[Sep 08, 2024] Get to the Top with SC-300 Practice Exam Questions [Q134-Q149]

Rate this post

[Sep 08, 2024] Get to the Top with SC-300 Practice Exam Questions

Use Real SC-300 Dumps Free Sample Questions and Practice Test Engine

Microsoft SC-300 Exam is ideal for IT professionals who are responsible for managing identity and access solutions in organizations of all sizes. This includes IT administrators, security analysts, and identity and access managers who are responsible for designing, implementing, and maintaining identity and access solutions based on Microsoft technologies. SC-300 exam is also recommended for individuals who are looking to advance their careers in the field of identity and access management, as it is a globally recognized certification that validates their expertise and knowledge in this area. With the increasing importance of identity and access management in today’s digital world, passing the Microsoft SC-300 Exam is a valuable achievement that can open up new career opportunities for IT professionals.

Microsoft Identity and Access Administrator is an essential role in any organization that utilizes Microsoft technologies for their identity and access management needs. Microsoft has recently introduced the Microsoft SC-300 certification exam, which is designed to test the skills and knowledge of professionals in this field. Microsoft Identity and Access Administrator certification exam is intended for individuals who are responsible for managing and securing identity and access solutions in Microsoft Azure, hybrid, and on-premises environments.

NO.134 You have an Azure AD tenant and an Azure web app named App1.
You need to provide guest users with self-service sign-up for App1. The solution must meet the following requirements:
* Guest users must be able to sign up by using a one-time password.
* The users must provide their first name, last name, city, and email address during the sign-up process.
What should you configure in the Azure Active Directory admin center for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.135 You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

You plan to implement Azure AD Identity Protection.
Which users can configure the user risk policy, and which users can view the risky users report? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.136 You have an Azure subscription.
Azure AD logs are sent to a Log Analytics workspace.
You need to query the logs and graphically display the number of sign-ins per user.
How should you complete the query? To answer, select the appropriate options in the answer area.

NO.137 You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps and Conditional Access policies. You need to block access to cloud apps when a user is assessed as high risk.
Which type of policy should you create in the Microsoft Defender for Cloud Apps?

activity policy

anomaly detection polio

OAuth app policy

access policy

NO.138 You need to locate licenses to the A. Datum users. The solution must need the technical requirements.
Which type of object should you create?

A Dynamo User security group

An OU

A distribution group

An administrative unit

NO.139 Your company has two divisions named Contoso East and Contoso West. The Microsoft 365 identity architecture tor both divisions is shown in the following exhibit.

You need to assign users from the Contoso East division access to Microsoft SharePoint Online sites in the Contoso West tenant. The solution must not require additional Microsoft 3G5 licenses.
What should you do?

Configure The exiting Azure AD Connect server in Contoso Cast to sync the Contoso East Active Directory forest to the Contoso West tenant.

Configure Azure AD Application Proxy in the Contoso West tenant.

Deploy a second Azure AD Connect server to Contoso East and configure the server to sync the Contoso East Active Directory forest to the Contoso West tenant.

Create guest accounts for all the Contoso East users in the West tenant.

NO.140 You need to support the planned changes and meet the technical requirements for MFA.
Which feature should you use, and how long before the users must complete the registration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.141 You need to configure app registration in Azure AD to meet the delegation requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.142 You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains an Azure Cosmos DB database named DB1 and an Azure Kubernetes Service (AKS) cluster named AKS1. AKS1 uses a managed identity.
You need to ensure that AKS1 can access DB1. The solution must meet the following requirements:
* Ensure that AKS1 uses the managed identity to access DB1.
* Follow the principle of least privilege.
Which role should you assign to the managed identity of AKS1.

For R61, assign the Azure Cosmos DB Data Reader Role role.

For Sub1. assign the Owner role.

For RG1, assign the Reader role.

For DB1, assign the Azure Cosmos DB Account Reader Role role.

NO.143 You have a Microsoft 365 E5 subscription.
You need to be able to create a Microsoft Defender for Cloud Apps session policy.
What should you do first?

From the Microsoft Defender portal, select User monitoring.

From the Microsoft Entra admin center, create a Conditional Access policy.

From the Microsoft Defender portal, select App onboarding/maintenance

From the Microsoft Defender portal, create a continuous report.

NO.144 You have an Azure AD tenant that contains the users shown in the following table.

The tenant has the authentication methods shown in the following table.

Which users will sign in to cloud apps by matching a number shown in the app with a number shown on their phone?

User1 only

User2 only

User3 only

User1 and User2 only

User2 and User3 only

NO.145 You have an Azure AD tenant that contains the users shown in the following table.

You have the locations shown in the following table.

The tenant contains a named location that Das the following configurations:
* Name: location1
* Mark as trusted location: Enabled
* IPv4 range: 10.10.0.0/16
MFA has a trusted iPad dress range of 193.17.17.0/24.
You have a Conditional Access policy that has the following settings:
* Name: CAPolicy1
* Assignments
o Users or workload identities: Group 1
o Cloud apps or actions: All cloud apps
* Conditions
* Locations All trusted locations
* Access controls
Gant
* Grant access: Require multi-factor authentication
Session: 0 controls selected
* Enable policy: On
For each of the following statements select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

NO.146 You need to support the planned changes and meet the technical requirements for MFA.
Which feature should you use, and how long before the users must complete the registration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.147 Your company has an Azure Active Directory (Azure AD) tenant named contoso.com. The company has a business partner named Fabrikam, Inc.
Fabrikam uses Azure AD and has two verified domain names of fabrikam.com and litwareinc.com. Both domain names are used for Fabrikam email addresses.
You plan to create an access package named package1 that will be accessible only to the users at Fabrikam.
You create a connected organization for Fabrikam.
You need to ensure that the package1 will be accessible only to users who have fabrikam.com email addresses.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.148 You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory domain.
The on-premises network contains a VPN server that authenticates to the on-premises Active Directory domain. The VPN server does NOT support Azure Multi-Factor Authentication (MFA).
You need to recommend a solution to provide Azure MFA for VPN connections.
What should you include in the recommendation?

Azure AD Application Proxy

an Azure AD Password Protection proxy

Network Policy Server (NPS)

a pass-through authentication proxy

NO.149 You have an Azure Active Directory (Azure AD) tenant that contains the groups shown in the following table.

For which groups can you create an access review?