SC-300 Day 1&2

What is the defining feature of hybrid identity solutions?

• They create common user identities for authenticating and authorizing users who operate workstations<br />that run on a variety of operating systems.
• They create common user identities that are trusted for authentication and authorization between<br />organizations.
• They create common user identities for authentication and authorization to both on-premises and<br />cloud-based resources.

Which authentication method requires the least effort regarding deployment, maintenance, and infrastructure?

• Password hash synchronization (PHS).
• Pass-through authentication (PTA).
• Federated authentication.

What are dynamic groups?

• Dynamic groups are Microsoft 365 groups whose memberships consist of Dynamics 365 users, who<br />require special attribute configurations.
• Dynamic groups are security groups whose memberships are based on user attributes (such as<br />userType, department, or country/region).
• Dynamic groups are groups whose membership numbers fluctuate significantly within a given<br />timeframe.

Typically, Azure AD defines users in three ways. Cloud identities and guest users are two of the ways. What<br />is the third way Azure AD defines users?

• As non-connected users.
• As transitional users.
• As directory-synchronized identities.

Azure AD group-based licensing makes large scale management easier. Typically, how soon are license<br />modifications effective after group membership changes are made?

• Within the timeframe of local domain controllers being refreshed.
• Within minutes of a membership change.
• Within 24 hours of a membership change.

Azure AD allows for the definition of two different types of groups; one type is Security groups, which are<br />used to manage member and computer access to shared resources. What is the other type of group?

• Distribution groups, which are used for communications purposes via applications such as Teams and<br />Exchange.
• Licensing groups, which are used to make it easier to administer software licenses.
• Microsoft 365 groups, which provide access to shared mailboxes, calendars, SharePoint sites, and so<br />on.

The proliferation of many types of devices and bring your own device (BYOD) concept require IT professionals<br />to accommodate two rather different goals. One goal is to allow users to be productive wherever and<br />anytime. What is the other goal?

• Provide antimalware apps for a various devices.
• Establish baseline security guidelines for users.
• Protect the organization's assets.

There are two risk policies that can be enabled in the directory. One is user risk policy. Which is the other<br />risk policy?

• Mobile device access risk policy
• Sign-in risk policy
• Hybrid identity sign-in risk policy

What action does Conditional Access perform?

• It is the component that enforces multifactor authentication policies for access
• It analyzes signals such as user, device, and location to enforce organizational access policies.
• It monitors and logs all access attempts.

You have an Azure Active Directory (Azure AD) Azure AD tenant. You need to bulk create 25 new user accounts by uploading a template file. Which properties are required in the template file?

• displayName, identityIssuer, usageLocation, and userType

• accountEnabled, givenName, surname, and userPrincipalName

• accountEnabled, displayName, userPrincipalName, and passwordProfile

• accountEnabled, passwordProfile, usageLocation, and userPrincipalName