SC-300 Free Practice Questions — Page 5

Question 23

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1 and a Microsoft Teams team named Team1. The subscription contains five security groups named Group1, Group2, Group3, Group4, and Group5. You need to implement access packages for Site1 and Team1. The solution must meet the following requirements: • Members of Group3 must be able to request access to Site1 only. • Members of Group1 must be able to request access to Site1 and Team1. • Members of Group4 must be able to request access to Site1 and Team1. • Only members of Group2 must be able to approve access package requests from Group1 members. • Only members of Group5 must be able to approve access package requests from Group3 and Group4 members. What is the minimum number of access packages you should create?

Question 24

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to be notified if a user downloads more than 50 files in one minute from Site1. Which type of policy should you create in the Microsoft Defender for Cloud Apps?

Question 25

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to lock out accounts for five minutes when they have 10 failed sign-in attempts. To complete this task, sign in to the appropriate admin center.

Question 26

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to implement additional security checks before the members of the sg-Executive can access any company apps. The members must meet one of the following conditions: • Connect by using a device that is marked as compliant by Microsoft Intune. • Connect by using client apps that are protected by app protection policies. To complete this task, sign in to the appropriate admin center.

Question 27

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to deploy multi factor authentication (MFA). The solution must meet the following requirements: • Require MFA registration only for members of the sg-Finance group. • Exclude Debra Berger from having to register for MFA. • Implement the solution without using a Conditional Access policy. To complete this task, sign in to the appropriate admin center.

Question 28

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to ensure that users in the sg-Legal group must reauthenticate every 12 hours when they access any cloud apps managed by the tenant. To complete this task, sign in to the appropriate admin center.

Question 29

HOTSPOT - You have an Azure subscription that uses Microsoft Entra Permissions Management. You have an Amazon Web Services (AWS) account. You plan to connect Permissions Management to AWS. You need to create a Permissions Management app in Azure. How should you complete the PowerShell command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 30

HOTSPOT - You have a Microsoft Entra tenant that contains the users shown in the following table. You add the following assignment for the User Administrator role: • Scope type: Directory • Selected members: Group1 • Assignment type: Active • Assignments starts: August 15, 2022 • Assignment ends: December 15, 2022 You add the following assignment for the Exchange Administrator role: • Scope type: Directory • Selected members: Group2 • Assignment type: Eligible • Assignments starts: October 15, 2022 • Assignment ends: January 15, 2023 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 31

HOTSPOT - You have a Microsoft Entra tenant that contains a user named User1. An administrator deletes User1. You need to identify the following: • What is the maximum number of days for which you have the option to restore the User1 account? • Which is the least privileged role that can be used to restore User1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 32

DRAG DROP - Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server and hosts a shared folder named Share1. The domain contains 500 devices that run Windows 11. You have a Microsoft 365 E5 subscription that syncs with the domain. From Global Secure Access, you enable the Private access profile and deploy the Global Secure Access client to all the devices. You need to ensure that the devices can connect to Share1 remotely by using Global Secure Access. Which three actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.