Microsoft SC-300 Practice Exam Questions

Microsoft SC-300 Sample Question Answers

Question # 1

You have a Microsoft 365 tenant You currently allow email clients that use Basic authentication to connect to Microsoft Exchange Online. You need to ensure that users can connect to Exchange Online only from email clients that use Modern authentication protocols. What should you implement?

A. a Microsoft Defender for Cloud Apps OAuth policy 
B. a Microsoft Intune app protection policy 
C. a Microsoft Intune compliance policy 
D. a Microsoft Entra conditional access policy 

Show Answer

Question # 2

You have an Azure subscription that contains a storage account named storage1. You plan to deploy an app named App1 that will be hosted on multiple virtual machines. The virtual machines will authenticate to a Third-party API by using secrets You need to recommend an authentication solution for the virtual machines The solution must meet the following requirements • Securely store secrets. • Ensure that credentials do NOT need to be stored in the App1 code. • Ensure that the virtual machines can access Azure resources by using Microsoft Entra authentication. • Minimize administrative effort. What should you include in the recommendation?

A. user accounts and Storage Service Encryption 
B. user accounts and Azure Key Vault 
C. user-assigned managed identities and Azure Key Vault 
D. system-assigned managed identities and Storage Service Encryption 

Show Answer

Question # 3

Your network contains an on-premises an Active Directory Domain Services (AD DS) domain. The domain syncs with a Microsoft 365 subscription by using Microsoft Entra Connect Sync. You plan to create 300 new users. The details of the user accounts are saved in a Microsoft Excel spreadsheet You need to automate the creation of the users. The solution meet the following requirements: • The users must be able to access the resources in the Microsoft 365 subscription. • The users must be able to access the resources on the on-premises network. • Administrative effort must be minimized. Which PowerShell cmdlets should you include in the solution?

A. New-MgUser and Get-Content 
B. Set-HgUser and Import-CSV
C. Set-ADUser and Get-Content 
D. New-ADUser and Import-CSV 

Show Answer

Question # 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 tenant. All users must use the Microsoft Authenticator app for multi-factor authentication (MFA) whenaccessing Microsoft 365 services. Some users report that they received an MFA prompt on their Microsoft Authenticator app without initiating a sign-in request. You need to block the users automatically when they report an MFA request that they did not initiate. Solution: From the Azure portal, you configure the Notifications settings for multi-factor authentication (MFA). Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 5

You have on-premises Linux devices. You have a Microsoft 365 E5 subscription. You plan to configure Global Secure Access Internet Access. You need to ensure that the devices can connect to Global Secure Access. What should you do?

A. Deploy a private network connector. 
B. Configure the Adaptive Access settings. 
C. Install the Azure Connected Machine agent on the devices. 
D. Create a remote network. 

Show Answer

Question # 6

Your company purchases a Microsoft 565 ES subscription. A user named User1 is assigned the Security Administrator role. You need to ensure that User1 can create Microsoft Defender for Cloud Apps session policies. What should you do first?

A. Create a Conditional Access policy and select Use Conditional Access App Control. 
B. Assign the Cloud Application Administrator role to Used. 
C. Create a Conditional Access policy and select Require app protection policy. 
D. Assign the Cloud App Security Administrator role to User1. 

Show Answer

Question # 7

You have a Microsoft 365 subscription that contains a user named User1. You need to ensure that User1 can create access reviews for Azure AD roles. The solution must use the principal of least privilege. Which role should you assign to User1?

A. Privileged role administrator 
B. Identify Governance administrator 
C. User administrator 
D. User Access Administrate 

Show Answer

Question # 8

You have a Microsoft Entra tenant that contains three users named User1. User2, and User3. You need to configure just-in-time (JIT) access to admin roles by using Privileged Identity Management (PIM). The solution must meet the following requirements: • Ensure that User1 can use the User Administrator role without approval. • Ensure that User2 can use the User Administrator role once User3 has approved the role request of User2. What should you create first?

A. Conditional Access policies 
B. security groups 
C. administrative units 
D. role assignments 

Show Answer

Question # 9

You have three Azure subscriptions that are linked to a single Microsoft Entra tenant. You need to evaluate and remediate the risks associated with highly privileged accounts. The solution must minimize administrative effort. What should you use?

A. Microsoft Entra Verified ID 
B. Privileged Identify Management (PIM) 
C. Global Secure Access 
D. Microsoft Entra Permissions Management 

Show Answer

Question # 10

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Linux. You need to configure enhanced security for VM1. The solution must meet the following requirements: • Ensure that users can sign in to VM1 by using their Microsoft Entra credentials • Ensure That users authenticate by using multi-factor out-of-band • Prevent users from signing in to VM1 by using passwords. Which two authentication methods can you include in the solution? Each correct answer presents a complete solution. NOTE: Each correct selection Is worth one point.

A. the Microsoft Authenticator app 
B. Windows Hello for Business 
C. Passkey(FID02)
D. Temporary Access Pass 
E. SMS 

Show Answer