SC-300 Free Practice Questions — Page 8

Question 55

You have a Microsoft Entra tenant that contains the users shown in the following table. Admin4 creates a Conditional Access policy named Policy1 by using the Require multifactor authentication for Azure management template. Which users will be required to use multi-factor authentication (MFA) the next time they sign in?

Question 56

DRAG DROP - You have a Microsoft 365 E5 subscription. The subscription contains 500 devices that run Windows. You deploy the Global Secure Access client to the devices. You need to prevent users from accessing https://contoso.com from the devices. Which three actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 57

You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users. From the Groups blade in the Microsoft Entra admin center, you assign Microsoft Office 365 Enterprise E5 licenses to a group that includes all users. You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort. What should you use?

Question 58

HOTSPOT - You have a Microsoft Entra tenant that contains the identities shown in the following table. Group1 has the following configurations: • Owners: User1, User4 • Members: User1, Managed2, Group2 You create an access review that has the following settings: • Name: Review1 • Review scope: Select Teams + Groups • Group: Group1 • Scope: All users • Select reviewers: Group owner(s) The Fallback reviewers setting is NOT configured. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 59

HOTSPOT - You have a Microsoft Entra tenant that contains the users shown in the following table. The tenant contains the identities shown in the following table. Which users can create custom security attributes, and to which identities can the attributes be assigned? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 60

You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of . You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as . What should you do?

Question 61

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to configure Microsoft Entra Identity Protection to meet the following requirements: • Require multi-factor authentication (MFA) for any sign-ins at the high risk level. • Apply the configuration to all users except for Mod Administrator. To complete this task, sign in to the appropriate admin center.

Question 62

You have a management group named Group1 that contains two Azure subscriptions named Sub1 and Sub2. The subscriptions are linked to a Microsoft Entra tenant that contains a user named User1. You need to ensure that User1 can onboard Sub1 to Permissions Management. The solution must follow the principle of least privilege. Which permission should you grant to User1?

Question 63

HOTSPOT - Your on-premises network contains an Active Directory domain that uses Microsoft Entra Connect sync to sync with a Microsoft Entra tenant. You need to configure Microsoft Entra Connect sync to meet the following requirements: • Microsoft Entra sign-ins must be authenticated by an Active Directory domain controller. • Active Directory domain users must be able to use Microsoft Entra self-service password reset (SSPR). • Minimize administrative effort. What should you use for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 64

HOTSPOT - You have an Azure subscription named Sub1 that contains three users named User1, User2, and User3. Sub1 has a storage account named storage1 that contains the resources shown in the following table. Sub1 contains the users shown in the following table. Which users can read File1, and which users can read File2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.