Your company purchases 2 new Microsoft 365 ES subscription and an app named App.You need to create a Microsoft Defender for Cloud Apps access policy for App1.What should you do you first? (Choose Correct Answer based on Microsoft Identity and Access Administrator at microsoft.com)

Configure a Conditional Access policy to use app-enforced restrictions.

Configure a Token configuration for App1.

Configure a Conditional Access policy to use app-enforced restrictions.

Configure a Conditional Access policy to use Conditional Access App Control.

You have an Azure AD tenant named contoso.com that contains the resources shown in the following table.You create a user named Admin 1. You need to ensure that Admin can enable Security defaults for contoso.com.What should you do first?

Assign Admin1 the Authentication administrator role for Au1

Your network contains an on-premises Active Directory domain that syncs to an Azure AD tenant.Users sign in to computers that run Windows 10 and are joined to the domain.You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).You need to configure the Windows 10 computers to support Azure AD Seamless SSO.What should you do?

Configure Sign-in options from the Settings app.

Modify the Local intranet zone settings

Configure Sign-in options from the Settings app.

Enable Enterprise State Roaming.

Install the Azure AD Connect Authentication Agent.

You have an Azure AD tenant that uses Azure AD Identity Protection and contains the resources shown in the following table. Azure Multi-Factor Authentication (MFA) is enabled for all users.User1 triggers a medium severity alert that requires additional investigation.You need to force User1 to reset his password the next time he signs in. the solution must minimize administrative effort.What should you do?

Configure a sign-in risk policy.

Reconfigure the user risk policy to trigger on medium or low severity.

Reset the Azure MFA registration for User1.

You have an Azure AD tenant that contains a user named User1 and the conditional access policies shown in the following table. You need to evaluate which policies will be applied User1 when User1 attempts to sign-in from various IP addresses.Which feature should you use?

the Microsoft 365 network connectivity test tool

You have a Microsoft 365 E5 subscription that contains a web app named App1.Guest users are regularly granted access to App1.You need to ensure that the guest users that have NOT accessed App1 during the past 30 days have their access removed the solution must minimize administrative effort.What should you configure?

an access review for application access

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.You need to ensure that users can request access to Site. the solution must meet the following requirements.• Automatically approve requests from users based on their group membership.• Automatically remove the access after 30 daysWhat should you do?

Create a Conditional Access policy.

Configure Role settings in Azure AD Privileged Identity Management.

Create a Microsoft Defender for Cloud Apps access policy.

You have an Azure subscription that contains an Azure SQL database named db1.You deploy an Azure App Service web app named App1 that provide product information to users that connect to App1 anonymously.You need to provide App1 with Access to db1. The solution must meet the following requirements:* Credentials must only be available to App1.* Administrative effort must be minimized.Which type of credentials should you use?

a system-assigned managed identity

a user-assigned managed identity

a system-assigned managed identity

You have an Azure AD tenantYou configure User consent settings to allow users to provide consent to apps from verified publishers.You need to ensure that the users can only provide consent to apps that require low impact permissions.What should you do?

Configure permission classifications.

Create an enterprise application collection.

You have a Microsoft 365 subscription that contains a user named User1.You need to ensure that User1 can create access reviews for Azure AD roles. The solution must use the principal of least privilege.Which role should you assign to User1?

Identify Governance administrator

You have a Microsoft 365 ES subscription that contains a user named User1. User1 is eligible for the Application administrator role.User1 needs to configure a new connector group for an application proxy.What should you to activate the role for User1?

the Azure Active Directory admin center

the Microsoft Defender for Cloud Apps portal

the Azure Active Directory admin center

the Microsoft 365 Defender portal

You have a Microsoft 365 ES subscription that user Microsoft Defender for Cloud Apps and Yammer.You need prevent users from signing in to Yammer from high-risk locations.What should you do in the Microsoft Defender for Cloud Apps portal?

Create an anomaly detection policy.

Microsoft SC-300 Practice Test 5 - Free Online Exam Prep & Questions

Question 1 / 40

You have an Azure subscription that contains a user named User1. You need to meet the following requirements:

• Prevent User1 from being added as an owner of newly registered apps.

• Ensure that User1 can manage the application proxy settings.

• Ensure that User2 can register apps.

• Use the principle of least privilege.

Which role should you assign to User1?

Application developer

Cloud application administrator

Service support administrator

Application administrator

Comment (0)

Microsoft SC-300 Practice Test 5

Question

Microsoft SC-300 Practice Tests

Practice Tests