Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Microsoft
Microsoft Certified: Identity and Access Administrator Associate
SC-300
Microsoft Identity and Access Administrator Questions and Answers

Pass the Microsoft Certified: Identity and Access Administrator Associate SC-300 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam SC-300 Premium Access

View all detail and faqs for the SC-300 exam

Go to Exam

799 Students Passed

85% Average Score

94% Same Questions

Viewing page 3 out of 12 pages

Viewing questions 21-30 out of questions

Questions # 21:

You need to configure the detection of multi-staged attacks to meet the monitoring requirements.

What should you do?

Options:

Customize the Azure Sentinel rule logic.

Create a workbook.

Add Azure Sentinel data connectors.

Add an Azure Sentinel playbook.

Answer

Questions # 22:

You need to configure the assignment of Azure AD licenses to the Litware users. The solution must meet the licensing requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE:Each correct selection is worth one point.

Question # 22

Options:

Answer

Answer:

Explanation

Litware recently added a custom user attribute namedLWLicensesto the litware.com Active Directory forest. Litware wants to manage the assignment of Azure AD licenses by modifying the value of theLWLicensesattribute. Users who have the appropriate value forLWLicensesmust be added automatically to a Microsoft 365 group that has the appropriate licenses assigned.

Questions # 23:

You need to track application access assignments by using Identity Governance. The solution must meet the delegation requirements.

What should you do first?

Options:

Modify the User consent settings for the enterprise applications.

Create a catalog.

Create a program.

Modify the Admin consent requests settings for the enterprise applications.

Answer

Explanation

[Reference:, https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-overview, , , , , ]

Questions # 24:

You need to meet the authentication requirements for leaked credentials.

What should you do?

Options:

Enable federation with PingFederate in Azure AD Connect.

Configure Azure AD Password Protection.

Enable password hash synchronization in Azure AD Connect.

Configure an authentication method policy in Azure AD.

Answer

Explanation

[Reference:, https://docs.microsoft.com/en-us/azure/security/fundamentals/steps-secure-identity, , , , ]

Questions # 25:

You need to implement on-premises application and SharePoint Online restrictions to meet the authentication requirements and the access requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE:Each correct selection is worth one point.

Question # 25

Options:

Answer

Answer:

Questions # 26:

You need to configure the MFA settings for users who connect from the Boston office. The solution must meet the authentication requirements and the access requirements.

What should you configure?

Options:

named locations that have a private IP address range

named locations that have a public IP address range

trusted IPs that have a public IP address range

trusted IPs that have a private IP address range

Answer

Explanation

[Reference:, https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition, , Location offer your country set, IP ranges MFA trusted IP and corporate network VPN gateway IP address: This is the public IP address of the VPN device for your on-premises network. The VPN device requires an IPv4 public IP address. Specify a valid public IP address for the VPN device to which you want to connect. It must be reachable by Azure Client Address space: List the IP address ranges that you want routed to the local on-premises network through this gateway. You can add multiple address space ranges. Make sure that the ranges you specify here do not overlap with ranges of other networks your virtual network connects to, or with the address ranges of the virtual network itself., , , ]

Questions # 27:

You need to configure app registration in Azure AD to meet the delegation requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE:Each correct selection is worth one point.

Question # 27

Options:

Answer

Answer:

Explanation

[Reference:, https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-app-roles, , , , ]

Questions # 28:

You need to implement password restrictions to meet the authentication requirements.

You install the Azure AD password Protection DC agent on DC1.

What should you do next? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 28

Options:

Answer

Answer:

Explanation

Server1

On DC1

Questions # 29:

You need to identify which roles to use for managing role assignments. The solution must meet the delegation requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE:Each correct selection is worth one point.

Question # 29

Options:

Answer

Answer:

Explanation

[Reference:, https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal, , https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference, , , , , ]

Questions # 30:

You need to create the LWGroup1 group to meet the management requirements.

How should you complete the dynamic membership rule? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You many need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Question # 30