You have a Microsoft 365 E5 subscription.You need to create a Microsoft Defender for Cloud Apps session policy.What should you do first?

From the Microsoft Defender for Cloud Apps portal, select User monitoring.

From the Microsoft Defender for Cloud Apps portal, select App onboarding/maintenance

From the Azure Active Directory admin center, create a Conditional Access policy.

From the Microsoft Defender for Cloud Apps portal, create a continuous report.

You need to meet the authentication requirements for leaked credentials.What should you do?

Enable password hash synchronization in Azure AD Connect.

Enable federation with PingFederate in Azure AD Connect.

Configure Azure AD Password Protection.

Enable password hash synchronization in Azure AD Connect.

Configure an authentication method policy in Azure AD.

You have an Azure subscription that contains the custom roles shown in the following table. You need to create a custom Azure subscription role named Role3 by using the Azure portal. Role3 will use the baseline permissions of an existing role. Which roles can you clone to create Role3?

built-in Azure subscription roles and Role2 only

built-in Azure subscription roles only

built-in Azure subscription roles and Role2 only

built-in Azure subscription roles and built-in Azure AD roles only

Role1, Role2 built-in Azure subscription roles, and built-in Azure AD roles

You have a Microsoft 365 tenant.You have an Active Directory domain that syncs to the Azure Active Directory {Azure AD) tenant.Users connect to the internet by using a hardware firewall at your company. The users authenticate to the firewall by using their Active Directory credentials.You plan to manage access to external applications by using Azure AD.You need to use the firewall logs to create a list of unmanaged external applications and the users who access them.What should you use to gather the information?

Cloud App Discovery in Microsoft Defender for Cloud Apps

enterprise applications in Azure AD

Application Insights in Azure Monitor

You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.You need to ensure that User1 can create new catalogs and add resources to the catalogs they own.What should you do?

From the identity Governance blade, modify the Entitlement management settings.

From the Roles and administrators blade, modify the Service support administrator role.

From the identity Governance blade, modify the Entitlement management settings.

From the Identity Governance blade, modify the roles and administrators for the General catalog

From the Roles and administrators blade, modify the Groups administrator role.

You need to resolve the issue of the guest user invitations. What should you do for the Azure AD tenant?

Modify the External collaboration settings.

Configure the Continuous access evaluation settings

Modify the External collaboration settings.

Configure the Access reviews settings

Configure a Conditional Access policy.

You have an Azure AD tenant that contains two users named User1 and User2. You plan to perform the following actions:• Create a group named Group 1.• Add User1 and User 2 to Group1.• Assign Azure AD roles to Group1.You need to create Group1.Which two settings can you use? Each correct answer presents a complete solutionNOTE: Each correct selection is worth one point

Group type Security Membership type: Assigned

Group type: Microsoft 365 Membership type: Assigned

Group type: Microsoft 365 Membership type: Dynamic User

Group type: Security Membership type: Dynamic Device

Group type Security Membership type: Dynamic User

Group type Security Membership type: Assigned

Group type: Microsoft 365 Membership type: Assigned

You create a conditional access policy that blocks access when a user triggers a high-seventy sign-in alert. You need to test the policy under the following conditions;• A user signs in from another country.• A user triggers a sign-in risk.What should you use to complete the test?

the Conditional Access What If tool

the activity logs in Microsoft Defender for Cloud Apps

You have a Microsoft 36S subscription. The subscription contains users that use Microsoft Outlook 2016 and Outlook 2013 clients. You need to implement tenant restrictions. The solution must minimize administrative effort. What should you do first?

Upgrade the Outlook 2013 clients to Outlook 2016.

Configure the Outlook 2013 clients to use modem authentication.

Upgrade all the Outlook clients to Outlook 2019.

From the Exchange admin center, configure Organization Sharing.

Microsoft SC-300 Practice Test 4 - Free Online Exam Questions 121-160

HOTSPOT

You have an on-premises datacenter that contains the hosts shown in the following table.

Microsoft SC-300 image Question 93 108185 10052024010905000000

You have an Azure Active Directory (Azure AD) tenant that syncs to the Active Directory forest. Multi-factor authentication (MFA) is enforced for Azure AD.

You need to ensure that you can publish App1 to Azure AD users.

What should you configure on Server and Firewall1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Become a Premium Member for full access

Unlock Premium Member

Microsoft SC-300 Practice Test 4

Question

Microsoft SC-300 Practice Tests

Practice Tests