Online Access Free SC-300 Exam Questions

No.# 500 and 1

No.# N-N-N

No.# B: Usage & insights

No.# A. Microsoft Authenticator

No.# B. Azure AD Connect cloud sync between the Azure AD tenant and litware.com Most Voted

No.# Correct answer is Server 2, then Azure AD. The password protection proxy is installed on a member server. You enable the banned p/w list in Azure AD, the proxy downloads it and passes it to the DCs in the domain.

No.# On February 5, 2021, User1 can answer the Review1 question again:

This statement is No. The review has an end date set for February 15, 2021, and User1 already answered the question on January 17, 2021. Since the review is set to end by a certain date (not a recurring review or multi-round), User1 cannot answer the question again unless the review is restarted.
On January 25, 2021, User2 can answer the Review1 question again:

This statement is No. User2 already answered the review question on January 20, 2021. Once answered, they cannot change their response unless the review is reopened, which isn't indicated in the settings.
On January 22, 2021, User3 can answer the Review1 question:

This statement is No. User3 is the owner of the group, not listed as a member subject to the review. Only members of the group (User1 and User2) are required to answer the review question.
In conclusion:

First statement: No
Second statement: No
Third statement: No

No.# You cannot assign licenses to an Administrative Unit, only a Group, see here https://learn.microsoft.com/en-us/answers/questions/955831/can-licenses-be-directly-assigned-to-an-administra.html
A must be the correct answer D

No.# Microsoft Graph supports two access scenarios, delegated access and app-only access. In delegated access, the app calls Microsoft Graph on behalf of a signed-in user. In app-only access, the app calls Microsoft Graph with its own identity, without a signed in user.

In this case, the app will act behalf of the signed in user, so it's clearly delegated access.

https://learn.microsoft.com/en-us/graph/permissions-overview?tabs=http#permission-types
https://learn.microsoft.com/en-us/entra/identity-platform/delegated-access-primer
https://learn.microsoft.com/en-us/entra/identity-platform/permissions-consent-overview

No.# C. SCIM 2.0

SCIM (System for Cross-domain Identity Management) is a protocol specifically designed for automating user provisioning and deprovisioning between identity providers like Azure AD and SaaS applications. It allows for automatic synchronization of user accounts, groups, and roles between systems, making it a common choice for SaaS app integration with identity providers like Azure AD

No.# Directly blocking legacy authentication
The easiest way to block legacy authentication across your entire organization is by configuring a Conditional Access policy that applies specifically to legacy authentication clients and blocks access.
Conditional Access policies apply to all client apps by default
Client apps
By default, all newly created Conditional Access policies will apply to all client app types even if the client apps condition is not configured.

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/block-legacy-authentication

No.# A. Modify the Local intranet zone settings

No.# User1:

In ideal scenario the box next to outlook.com in collaboration settings should be checked for the invitation to get to the user's mailbox

In this case , it says invitation is not accepted as per question ,(that means invitation is sent to user but not accepted.) So I believe the user settings for collaboration was changed after the invitation was sent to user.

Therefore User 1 should be able to to accept invitation and access the app

User2:
In question it says the user2 already accepted invitation hence again the user settings for external collaboration was changed after the invitation was sent.

Therefore User2 can access the app

User3:
The invitation wont even be sent to user 3 mailbox since user settings for collaboration doesn't allow invitation to be sent to adatum.com

No.# To create access reviews for Azure resources, you must be assigned to the Owner or the User Access Administrator role for the Azure resources. To create access reviews for Azure AD roles, you must be assigned to the Global Administrator or the Privileged Role Administrator role.

https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-create-roles-and-resource-roles-review#prerequisites

No.# B. a conditional access policy in Azure Active Directory (Azure AD)

Conditional access policies in Azure AD allow you to control access to resources based on conditions such as user location, device compliance, and client application type. By creating a conditional access policy that enforces Modern authentication protocols and blocks Basic authentication, you can achieve the desired security outcome. This will ensure that only email clients supporting Modern authentication are allowed to connect to Exchange Online.

Options A, C, and D are not directly related to enforcing the use of Modern authentication protocols for Exchange Online and would not achieve the goal of blocking Basic authentication.

No.# D. From Secret1, configure the Access control (IAM) settings.

This allows you to assign the necessary permissions specifically for Secret1 without granting access to other secrets in Vault1, ensuring that Automation1 can only read this specific secret and nothing else in the key vault.

No.# Admin 2
Application Developer as per link below.
https://learn.microsoft.com/en-us/azure/active-directory/develop/web-app-tutorial-01-register-application

No.# 1. NO - just, tested it. You cannot approve your own request, it is not even visable under "approve requests"
2. No of course.
3.Yes - can not approve without justificaiton

No.# Option to edit job title appears greyed out for on-premise synced users, usage location can be modified
I would go for the following answers
1. User2 and User3 only
2. User1, User2 and user3

No.# Tried this with all the suggested answer, and none of them can modify the review frequency of Package1. See explanation below.

Security Admin
- Cannot update Policy

Privileged role administrator
- Gets “No access” to Access Packages.

External Identity Provider administrator
- Gets “No access” to Access Packages.

User administrator
- Gets “No access” to Access Packages.

User administrator used to be the right choice for this question. However, things have now changed:
The User Administrator role is no longer allowed to manage catalogs and access packages in Azure AD Entitlement Management. Please transition to the Identity Governance Administrator role to continue managing access without disruption, or go to the Entitlement Management settings page if you need to temporarily opt out.

So, if there is an option in this question to choose Identity Governance Administrator, choose that.

https://learn.microsoft.com/azure/active-directory/governance/identity-governance-overview?WT.mc_id=Portal-Microsoft_Azure_ELMAdmin#appendix---least-privileged-roles-for-managing-in-identity-governance-features...