The Secret Of Microsoft SC-300 Samples

NEW QUESTION 1

You have a Microsoft 365 tenant.
All users have mobile phones and laptops.
The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptop to a wired network that has internet access.
You plan to implement multi-factor authentication (MFA).
Which MFA authentication method can the users use from the remote location?

• A. a notification through the Microsoft Authenticator app
• B. email
• C. security questions
• D. a verification code from the Microsoft Authenticator app

Answer: D

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-authenticator-app

NEW QUESTION 2

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps and Conditional Access policies. You need to block access to cloud apps when a user is assessed as high risk.
Which type of policy should you create in the Microsoft Defender for Cloud Apps?

• A. OAuth app policy
• B. anomaly detection polio
• C. access policy
• D. activity policy

Answer: C

NEW QUESTION 3

You have a Microsoft 365 tenant.
The Azure Active Directory (Azure AD) tenant contains the groups shown in the following table.

In Azure AD. you add a new enterprise application named Appl. Which groups can you assign to App1?

• A. Group1 and Group2 only
• B. Group2 only
• C. Group3 only
• D. Group1 only
• E. Group1 and Group4

Answer: C

NEW QUESTION 4

You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users.
From the Groups blade in the Azure Active Directory admin center, you assign Microsoft 365 Enterprise E5 licenses to the users.
You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort.
What should you use?

• A. the Administrative units blade in the Azure Active Directory admin center
• B. the Set-AzureAdUser cmdlet
• C. the Groups blade in the Azure Active Directory admin center
• D. the Sec-MsolUserLicense cmdlet

Answer: C

Explanation:
Reference:
https://docs.microsoft.com/en-us/powershell/module/msonline/set-msoluserlicense?view=azureadps-1.0

NEW QUESTION 5

You have an Azure AD tenant that contains a user named User1 and the conditional access policies shown in the following table.

You need to evaluate which policies will be applied User1 when User1 attempts to sign-in from various IP addresses.
Which feature should you use?

• A. Access reviews
• B. Identity Secure Score
• C. The What If tool
• D. the Microsoft 365 network connectivity test tool

Answer: C

NEW QUESTION 6

You need to resolve the issue of the guest user invitations. What should you do for the Azure AD tenant?

• A. Configure the Continuous access evaluation settings.
• B. Modify the External collaboration settings.
• C. Configure the Access reviews settings.
• D. Configure a Conditional Access policy.

Answer: B

NEW QUESTION 7

You have a Microsoft 365 tenant.
Sometimes, users use external, third-party applications that require limited access to the Microsoft 365 data of the respective user. The users register the applications in Azure Active Directory (Azure AD).
You need to receive an alert if a registered application gains read and write access to the users’ email. What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 8

Your company has a Microsoft 365 tenant.
All users have computers that run Windows 10 and are joined to the Azure Active Directory (Azure AD)
tenant.
The company subscribes to a third-party cloud service named Service1. Service1 supports Azure AD authentication and authorization based on OAuth. Service1 is published to the Azure AD gallery.
You need to recommend a solution to ensure that the users can connect to Service1 without being prompted for authentication. The solution must ensure that the users can access Service1 only from Azure AD-joined computers. The solution must minimize administrative effort.
What should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9

You need to resolve the issue of the sales department users. What should you configure for the Azure AD tenant?

• A. the User settings
• B. the Device settings
• C. the Access reviews settings
• D. Security defaults

Answer: B

NEW QUESTION 10

You have a Microsoft 365 subscription that contains a user named User1.
You need to ensure that User1 can create access reviews for Azure AD roles. The solution must use the principal of least privilege.
Which role should you assign to User1?

• A. Privileged role administrator
• B. Identify Governance administrator
• C. User administrator
• D. User Access Administrate

Answer: B

NEW QUESTION 11

You need to implement the planned changes for litware.com. What should you configure?

• A. Azure AD Connect cloud sync between the Azure AD tenant and litware.com
• B. Azure AD Connect to include the litware.com domain
• C. staging mode in Azure AD Connect for the litware.com domain

Answer: C

NEW QUESTION 12

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory forest.
You discover that when a user account is disabled in Active Directory, the disabled user can still authenticate to Azure AD for up to 30 minutes.
You need to ensure that when a user account is disabled in Active Directory, the user account is immediately prevented from authenticating to Azure AD.
Solution: You configure pass-through authentication. Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn

NEW QUESTION 13

You have an Azure Active Directory (Azure AD) tenant named conto.so.com that has Azure AD Identity Protection enabled. You need to Implement a sign-in risk remediation policy without blocking access.
What should you do first?

• A. Configure access reviews in Azure AD.
• B. Enforce Azure AD Password Protection.
• C. implement multi-factor authentication (MFA) for all users.
• D. Configure self-service password reset (SSPR) for all users.

Answer: C

Explanation:
MFA and SSPR are both required. However, MFA is required first. Reference:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-remediate- https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment

NEW QUESTION 14

You use Azure Monitor to analyze Azure Active Directory (Azure AD) activity logs.
Yon receive more than 100 email alerts each day for tailed Azure Al) user sign-in attempts. You need to ensure that a new security administrator receives the alerts instead of you.
Solution: From Azure monitor, you create a data collection rule. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 15

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it as a result these questions will not appear in the review screen.
You have a Microsoft 365 ES subscription. You create a user namedUser1.
You need to ensure that User1 can update the status of identity Secure Score improvement actions. Solution: You assign the Security Operator role User1.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 16

You have an Azure Active Directory (Azure AD) tenant. For the tenant. Users can register applications Is set to No.
A user named Admin1 must deploy a new cloud app named App1.
You need to ensure that Admin1 can register App1 in Azure AD. The solution must use the principle of least privilege.
Which role should you assign to Admin1?

• A. Application developer in Azure AD
• B. App Configuration Data Owner for Subscription1
• C. Managed Application Contributor for Subscription1
• D. Cloud application administrator in Azure AD

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-app-roles

NEW QUESTION 17

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to ensure that users can request access to Site. the solution must meet the following requirements.
• Automatically approve requests from users based on their group membership.
• Automatically remove the access after 30 days What should you do?

• A. Create a Conditional Access policy.
• B. Create an access package.
• C. Configure Role settings in Azure AD Privileged Identity Management.
• D. Create a Microsoft Defender for Cloud Apps access policy.

Answer: B

NEW QUESTION 18
......