SC300 Day 3&4

Which of the following directories is maintained by Microsoft and used to publish applications?

• SaaS directory
• Single sign-on app connected directory
• App gallery directory

Which one of the following is a best practice for building multi-tenant apps?

• Follow the principle of least user access to ensure that your app only requests permissions it actually<br />needs.
• Test your app in each tenant to ensure functionality.
• Use names and descriptions that are only meaningful to your team.

Which two ways do you declare app roles by using the Azure portal?

• Certificates and secrets.
• Use the App manifest editor and API permissions.
• Use the App roles and App manifest editor.

What service and connector work together to securely pass a user sign-on token from Azure AD to a web<br />application running in an organization's on-premises datacenter?

• The Azure AD Application Proxy service and Application Proxy connector
• An Application Proxy connector and the Azure Firewall service
• The Azure AD Application Proxy service and Application Gateway

Which user provision modes are supported for applications in the Azure AD gallery?

• Administrator approved and automatic.
• You should only use Manual Provisioning to ensure security.
• Manual and automatic

Which of the following groups of information can be found in the Azure Active Directory Usage and insights<br />report?

• The top used application in your organization -and- Who gave consent to an application -and- The<br />top sign-in errors for each application
• The top used application in your organization and The applications with the most failed sign-ins and<br />The service that logged the occurrence
• The top used applications in your organization and The application with the most failed sign-ins and<br />The top sign-in errors for each application

What is Microsoft's Cloud Access Security Broker solution?

• Microsoft Cloud App Security
• Microsoft Cloud Computing Services
• Microsoft Security Center

By default, who has the ability to create application registrations or consent to applications in Azure Active<br />Directory?

• All Azure AD Users
• All Azure AD and Guest users
• Only users assigned the Global Administrator role

Which statement best describes the Cloud Application Administrator role?

• Users in this role have the same permissions as the Application Administrator role, excluding the<br />ability to manage application proxy. Users assigned to this role are not added as owners when<br />creating new application registrations or enterprise applications.
• Users in this role have the same permissions as the Application Management role, excluding the<br />ability to manage application proxy. Users assigned to this role are not added as owners when<br />creating new application registrations or enterprise applications.
• Users in this role have the same permissions as the Site Administrator role, including the ability to<br />manage application proxy

What is the purpose of the audit logs?

• Azure AD audit logs provide a comparison of budgeted Azure usage compared to actual.
• Azure AD audit logs provide records of system activities for compliance reporting
• Azure AD audit logs allow customer to monitor activity when provisioning new services within Azure.