ExamGecko
Home Home / Microsoft / SC-300

Microsoft SC-300 Practice Test - Questions Answers, Page 22

Question list
Search
Search

List of questions

Search

Related questions











You have an Azure subscription that contains the users shown in the following table.

You need to implement Azure AD Privileged Identity Management (PIM).

Which users can use PIM to activate their role permissions?

A.

Admin! only

A.

Admin! only

Answers
B.

Admin2 only

B.

Admin2 only

Answers
C.

Admin3 only

C.

Admin3 only

Answers
D.

Admin1 and Admin2 only

D.

Admin1 and Admin2 only

Answers
E.

Admin2 and Admin3 only

E.

Admin2 and Admin3 only

Answers
F.

Admin1, Admin2, and Admin3

F.

Admin1, Admin2, and Admin3

Answers
Suggested answer: D

HOTSPOT

You have an Azure AD tenant.

You perform the tasks shown in the following table.

On April 5, an administrator deletes App1, App2, App3, and App4.

You need to restore the apps and the settings.

Which apps can you restore on April 16, and which settings can you restore for App4 on April 16? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 212
Correct answer: Question 212

HOTSPOT

You have an Azure AD tenant named contoso.com that contains a group named All Company and has the following Identity Governance settings:

* Block external users from signing in to this directory: Yes

* Remove external user Yes

* Number of days before removing external user from this directory: 30

On March 1, 2022, you create an access package named Package1 that has the following settings:

* Resource roles

o Name: All Company

o Type: Group and Team

o Role: Member

* Lifecycle

o Access package assignment expire: On date

o Assignment expiration date: April 1, 2022

On March 1, 2022, you assign Package1 to the guest users shown in the following table.

On March 2, 2022, you assign the Reports reader role to Guest1.

On April 1(2022, you invite a guest user named Guest3 to contoso.com.

On April 4, 2022, you add Guest3 to the All Company group.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.


Question 213
Correct answer: Question 213

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. as a result, these questions will not appear in the review screen.

You have an Amazon Web Services (AWS) account a Google Workspace subscription, and a GitHub account

You deploy an Azure subscription and enable Microsoft 365 Defender.

You need to ensure that you can monitor OAuth authentication requests by using Microsoft Defender for Cloud Apps.

Solution: From the Microsoft 365 Defender portal, you add the GitHub app connector

Does this meet the goal?

A.

Yes

A.

Yes

Answers
B.

No

B.

No

Answers
Suggested answer: B

You have a Microsoft 365 subscription that contains a Microsoft SharePoint Online site named Site1 and a Microsoft 365 group named Group1. You need to ensure that the members of Group1 can access Site1 for 90 days. The solution must minimize administrative effort. What should you use?

A.

an access review

A.

an access review

Answers
B.

a lifecycle workflow

B.

a lifecycle workflow

Answers
C.

an access package

C.

an access package

Answers
D.

a Conditional Access policy

D.

a Conditional Access policy

Answers
Suggested answer: C

HOTSPOT

You have an Azure AD tenant that contains multiple storage accounts.

You plan to deploy multiple Azure App Service apps that will require access to the storage accounts.

You need to recommend an identity solution to provide the apps with access to the storage accounts. The solution must minimize administrative effort.

Which type of identity should you recommend, and what should you recommend using to control access to the storage accounts? To answer, select the appropriate options in the answer area.


Question 216
Correct answer: Question 216

HOTSPOT

Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with Azure AD and contains the users shown in the following table.

In Azure AD Connect. Domain/OU Filtering is configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.


Question 217
Correct answer: Question 217

HOTSPOT

You have an Azure subscription that contains the resources shown in the following table.

You need to configure access to Vault1. The solution must meet the following requirements:

* Ensure that User1 can manage and create keys in Vault1.

* Ensure that User2 can access a certificate stored in Vault1.

* Use the principle of least privilege.

Which role should you assign to each user? To answer select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 218
Correct answer: Question 218

You have a Microsoft 365 E5 subscription.

You purchase the app governance add-on license.

You need to enable app governance integration.

Which portal should you use?

A.

the Microsoft Defender for Cloud Apps portal

A.

the Microsoft Defender for Cloud Apps portal

Answers
B.

the Microsoft 365 admin center

B.

the Microsoft 365 admin center

Answers
C.

Microsoft 365 Defender

C.

Microsoft 365 Defender

Answers
D.

the Azure Active Directory admin center

D.

the Azure Active Directory admin center

Answers
E.

the Microsoft Purview compliance portal

E.

the Microsoft Purview compliance portal

Answers
Suggested answer: A

You have an Azure AD tenant that contains a user named User1

User1 needs to manage license assignments and reset user passwords.

Which role should you assign to User1?

A.

License administrator

A.

License administrator

Answers
B.

Helpdesk administrator

B.

Helpdesk administrator

Answers
C.

Billing administrator

C.

Billing administrator

Answers
D.

User administrator

D.

User administrator

Answers
Suggested answer: D
Total 290 questions
Go to page: of 29