SC - 300 Day- 3 and 4

Which of these authentication methods offers the highest level of security?

• SMS verification

• Microsoft Authenticator App

• Voice call verification

Which is the recommended mode to start with when deploying Azure AD Password Protection?

• Audit mode

• None

• Enforced mode

When would you use Mobile Application Management (MAM) without enrollment to protect sensitive data in a work or school-related app?

• Bring-your-own-device (BYOD) scenarios

• Smart lockout policies

• Session management controls

What is user sign-in frequency?

• User sign-in frequency defines the time period before a user is asked to sign in again when attempting to access a resource.

• User sign-in frequency defines the number of times a user signs in from a single device in a 24-hour period

• User sign-in frequency defines the number of devices a single user is signed in to.

Which task can a user with the Security Operator role perform?

• Configure alerts

• Confirm safe sign-in

• Reset a password for a user

There are two risk policies that can be enabled in the directory. One is user risk policy. Which is the other risk policy?

• Mobile device access risk policy

• Sign-in risk policy

• Hybrid identity sign-in risk policy

Which of the following directories is maintained by Microsoft and used to publish applications?

• SaaS directory

• Single-sign-on app connected directory

• App gallery directory

Which user provision mode(s) are supported for applications in the Azure AD gallery?

• Administrator approved and automatic.

• You should only use Manual Provisioning to ensure security.

• Manual and automatic

Answer explanation

Manual provisioning means there is no automatic Azure AD provisioning connector for the app yet. User accounts must be created manually, for example by adding users directly into the app's administrative portal or uploading a spreadsheet with user account detail. Consult the documentation provided by the app or contact the app developer to determine what mechanisms are available. Automatic means that an Azure AD provisioning connector has been developed for this application.

Which of the following groups of information can be found in the Azure Active Directory Usage and insights report?

• The top used application in your organization and Who gave consent to an application and The top sign-in errors for each application

• The top used application in your organization and The applications with the most failed sign-ins and The service that logged the occurrence

• The top used applications in your organization and The application with the most failed sign-ins and The top sign-in errors for each application

Answer explanation

With the usage and insights report, you can get an application-centric view of your sign-in data to find information about these three topics.

By default, who has the ability to create application registrations or consent to applications in Azure Active Directory?

• All Azure AD Users

• All Azure AD and Guest users

• Only users assigned the Global Administrator role

Answer explanation

In Azure AD all users can register application registrations and manage all aspects of applications they create. Everyone also has the ability to consent to apps accessing company data on their behalf.