Go Back on SC-300 Exam
Available in 1, 3, 6 and 12 Months Free Updates Plans
PDF: $15 $60

Test Engine: $20 $80

PDF + Engine: $25 $99

SC-300 Practice Test


Page 14 out of 61 Pages

Topic 4: Misc. Questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory forest.
You discover that when a user account is disabled in Active Directory, the disabled user can still authenticate to Azure AD for up to 30 minutes.
You need to ensure that when a user account is disabled in Active Directory, the user account is immediately prevented from authenticating to Azure AD.
Solution: You configure conditional access policies.
Does this meet the goal?


A. Yes


B. No





B.
  No

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.
You plan to increase app security for the subscription.
You need to identify which apps do NOT require user authentication.
What should you do in the Microsoft 365 Defender portal?


A. Create a discovered app query.


B. Create a snapshot Cloud Discovery report


C. Create an OAuth policy and review alerts


D. Review the cloud app catalog.





A.
  Create a discovered app query.

You have an Azure Active Directory (Azure AD) tenant that contains the groups shown in the following table.


For which groups can you create an access review?


A. Group1 only


B. Group1 and Group4 only


C. Group1 and Group2 only


D. Group1, Group2, Group4, and Group5 only


E. Group1, Group2, Group3, Group4 and Group5





D.
  Group1, Group2, Group4, and Group5 only

You have an Azure Active Directory (Azure AD) tenant named contoso.com.
You need to ensure that Azure AD External Identities pricing is based on monthly active users (MAU).
What should you configure?


A. an access review


B. the terms or use


C. a linked subscription


D. a user flow





C.
  a linked subscription

Your company purchases 2 new Microsoft 365 ES subscription and an app named App.
You need to create a Microsoft Defender for Cloud Apps access policy for App1.
What should you do you first? (Choose Correct Answer based on Microsoft Identity and Access Administrator at microsoft.com)


A. Configure a Token configuration for App1.


B. Add an API permission for App1.


C. Configure a Conditional Access policy to use app-enforced restrictions.


D. Configure a Conditional Access policy to use Conditional Access App Control.





D.
  Configure a Conditional Access policy to use Conditional Access App Control.

To create a Microsoft Defender for Cloud Apps access policy for App1, you should configure a Conditional Access policy to use app-enforced restrictions. This will allow you to control access to your cloud apps based on conditions such as user, device, location, and app state. You can also use app-enforced restrictions to control access to your cloud apps based on the state of the app, such as whether it’s running on a managed or unmanaged device.


Page 14 out of 61 Pages
Previous