You have an Azure AD tenant that contains an access package named Package1 and a user named User1. Package1 is configured as shown in the following exhibit. You need to ensure that User1 can modify the review frequency of Package1. The solution must use the principle of least privilege.Which role should you assign to User1?

External Identity Provider administrator

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.You need to identify which users access Facebook from their devices and browsers. The solution must minimize administrative effort.What should you do first?

Create a Defender for Cloud Apps access policy.

From the Microsoft Defender for Cloud Apps portal, unsanctioned Facebook.

Create an app configuration policy in Microsoft Endpoint Manager.

Create a Defender for Cloud Apps access policy.

Create a Conditional Access policy.

You have an Azure AD tenant.You deploy a new enterprise application named App1.When users attempt to provide App1 with access to the tenant, the attempt fails.You need to ensure that the users can request admin consent for App1. The solution must follow the principle of least privilege.What should you do first?

Enable admin consent requests for the tenant.

Designate a reviewer of admin consent requests for the tenant.

From the Permissions settings of App1, grant App1 admin consent for the tenant

Create a Conditional Access policy for Appl.

You have a Microsoft 365 E5 subscription.You purchase the app governance add-on license.You need to enable app governance integration.Which portal should you use?

the Microsoft Defender for Cloud Apps portal

the Azure Active Directory admin center

the Microsoft Purview compliance portal

You have an Azure AD tenant that has multi-factor authentication (MFA) enforced and self-service password reset (SSPR) enabled.You enable combined registration in interrupt mode.You create a new user named User1.Which two authentication methods can User1 use to complete the combined registration process? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

the Microsoft Authenticator app

You have an Azure AD tenant that contains the users shown in the following table. You need to compare the role permissions of each user. The solution must minimize administrative effort.What should you use?

the Microsoft Entra admin center

the Microsoft 365 Defender portal

the Microsoft Entra admin center

the Microsoft Purview compliance portal

You have an Azure subscription that contains an Azure Automation account named Automation1 and an Azure key vault named Vault1. Vault1 contains a secret named Secret 1.You enable a system-assigned managed identity for Automation1.You need to ensure that Automation! can read the contents of Secret1. The solution must meet the following requirements:* Prevent Automation1 from accessing other secrets stored in Vault1.* Follow the principle of least privilege.What should you do?

From Vault1, configure the Access control (1AM) settings.

From Automation1, configure the Identity settings.

From Secret1, configure the Access control (1AM) settings

From Automation1, configure the Run as accounts settings.

You have three Azure subscriptions that are linked to a single Microsoft Entra tenant.You need to evaluate and remediate the risks associated with highly privileged accounts. The solution must minimize administrative effort.What should you use?

Privileged Identify Management (PIM)

Microsoft Entra Permissions Management

You have an Azure subscription named Sub1 that contains a virtual machine named VM1.You need to enable Microsoft Entra login for VM1 and configure VM1 to access the resources in Sub1.Which type of identity should you assign to VM1?

system-assigned managed identity

You have a Microsoft 365 subscription.You plan to deploy an app named App1 that will have the following configurations:* Will be registered in Microsoft Entra* Will run as a service without user interaction* Will collect audit logs associated with user sign-ins* Will access resources by using the Microsoft Graph APIYou need to ensure that App1 can access Microsoft Graph.What should you use?

a custom role-based access control (RBAC) role

a built-in role-based access control (RBAC) role

You have an Azure subscription named Sub1 that contains a user named User1.You need to ensure that User1 can purchase a Microsoft Entra Permissions Management license for Sub1. The solution must follow the principle of least privilege.Which role should you assign to User1?

Permissions Management Administrator

You have an Azure subscription that contains a user named User1. The subscription is onboarded to Microsoft Entra Permissions Management. You need to provide User! with access to Permissions Management. The solution must meet the following requirements:* Follow the principle of least privilege.* Minimize administrative effort.What should you do first?

From the Microsoft Entra admin center, assign a role to User1.

From the Microsoft Entra admin center, create a security group.

From the Role/Policy Template subtab of Permissions Management, create a template.

From the Microsoft Entra admin center, assign a role to User1.

From the My Requests subtab of Permissions Management, create a new request.

You have an Azure subscription named Sub1 that uses Microsoft Entra Permissions Management. Sub1 contains a user named User1. User1 is granted multiple permissions across Sub1.You need to replace all the permissions granted to User1 with read-only permissions. The solution must minimize administrative effort.What should you do on the Remediation tab in Permissions Management?

From the Permissions subtab, use a quick action.

From the Roles/Policies subtab. create a role.

From the My Requests subtab, create a new request.

From the Permissions subtab, use a quick action.

From the Role/Policy Template subtab. create a template.

Microsoft SC-300 Practice Test 6 - Free Online Exam Prep & Questions

HOTSPOT

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

Microsoft SC-300 image Question 173 108265 10052024010905000000

The users are assigned the roles shown in the following table.

Microsoft SC-300 image Question 173 108265 10052024010905000000

For which users can User1 and User4 reset passwords? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Become a Premium Member for full access

Unlock Premium Member

Microsoft SC-300 Practice Test 6

Question

Microsoft SC-300 Practice Tests

Practice Tests