SC-300 Free Practice Questions — Page 3

Question 11

You have a Microsoft 365 E5 subscription. Users authorize third-party cloud apps to access their data. You need to configure an alert that will be triggered when an app requires high permissions and is authorized by more than 20 users. Which type of policy should you create in Microsoft Defender for Cloud Apps?

Question 12

HOTSPOT - You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains three users named User1, User2 and User3. You have the devices shown in the following table. You deploy a virtual machine that has the following configurations: • Name: VM1 • Resource group: RG1 • Operating system: Windows Server • Login with Microsoft Entra ID: Enabled You have the Azure role assignments shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 12

HOTSPOT - You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Entra tenant that contains an app registration named App1. App1 has Microsoft Graph application permissions. You need to configure the environment to support App1. The solution must meet the following requirements: • App1 must be accessible only from the corporate network. • The credentials for App1 must NOT be stored as plain text. • Non-interactive scheduled tasks on Server1 must be able to authenticate to App1. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 13

HOTSPOT - You have a Microsoft 365 E5 subscription that contains three groups named Group1, Group2, and Group3, and the users shown in the following table. You create a Conditional Access policy named CA1 that has the following settings: • Users o Include - Users and groups: Group1 o Exclude - Users and groups: Group2 - Directory roles: Global Administrator o Target resources - Include: All cloud apps o Access controls - Grant: Require multifactor authentication You create a Conditional Access policy named CA2 that has the following settings: • Users o Include - Users and groups: Group2 o Exclude - Users and groups: Group3 o Target resources - Include: All cloud apps o Access controls - Grant: Block access For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 13

You have a Microsoft Entra tenant. You need to ensure that users are prevented from consenting to high-privilege permission requests for enterprise applications. The solution must ensure that the users can consent to low-risk permission requests. What should you modify first?

Question 14

HOTSPOT - You have a Microsoft 365 E5 subscription that has a Conditional Access policy named Policy1. You need to perform the following actions: • Create a Conditional Access App Control custom policy named Custom1. • Configure Policy1 to use Custom1. What should you use to create Custom1, and in which settings of Policy1 should you enable Conditional Access App Control? To answer, select the appropriate options in the answer area, NOTE: Each correct selection is worth one point.

Question 14

HOTSPOT - You have a Microsoft Entra tenant named contoso.com that has cross-tenant access configured as shown in the following table. You have two partner organizations named Fabrikam, Inc. and A. Datum Corporation. Fabrikam has a Microsoft 365 domain named fabrikam.com. A. Datum has a Microsoft 365 domain named adatum.com. You configure cross-tenant access for fabrikam.com as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 15

HOTSPOT - You have a Microsoft 365 E5 subscription that contains the groups shown in the following table. You plan to manage the lifecycles of the groups. Which groups can be set to expire, and what is the shortest group lifetime you can set? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 15

You have a Microsoft Entra tenant that contains the identities shown in the following table. You register an app named App1 in the tenant. To which identities can you assign the Owner role for App1?

Question 16

HOTSPOT - You have a Microsoft 365 subscription that contains three users named User1, User2, and User3 and an enterprise app named App1. The subscription contains the devices shown in the following table. The subscription contains the groups shown in the following table. You create two Conditional Access policies that have the following settings: • Name: Policy1 • Users: o Include: Group1 o Exclude: Group3 • Target resources: o Include: All resources • Access controls: Block access • Name: Policy2 • Users: o Include: Group2 • Target resources: o Include: App1 • Access controls: o Grant access: Require device to be marked as compliant. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.