Home / Microsoft / SC-300

Microsoft SC-300 Practice Test - Questions Answers, Page 17

Question list

List of questions

Question 161

(0)

You have an Azure subscription that contains a user named User1. You need to meet the following requirements: • Prevent User1 from being added as an owner of newly registered apps. • Ensure that U

Question 162

(0)

Your company purchases 2 new Microsoft 365 ES subscription and an app named App. You need to create a Microsoft Defender for Cloud Apps access policy for App1. What should you do you first? (Choos

Question 163

(0)

You have an Azure AD tenant named contoso.com that contains the resources shown in the following table. You create a user named Admin 1. You need to ensure that Admin can enable Security default

Question 164

(0)

HOTSPOT You have an Azure AD tenant that contains a user named User1. User1 is assigned the User Administrator role. You need to configure External collaboration settings for the tenant to meet th

Question 165

(0)

HOTSPOT You have an Azure subscription. Azure AD logs are sent to a Log Analytics workspace. You need to query the logs and graphically display the number of sign-ins per user. How should you co

Question 166

(0)

You have an Azure AD tenant that contains the users shown in the following table. The User settings for enterprise applications have the following configuration. • Users can consent to apps acce

Question 167

(0)

HOTSPOT You have an Azure AD tenant named contoso.com that has Email one-time passcode for guests set to Yes. You invite the guest users shown in the following table. Which users will receive a o

Question 168

(0)

HOTSPOT You have an Azure AD tenant that contains the users shown in the following table. User2 reports that he can only configure multi-factor authenticating (MFA) to use the Microsoft Authenti

Question 169

(0)

Your network contains an on-premises Active Directory domain that syncs to an Azure AD tenant. Users sign in to computers that run Windows 10 and are joined to the domain. You plan to implement Az

Question 170

(0)

HOTSPOT You have an Azure AD tenant and an Azure web app named App1. You need to provide guest users with self-service sign-up for App1. The solution must meet the following requirements: • Guest

Related questions

SIMULATION 8 You need to prevent all users from using legacy authentication protocols when authenticating to Microsoft Entra ID.

You have an Azure subscription. You need to use Microsoft Entra Permissions Management to automatically monitor permissions and create and implement right-size roles. The solution must follow the principle of least privilege. Which role should you assign to the service principal of Permissions Management?

SIMULATION 4 You need to ensure that all users can consent to apps that require permission to read their user profile. Users must be prevented from consenting to apps that require any other permissions.

Your company has an Azure Active Directory (Azure AD) tenant named contosri.com. The company has the business partners shown in the following table. users can request access by using package 1. Users at Fabrikam and Litware use ail then respective domain names for email addresses. You plan to create an access package named packaqel that will be accessible only to the Fabrikam and Litware users. You need to configure connected organizations for Fabrikam and litware so that any of their users can request access by using package1. What is the minimum of connected organization that you should create.

HOTSPOT Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the objects shown in the following table. You install Azure AD Connect. You configure the Domain and OU filtering settings as shown in the Domain and OU Filtering exhibit. (Click the Domain and OU Filtering tab.) You configure the Filter users and devices settings as shown in the Filter Users and Devices exhibit. (Click the Filter Users and Devices tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. A. B. C. D.

HOTSPOT You have an Azure subscription that contains the key vaults shown in the following table. The subscription contains the users shown in the following table. On June1, Admin4 performs the following actions: • Deletes a certificate named Certificate! from Key Vault1 • Deletes a secret named Secret1 from KeyVault2 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Your company requires that users request access before they can access corporate applications. You register a new enterprise application named MyApp1 in Azure Active Dilatory (Azure AD) and configure single sign-on (SSO) for MyApp1. Which settings should you configure next for MyApp1?

SIMULATION 2 You need to implement a process to review guest users who have access to the Salesforce app. The review must meet the following requirements: * The reviews must occur monthly. * The manager of each guest user must review the access. * If the reviews are NOT completed within five days, access must be removed. * If the guest user does not have a manager, Megan Bowen must review the access.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it as a result, these questions will not appear in the review screen. You have an Amazon Web Services (AWS) account, a Google Workspace subscription, and a GitHub account. You deploy an Azure subscription and enable Microsoft 365 Defender. You need to ensure that you can monitor OAuth authentication requests by using Microsoft Defender for Cloud Apps. Solution: From the Microsoft 365 Defender portal, you add the Amazon Web Services app connector. Does this meet the goal?

Question 161

You have an Azure subscription that contains a user named User1. You need to meet the following requirements:

• Prevent User1 from being added as an owner of newly registered apps.

• Ensure that User1 can manage the application proxy settings.

• Ensure that User2 can register apps.

• Use the principle of least privilege.

Which role should you assign to User1?

Application developer

Cloud application administrator

Service support administrator

Application administrator

Show Answer Comment (0)

Question 162

Your company purchases 2 new Microsoft 365 ES subscription and an app named App.

You need to create a Microsoft Defender for Cloud Apps access policy for App1.

What should you do you first? (Choose Correct Answer based on Microsoft Identity and Access Administrator at microsoft.com)

Configure a Token configuration for App1.

Add an API permission for App.

Configure a Conditional Access policy to use app-enforced restrictions.

Configure a Conditional Access policy to use Conditional Access App Control.

Show Answer Comment (0)

Question 163

You have an Azure AD tenant named contoso.com that contains the resources shown in the following table.

You create a user named Admin 1.

You need to ensure that Admin can enable Security defaults for contoso.com.

What should you do first?

Configure Identity Governance.

Delete Package1.

Delete CAPolicy1.

Assign Admin1 the Authentication administrator role for Au1

Show Answer Comment (0)

Question 164

HOTSPOT

You have an Azure AD tenant that contains a user named User1. User1 is assigned the User Administrator role.

You need to configure External collaboration settings for the tenant to meet the following requirements:

*Guest users must be prevented from querying staff email addresses.

*Guest users must be able to access the tenant only if they are invited by User1.

Which three settings should you configure? To answer, select the appropriate settings in the answer area.

Show Answer Comment (0)

Question 165

HOTSPOT

You have an Azure subscription.

Azure AD logs are sent to a Log Analytics workspace.

You need to query the logs and graphically display the number of sign-ins per user.

How should you complete the query? To answer, select the appropriate options in the answer area.

Show Answer Comment (0)

Question 166

You have an Azure AD tenant that contains the users shown in the following table.

The User settings for enterprise applications have the following configuration.

• Users can consent to apps accessing company data on their behalf:

• Users can consent to apps accessing company data for the groups they

• Users can request admin consent to apps they are unable to consent to: Yes

• Who can review admin consent requests: Admin2, User2

User1 attempts to add an app that requires consent to access company data.

Which user can provide consent?

User1

User2

Admin1

Admin2

Show Answer Comment (0)

Question 167

HOTSPOT

You have an Azure AD tenant named contoso.com that has Email one-time passcode for guests set to Yes.

You invite the guest users shown in the following table.

Which users will receive a one-time passcode, and how long will the passcode be valid? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Answer Comment (0)

Question 168

HOTSPOT

You have an Azure AD tenant that contains the users shown in the following table.

User2 reports that he can only configure multi-factor authenticating (MFA) to use the Microsoft Authenticator app.

You need to ensure that User2 can configure alternate MFA methods.

Which configuration is required, and which user should perform the configuration? To answer, select the appropriate options in the answer area.

Show Answer Comment (0)

Question 169

Your network contains an on-premises Active Directory domain that syncs to an Azure AD tenant.

Users sign in to computers that run Windows 10 and are joined to the domain.

You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).

You need to configure the Windows 10 computers to support Azure AD Seamless SSO.

What should you do?

Modify the Local intranet zone settings

Configure Sign-in options from the Settings app.

Enable Enterprise State Roaming.

Install the Azure AD Connect Authentication Agent.

Show Answer Comment (0)

Question 170

HOTSPOT

You have an Azure AD tenant and an Azure web app named App1.

You need to provide guest users with self-service sign-up for App1. The solution must meet the following requirements:

• Guest users must be able to sign up by using a one-time password.

• The users must provide their first name, last name, city, and email address during the sign-up process.

What should you configure in the Azure Active Directory admin center for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Answer Comment (0)

Total 290 questions

15 16 17 18 19

Go to page: of 29