SC-300: Identity and Access Administrator - TCS

Which of the following directories is maintained by Microsoft and used to publish applications?

• SaaS directory

• App gallery directory

• Single-sign-on app connected directory

Which one of the following is a best practice for building multi-tenant apps?

• Follow the principle of least user access to ensure that your app only requests permissions it actually needs.

• Test your app in each tenant to ensure functionality.

• Use names and descriptions that are only meaningful to your team.

What service and connector work together to securely pass a user sign-on token from Azure AD to a web application running in an organization's on-premises datacenter?

• The Azure AD Application Proxy service and Application Proxy connector

• An Application Proxy connector and the Azure Firewall service

• The Azure AD Application Proxy service and Application Gateway

Which user provision mode(s) are supported for applications in the Azure AD gallery?

• Administrator approved and automatic.

• You should only use Manual Provisioning to ensure security.

• Manual and automatic

What is Microsoft's Cloud Access Security Broker solution?

• Microsoft Defender for Cloud Apps

• Microsoft Cloud Computing Services

• Microsoft Security Center

What is the purpose of the audit logs?

• Azure AD audit logs allow customer to monitor activity when provisioning new services within Azure.

• Azure AD audit logs provide records of system activities for compliance reporting.

• Azure AD audit logs provide a comparison of budgeted Azure usage compared to actual.

Typically, Azure AD defines users in three ways. Cloud identities and guest users are two of the ways. What is the third way Azure AD defines users?

• As non-connected users.

• As directory-synchronized identities.

• As transitional users.

Which roles can only be assigned using Privileged Identity Management?

• Permanent roles.

• Eligible roles.

• Transient roles.

Answer explanation

Permanently active roles are the normal roles assigned through Azure Active Directory and Azure resources while eligible roles can only be assigned in Privileged Identity Management.

What is an access package?

• An access package is a group of users with the access they need to work on a project or perform a task.

• An access package is a bundle of all the resources with the access a user needs to work on a project or perform their task.

• An access package is a used to create a transitive trust between B2B organizations.

What do catalogs contain?

• Device registrations

• Resources and access packages

• User lists