SC-300 Free Practice Questions — Page 2

Question 6

Your company has a Microsoft Entra tenant that contains a user named User1. The company has two departments named marketing and finance. You need to grant permissions to User1 to manage only the users in the marketing department. What should you create first?

Question 6

You have 2,500 users who are assigned Microsoft 365 E3 licenses. The licenses are assigned to individual users. You assign Microsoft 365 E5 licenses to a group that includes all users. You need to remove the Microsoft 365 E3 licenses from the users by using the least amount of administrative effort. What should you use?

Question 7

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to configure consent for applications that require access to data in the Microsoft 365 subscription. The solution must meet the following requirements: If a user cannot provide consent to an application, the user must be able to request that an administrator review the consents requests. Allan Deyoung must be able to review the consent requests of the users. To complete this task, sign in to the appropriate admin center.

Question 7

HOTSPOT - You have a Microsoft Entra tenant that contains the users shown in the following table. The tenant contains the administrative units shown in the following table. The tenant contains the groups shown in the following table. You perform the following actions: • Assign User1 the User Administrator role for AU2. • Assign User3 the Groups Administrator role for AU1. • Assign User5 the Authentication Administrator role for AU3. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 8

HOTSPOT - You have an Azure subscription that contains two resource groups named RG1 and RG2, a storage account named storage1. You assign roles for the subscription as shown in the following table. You assign roles for RG1 as shown in the following table. You assign roles for storage1 as shown in the following exhibit. Roles are NOT assigned for other Azure resources. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 8

You have a Microsoft Entra tenant. You create an enterprise application collection named HR Apps that has the following settings: • Applications: App1, App2, App3 • Owners: Admin1 • Users and groups: HRUsers All three apps have the following Properties settings: • Enabled for users to sign in: Yes • User assignment required: Yes • Visible to users: Yes Users report that they only see App1 and App2 in the My Apps portal. You need to ensure that the users can also see App3. What should you do from App3?

Question 9

HOTSPOT - You have a Microsoft Entra tenant that contains an administrative unit named AU1. AU1 is configured for assigned membership. The tenant contains the users shown in the following table. The tenant contains the groups shown in the following table. For AU1, you update the following configurations: • Membership type: Dynamic User • Dynamic membership rule: (user.department -eq "hr") For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 10

HOTSPOT - You have an Azure subscription named Sub1 that contains an Azure key vault named Vault1 and an Azure Automation account named Automation1. You need to ensure that Automation1 can access Vault1. The solution must meet the following requirements: • Ensure that if Automation1 is deleted, the permissions granted for Vault1 will be removed automatically. • Ensure that runbooks created in Automation1 can read secret values stored in Vault1. • Follow the principle of least privilege. What should you configure for Automation1, and which built-in role should Automation1 use to access Vault1? To answer, select the appropriate options in the answer area. NOTE: Each correct answer is worth one point.

Question 10

HOTSPOT - You have a Microsoft Entra tenant that contains 1,000 users. The users are assigned Microsoft Entra Suite licenses. You perform the following actions: • Deploy Global Secure Access. • Create a Global Secure Access security profile named Profile1. • Create the following Conditional Access policies: o Name: CApolicy1 o Target resources: All internet resources with Global Secure Access o Name: CApolicy2 o Session: - Use Global Secure Access security profile: Profile1 To which Global Secure Access traffic forwarding profiles is CAPolicy1 linked, and to which profile does Profile1 apply? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 11

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to add the LinkedIn application as a resource to the Sales and Marketing access package. The solution must NOT remove any other resources from the access package. To complete this task, sign in to the appropriate admin center.