SC-300

Your organization collaborates with a partner company. You want to allow their users to access your Teams environment securely. What should you configure?

• Conditional Access policy

• Cross-tenant access settings in Microsoft Entra

• Azure AD Connect

A user attempts to sign in from an unfamiliar location and device. Microsoft Entra flags this as risky. Which policy evaluates this behavior?

• Conditional Access policy

• User risk policy

• Sign-in risk policy

You want to block access for users who are flagged as high-risk due to leaked credentials. What should you configure?

• Sign-in risk policy

• User risk policy

• Conditional Access with device filters

You need to assign temporary admin access to a user for a project. What is the best practice?

A. Assign Global Admin permanently
B. Use Privileged Identity Management (PIM) for just-in-time access
C. Add them to the Admin group manually
D. Share credentials of an admin account

• Use Privileged Identity Management (PIM) for just-in-time access

• Assign Global Admin permanently

• Add them to the Admin group manually

Entra group-based licensing makes large scale management easier. Typically, how soon are license<br />modifications effective after group membership changes are made?

• Within the timeframe of local domain controllers being refreshed.
• Within minutes of a membership change.
• Within 24 hours of a membership change.

You want to detect lateral movement and credential theft within your on-premises environment. Which tool should you use?

• Microsoft Defender for Endpoint

• Microsoft Defender for Identity

• Azure AD Identity Protection

Which of the following is a valid use case for assigning roles to users?

• To change their password

• To restrict or grant access to resources

• To update their profile picture

There are two risk policies that can be enabled in the directory. One is user risk policy. Which is the other risk policy?

• Mobile device access risk policy
• Sign-in risk policy
• Hybrid identity sign-in risk policy

What action does Conditional Access perform?

• It is the component that enforces multifactor authentication policies for access
• It analyzes signals such as user, device, and location to enforce organizational access policies.
• It monitors and logs all access attempts.

Your organization wants to authenticate users against on-premises AD without storing passwords in the cloud. Which method should you choose?

• Password Hash Sync

• Pass-through Authentication

• Federation

• Azure AD Join