SC-300 Free Practice Questions — Page 18

Question 85

HOTSPOT - You have a Microsoft Entra tenant that contains the users shown in the following table. The tenant contains the identities shown in the following table. Which users can create custom security attributes, and to which identities can the attributes be assigned? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 86

You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of . You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as . What should you do?

Question 87

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to configure Microsoft Entra Identity Protection to meet the following requirements: • Require multi-factor authentication (MFA) for any sign-ins at the high risk level. • Apply the configuration to all users except for Mod Administrator. To complete this task, sign in to the appropriate admin center.

Question 88

You have a management group named Group1 that contains two Azure subscriptions named Sub1 and Sub2. The subscriptions are linked to a Microsoft Entra tenant that contains a user named User1. You need to ensure that User1 can onboard Sub1 to Permissions Management. The solution must follow the principle of least privilege. Which permission should you grant to User1?

Question 89

HOTSPOT - Your on-premises network contains an Active Directory domain that uses Microsoft Entra Connect sync to sync with a Microsoft Entra tenant. You need to configure Microsoft Entra Connect sync to meet the following requirements: • Microsoft Entra sign-ins must be authenticated by an Active Directory domain controller. • Active Directory domain users must be able to use Microsoft Entra self-service password reset (SSPR). • Minimize administrative effort. What should you use for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 90

HOTSPOT - You have an Azure subscription named Sub1 that contains three users named User1, User2, and User3. Sub1 has a storage account named storage1 that contains the resources shown in the following table. Sub1 contains the users shown in the following table. Which users can read File1, and which users can read File2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 91

HOTSPOT - You have a Microsoft Entra tenant named contoso.com that contains an administrative unit named AU1 and two users named User1 and User2. User1 is a member of AU1. You need to perform the following role assignments: • User1: Security Administrator • User2: User Administrator For which scopes can each user be assigned the role? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 93

HOTSPOT - You have a Microsoft Entra tenant that contains two groups named Group1 and Group2 and the users shown in the following table. Group2 is a member of Group1. You configure an access review that has the following settings: • Name: Review1 • Select what to review: Teams + Groups • Review scope: Select Teams + groups • Group: Group1 • Scope: Guest users only • Select reviewers: Group owners(s) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 94

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to configure the Group Administrator role to meet the following requirements: • Ensure that Allan Deyoung can approve and reject requests to activate the role. • Ensure that Christie Cline can request activation of the role. • Use the principle of least privilege. To complete this task, sign in to the appropriate admin center.

Question 95

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to implement a process to review guest users who have access to the Salesforce app. The review must meet the following requirements: • The reviews must occur monthly. • The manager of each guest user must review the access. • If the reviews are NOT completed within five days, access must be removed. • If the guest user does not have a manager, Megan Bowen must review the access. To complete this task, sign in to the appropriate admin center.