SC-300 Free Practice Questions — Page 3

Question 23

You have a Microsoft Entra tenant. You have 500 devices that run either Windows 11, macOS, iOS, or Android and are enrolled in Microsoft Intune. You plan to deploy the Global Secure Access client. From the Microsoft Entra admin center, you download the Global Secure Access client for each operating system. You need to deploy the client to the macOS devices by using Intune. Which file extension should you use when uploading the client to Intune?

Question 24

You have on-premises Linux devices. You have a Microsoft 365 E5 subscription. You plan to configure Global Secure Access Internet Access. You need to ensure that the devices can connect to Global Secure Access. What should you do?

Question 25

You have an Azure subscription that contains a user named User1 and an Azure key vault named Vault1. You need to ensure that User1 can read the metadata of certificates, keys, and secrets stored in Vault1. The solution must follow the principle of least privilege. Which role should you assign to User1?

Question 26

You have a Microsoft 365 E5 subscription. You create an access review named Review1. Review1 requires that every six months, Microsoft 365 group owners review guest user access to their groups. You need to ensure that if the group owners fail to review the membership of Review1, guest users are removed automatically. Which settings should you configure for Review1?

Question 27

You have a Microsoft 365 subscription. You need to ensure that users can grant enterprise applications access to their profile. The solution must ensure that the users can consent only to the User.Read and profile delegated permissions. What should you configure first?

Question 28

HOTSPOT - You have an Azure subscription that contains a group named Group1 and two users named User1 and User2. User1 is a member of Group1. You register an enterprise application named App1. You enable self-service application access for App1 and configure the following settings: • Allow users to request access to this application: Yes • To which group should assigned users be added: Group1 • Require approval before granting access to this application: Yes • Who is allowed to approve access to this application: User2 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 29

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to ensure that all users can consent to apps that require permission to read their user profile. Users must be prevented from consenting to apps that require any other permissions. To complete this task, sign in to the appropriate admin center.

Question 30

You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users. From the Groups blade in the Microsoft Entra admin center, you assign Microsoft Office 365 Enterprise E5 licenses to a group that includes all users. You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort. What should you use?

Question 31

Your company has a Microsoft Entra tenant that contains a user named User1. The company has two departments named marketing and finance. You need to grant permissions to User1 to manage only the users in the marketing department. What should you create first?

Question 32

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to configure consent for applications that require access to data in the Microsoft 365 subscription. The solution must meet the following requirements: If a user cannot provide consent to an application, the user must be able to request that an administrator review the consents requests. Allan Deyoung must be able to review the consent requests of the users. To complete this task, sign in to the appropriate admin center.