SC-300 Free Practice Questions — Page 9

Question 65

HOTSPOT - You have a Microsoft Entra tenant named contoso.com that contains an administrative unit named AU1 and two users named User1 and User2. User1 is a member of AU1. You need to perform the following role assignments: • User1: Security Administrator • User2: User Administrator For which scopes can each user be assigned the role? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 67

HOTSPOT - You have a Microsoft Entra tenant that contains two groups named Group1 and Group2 and the users shown in the following table. Group2 is a member of Group1. You configure an access review that has the following settings: • Name: Review1 • Select what to review: Teams + Groups • Review scope: Select Teams + groups • Group: Group1 • Scope: Guest users only • Select reviewers: Group owners(s) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 69

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to implement a process to review guest users who have access to the Salesforce app. The review must meet the following requirements: • The reviews must occur monthly. • The manager of each guest user must review the access. • If the reviews are NOT completed within five days, access must be removed. • If the guest user does not have a manager, Megan Bowen must review the access. To complete this task, sign in to the appropriate admin center.

Question 70

HOTSPOT - You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2. The subscription contains the users shown in the following table. You create the following Conditional Access policies: • Name: Policy1 • Users: o Include: Group1 o Exclude: Group2 • Target resources: o Include: All cloud apps • Grant: o Grant access: Require multi-factor authentication • Session: o Persistent browser session: Never persistent • Name: Policy2 • Users: o Include: - Directory roles: Global Administrator - Users and groups: User3 o Exclude: Group2 • Target resources: o Include: All cloud apps • Session: o Sign-in frequency: - Periodic authentication: 2 hours For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 71

Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs user accounts with a Microsoft 365 E5 subscription. You need to ensure that on-premises account lockout policies are applied to Microsoft Entra sign-ins. What should you configure?

Question 72

You have a Microsoft 365 subscription that uses Microsoft Defender for Cloud Apps. You have multiple third-party apps that access the resources in the subscription. You need to monitor the access of the third-party apps. What should you create?

Question 73

HOTSPOT - You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant. The tenant contains the users shown in the following table. Sub1 contains a resource group named RG1. The tenant contains the groups shown in the following table. You deploy a virtual machine named VM1 to RG1. VM1 runs Windows Server and has Microsoft Entra login enabled. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 74

You have a Microsoft Entra tenant. You configure self-service password reset (SSPR) by using the following settings: • Require users to register when signing in: Yes • Number of methods required to reset: 1 What is a valid authentication method available to users?

Question 75

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to create a group named Audit. The solution must ensure that the members of Audit can activate the Security Reader role. To complete this task, sign in to the appropriate admin center.

Question 77

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to prevent all users from using passwords that are variations of the word Falcon. To complete this task, sign in to the appropriate admin center.