Microsoft SC-300 Exam Dumps

Microsoft SC-300 Sample Question Answers

Question # 1

Task 8You need to prevent all users from using legacy authentication protocols whenauthenticating to Microsoft Entra ID.

Show Answer

Question # 2

Task 5You need to assign a Windows 10/11 Enterprise E3 license to the Sg-Retail group.

Show Answer

Question # 3

Task 7You need to lock out accounts for five minutes when they have 10 failed sign-in attempts.

Show Answer

Question # 4

Task 1You need to deploy multi factor authentication (MFA). The solution must meet the followingrequirements:• Require MFA registration only for members of the Sg-Finance group.• Exclude Debra Berger from having to register for MFA.• Implement the solution without using a Conditional Access policy.

Show Answer

Question # 5

Task 6You need to implement additional security checks before the members of the Sg-Executivecan access any company apps. The members must meet one of the following conditions:• Connect by using a device that is marked as compliant by Microsoft Intune.• Connect by using client apps that are protected by app protection policies.

Show Answer

Question # 6

Task 2You need to implement a process to review guest users who have access to the Salesforceapp. The review must meet the following requirements:• The reviews must occur monthly.• The manager of each guest user must review the access.• If the reviews are NOT completed within five days, access must be removed.• If the guest user does not have a manager, Megan Bowen must review the access.

Show Answer

Question # 7

Task 10You need to create a group named Audit. The solution must ensure that the members ofAudit can activate the Security Reader role.

Show Answer

Question # 8

You need to ensure that all users can consent to apps that require permission to read theiruser profile. Users must be prevented from consenting to apps that require any otherpermissions.

Show Answer

Question # 9

Task 9You need to ensure that when users in the Sg-Operations group go to the My Apps portal atab named Operations appears that contains only the following applications:• Unkedln• Box

Show Answer

Question # 10

You need to add the Linkedln application as a resource to the Sales and Marketing accesspackage. The solution must NOT remove any other resources from the access package.

Show Answer

Question # 11

Your network contains an on-premises Active Directory domain that syncs to an Azure ADtenant.Users sign in to computers that run Windows 10 and are joined to the domain.You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).You need to configure the Windows 10 computers to support Azure AD Seamless SSO.What should you do?

A. Modify the Local intranet zone settings 
B. Configure Sign-in options from the Settings app. 
C. Enable Enterprise State Roaming. 
D. Install the Azure AD Connect Authentication Agent. 

Show Answer

Question # 12

You use Azure Monitor to analyze Azure Active Directory (Azure AD) activity logs.Yon receive more than 100 email alerts each day for tailed Azure Al) user sign-in attempts.You need to ensure that a new security administrator receives the alerts instead of you.Solution: From Azure AD, you create an assignment for the Insights at administrator role.Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 13

You have a Microsoft 36S subscription. The subscription contains users that use MicrosoftOutlook 2016 and Outlook 2013 clients. You need to implement tenant restrictions. Thesolution must minimize administrative effort. What should you do first?

A. Upgrade the Outlook 2013 clients to Outlook 2016. 
B. Configure the Outlook 2013 clients to use modem authentication. 
C. Upgrade all the Outlook clients to Outlook 2019. 
D. From the Exchange admin center, configure Organization Sharing. 

Show Answer

Question # 14

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online sitenamed Site!. Site! hosts PDF filesYou need to prevent users from printing the files directly from Sitel.Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

A. activity policy 
B. file policy 
C. access policy 
D. session policy 

Show Answer

Question # 15

You have an Azure subscription that contains a virtual machine named VM1 and an Azurekey vault named Vault1. VM1 has a system-assigned managed identity. You need toensure that VM1 can retrieve the values of secrets stored in Vault 1. The solution mustminimize administrative effort. What should you do first?

A. Configure the Resource access settings for Vault1. 
B. Configure the permissions model for Vault1 
C. Add a user-assigned managed identity to VM1. 
D. Assign an Azure role to VM1. 

Show Answer

Question # 16

You have an Azure Active Directory (Azure AD) tenant named contoso.com that containsan Azure ADenterprise application named App1.A contractor uses the credentials of [email protected] need to ensure that you can provide the contractor with access to App1. Thecontractor must be able toauthenticate as [email protected] should you do?

A. Run the New-AzADUser cmdlet.  
B. Configure the External collaboration settings. 
C. Add a WS-Fed identity provider. 
D. Create a guest user account in contoso.com.

Show Answer

Question # 17

You have a Microsoft 365 tenant.All users must use the Microsoft Authenticator app for multi-factor authentication (MFA)when accessing Microsoft 365 services.Some users report that they received an MFA prompt on their Microsoft Authenticator appwithout initiating a sign-in request.You need to block the users automatically when they report an MFA request that they didnot Initiate.Solution: From the Azure portal, you configure the Block/unblock users settings for multifactor authentication (MFA).Does this meet the goal?

A. Yes 
B. No

Show Answer

Question # 18

You have a Microsoft 365 tenant.In Azure Active Directory (Azure AD), you configure the terms of use.You need to ensure that only users who accept the terms of use can access the resourcesin the tenant. Otherusers must be denied access.What should you configure?

A. an access policy in Microsoft Cloud App Security.
B. Terms and conditions in Microsoft Endpoint Manager.
C. a conditional access policy in Azure AD 
D. a compliance policy in Microsoft Endpoint Manager 

Show Answer

Question # 19

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it. As a result,these questions will not appear in the review screen.You have a Microsoft 365 tenant.All users must use the Microsoft Authenticator app for multi-factor authentication (MFA)when accessing Microsoft 365 services.Some users report that they received an MFA prompt on their Microsoft Authenticator appwithout initiating a sign-in request.You need to block the users automatically when they report an MFA request that they didnot initiate.Solution: From the Microsoft Entra admin center, you configure the Notifications settings formulti-factor authentication (MFA).Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 20

Your company has a Microsoft Entra tenant that contains a user named User 1. The company has two departments named marketing and finance. You need to grant permissions to User1 to manage only the users in the marketing department. What should you create first?

A. an administrative unit 
B. a Microsoft 365 group 
C. a management group 
D. a resource group

Show Answer

Question # 21

You have a Microsoft Entra tenant.You need to configure continuous access evaluation for app sign-ins and assign theconfiguration to users that are assigned the Application Administrator role.What should you configure?

A. a Conditional Access policy 
B. the Admin consent settings 
C. a sign-in risk policy 
D. an access review 

Show Answer

Question # 22

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps andConditional Access policies. You need to block access to cloud apps when a user isassessed as high risk.Which type of policy should you create in the Microsoft Defender for Cloud Apps?

A. OAuth app policy 
B. anomaly detection polio 
C. access policy 
D. activity policy 

Show Answer

Question # 23

You create a new Microsoft 365 E5 tenant.You need to ensure that when users connect to the Microsoft 365 portal from ananonymous IP address, they are prompted to use multi-factor authentication (MFA).What should you configure?

A. a sign-in risk policy 
B. a user risk policy 
C. an MFA registration policy 

Show Answer

Question # 24

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.You need to identify which users access Facebook from their devices and browsers. Thesolution must minimize administrative effort.What should you do first?

A. From the Microsoft Defender for Cloud Apps portal, unsanctioned Facebook. 
B. Create an app configuration policy in Microsoft Endpoint Manager. 
C. Create a Defender for Cloud Apps access policy. 
D. Create a Conditional Access policy. 

Show Answer

Question # 25

Your company has a Microsoft 365 tenant.The company has a call center that contains 300 users. In the call center, the users share desktop computersand might use a different computer every day. The call center computers are NOTconfigured for biometricidentification.The users are prohibited from having a mobile phone in the call center.You need to require multi-factor authentication (MFA) for the call center users when theyaccess Microsoft 365services.What should you include in the solution?

A. a named network location 
B. the Microsoft Authenticator app 
C. Windows Hello for Business authentication 
D. FIDO2 tokens 

Show Answer

Question # 26

You have a Microsoft 365 tenant.You have an Active Directory domain that syncs to the Azure Active Directory {Azure AD)tenant.Users connect to the internet by using a hardware firewall at your company. The usersauthenticate to the firewall by using their Active Directory credentials.You plan to manage access to external applications by using Azure AD.You need to use the firewall logs to create a list of unmanaged external applications andthe users who access them.What should you use to gather the information?

A. Cloud App Discovery in Microsoft Defender for Cloud Apps 
B. enterprise applications in Azure AD 
C. access reviews in Azure AD 
D. Application Insights in Azure Monitor 

Show Answer

Question # 27

You have a Microsoft 365 tenant.You currently allow email clients that use Basic authentication to conned to MicrosoftExchange Online You need to ensure that users can connect t to Exchange only run email clients that useModern authentication protocols.What should you implement?You need to ensure that use Modern authentication

A. a compliance policy in Microsoft Endpoint Manager 
B. a conditional access policy in Azure Active Directory (Azure AD) 
C. an application control profile in Microsoft Endpoint Manager 
D. an OAuth policy in Microsoft Cloud App Security 

Show Answer

Question # 28

You have an Azure Active Directory (Azure AD) tenant that uses conditional access policies. You plan to use third-party security information and event management (SIEM) to analyze conditional access usage. You need to download the Azure AD log that contains conditional access policy data. What should you export from Azure AD?

A. sign-ins in JSON format 
B. sign-ins in CSV format 
C. audit logs in JSON format 
D. audit logs in CSV format 

Show Answer

Question # 29

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it as a result,these questions will not appear in the review screen.You have an Amazon Web Services (AWS) account, a Google Workspace subscription,and a GitHub account.You deploy an Azure subscription and enable Microsoft 365 Defender.You need to ensure that you can monitor OAuth authentication requests by using MicrosoftDefender for Cloud Apps.Solution: From the Microsoft 365 Defender portal, you add the Google Workspace appconnector.Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 30

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it as a result,these questions will not appear in the review screen.You have an Amazon Web Services (AWS) account, a Google Workspace subscription,and a GitHub account.You deploy an Azure subscription and enable Microsoft 365 DefenderYou need to ensure that you can monitor OAuth authentication requests by using MicrosoftDefender for Cloud Apps.Solution: From the Microsoft 365 Defender portal, you add the Microsoft Azure appconnector.Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 31

You use Azure Monitor to analyze Azure Active Directory (Azure AD) activity logs.Yon receive more than 100 email alerts each day for tailed Azure Al) user sign-in attempts.You need to ensure that a new security administrator receives the alerts instead of you.Solution: From Azure monitor, you modify the action group.Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 32

You have a Microsoft 365 subscription that contains a Microsoft SharePoint Online sitenamed Site1 and a Microsoft 365 group named Group1. You need to ensure that themembers of Group1 can access Site1 for 90 days. The solution must minimizeadministrative effort. What should you use?

A. an access review  
B. a lifecycle workflow  
C. an access package  
D. a Conditional Access policy  

Show Answer

Question # 33

You configure a new Microsoft 36S tenant to use a default domain name of contosso.com. You need to ensure that you can control access to Microsoft 365 resource-, by using conditional access policy. What should you do first?

A. Disable the User consent settings.  
B. Disable Security defaults.  
C. Configure a multi-factor authentication (Ml A) registration policy1.  
D. Configure password protection for Windows Server Active Directory.  

Show Answer

Question # 34

You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenantcontains a registered app named App1. You have a partner organization that has aMicrosoft Entra tenant. The tenant contains a registered app named App2. You need toensure that App1 can access App2.Which two types of credentials can App1 use? Each correct answer presents a completesolution. NOTE: Each correct selection is worth one point. 

A. certificate  
B. managed identity  
C. secret  
D. user account 
E. one-time password 

Show Answer

Question # 35

You have an Azure Active Directory (Azure AD) tenant named contoso.com.You plan to bulk invite Azure AD business-to-business (B2B) collaboration users.Which two parameters must you include when you create the bulk invite? Each correctanswer presents part ofthe solutionNOTE: Each correct selection is worth one point.

A. email address 
B. redirection URL 
C. username 
D. shared key 
E. password 

Show Answer

Question # 36

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. as a result, these questions will not appear in the review screen.You have an Amazon Web Services (AWS) account a Google Workspace subscription, and a GitHub account You deploy an Azure subscription and enable Microsoft 365 Defender. You need to ensure that you can monitor OAuth authentication requests by using Microsoft Defender for Cloud Apps. Solution: From the Microsoft 365 Defender portal, you add the GitHub app connector Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 37

You work for a company named Contoso, Ltd. that has a Microsoft Entra tenant named contoso.com. Contoso is working on a project with the following two partner companies: • A company named A. Datum Corporation that has a Microsoft Entra tenant named adatum.com • A company named Fabrikam, Inc. that has a Microsoft Entra tenant named fabtikam.com When you attempt to invite a new guest user from adatum.com to contoso.com, you receive an error message. You can successfully invite a new guest user from fabiikam.com to contoso.com. You need to be able to invite new guest users from adatum.com to contoso.com. What should you configure? 

A. Verifiable credentials  
B. Named locations  
C. Guest invite settings  
D. Collaboration restrictions  

Show Answer