Microsoft SC-300 Practice Test - Questions Answers, Page 28
Question list
List of questions
Related questions
SIMULATION 9
You need to ensure that when users in the Sg-Operations group go to the My Apps portal a tab named Operations appears that contains only the following applications:
* Unkedln
* Box
See the Explanation for the complete step by step solution
SIMULATION 10
You need to create a group named Audit. The solution must ensure that the members of Audit can activate the Security Reader role.
See the Explanation for the complete step by step solution
You have a Microsoft 365 E5 subscription.
You need to be able to create a Microsoft Defender for Cloud Apps session policy.
What should you do first?
From the Microsoft Defender portal, select User monitoring.
From the Microsoft Entra admin center, create a Conditional Access policy.
From the Microsoft Defender portal, select App onboarding/maintenance
From the Microsoft Defender portal, create a continuous report.
HOTSPOT
You have two Microsoft Entra tenants named contoso.com and fabhkam.com. Contoso.com contains the users shown in the following table.
Contoso.com contains the groups shown in the following table.
You configure cross-tenant synchronization from contoso.com to fabrikam.com and enable cross-tenant synchronization for User3 and Group2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
You have a Microsoft Entra tenant that uses Microsoft Entra ID Premium licenses.
You plan to configure a terms of use (ToU) for the tenant.
You need to upload the ToU document.
Which format should you use for the document?
HTML
RTF
DOCX
You have an Azure subscription that contains a user-assigned managed identity named Managed1 in the East US Azure region. The subscription contains the resources shown in the following table.
Which resources can use Managed 1 as their identity?
WebApp1 only
storage1 and WebApp1 only
VM1 and WebApp1 only
VM1, storage1, and WebApp1
You have a Microsoft Entra tenant.
You need to create a Conditional Access policy to manage administrative access to the tenant. The solution must ensure that administrators are authenticated by using a phishing-resistant multi-factor authentication (MFA) method.
Which three authentication methods should you include in the solution? Each correct answer presents a complete solution.
Windows Hello for Business
an FID02 security key
certificate-based authentication (multi-factor)
voice call
SMS
email OTP
certificate-based authentication (single-factor)
Microsoft Authenticator
You have an Azure subscription.
You need to use Microsoft Entra Permissions Management to automatically monitor permissions and create and implement right-size roles. The solution must follow the principle of least privilege.
Which role should you assign to the service principal of Permissions Management?
Reader
Contributor
Owner
User Access Administrator
DRAG DROP
You have an Azure subscription that contains the resources shown in the following table.
The subscription uses Privileged Identity Management (PIM).
You need to configure the following access controls by using PIM:
* Ensure that User1 can read and update Secret1.
* Ensure that User2 can read the contents of the secrets stored in Vault2.
The solution must follow the principle of least privilege.
Which authorization method should you use for each user? To answer, drag the appropriate authorization methods to the correct users. Each authorization method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
HOTSPOT
You have an Azure subscription that contains the resources shown in the following table.
You create a Microsoft Entra user named User1.
Which identities can you add to VM1 and App1? To answer, select the appropriate options in the answer area.
NOTE: Each correct answer is worth one point.
Answer:
Question