Security administrator role when required.What should you configure for the Security administrator role assignment?

Expire eligible assignments after from the Role settings details

Expire active assignments after from the Role settings details

Microsoft SC-300 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory forest. The tenant-uses through authentication.

A corporate security policy states the following:

Domain controllers must never communicate directly to the internet.

Only required software must be- installed on servers.

The Active Directory domain contains the on-premises servers shown in the following table.

Microsoft SC-300 image Question 13 108105 10052024010905000000

You need to ensure that users can authenticate to Azure AD if a server fails.

On which server should you install an additional pass-through authentication agent?

Server2

Server4

Server1

Server3

Comment (0)

Microsoft SC-300 Practice Test 2

Question

Microsoft SC-300 Practice Tests

Practice Tests