Free Microsoft SC-300 Exam Actual Questions

The questions for SC-300 were last updated On Dec 18, 2024

Question No. 1

You need to configure the MFA settings for users who connect from the Boston office. The solution must meet the authentication requirements and the access requirements. What should you configure?

Show Answer Hide Answer
Correct Answer: B

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

Location offer your country set, IP ranges MFA trusted IP and corporate network VPN gateway IP address: This is the public IP address of the VPN device for your on-premises network. The VPN device requires an IPv4 public IP address. Specify a valid public IP address for the VPN device to which you want to connect. It must be reachable by Azure Client Address space: List the IP address ranges that you want routed to the local on-premises network through this gateway. You can add multiple address space ranges. Make sure that the ranges you specify here do not overlap with ranges of other networks your virtual network connects to, or with the address ranges of the virtual network itself.

Question No. 2

You have an Azure AD tenant named contoso.com that contains the resources shown in the following table.

You create a user named Admin 1.

You need to ensure that Admin can enable Security defaults for contoso.com.

What should you do first?

Show Answer Hide Answer
Correct Answer: D

To enable Security defaults for contoso.com, you should first sign in to the Azure portal as asecurity administrator, Conditional Access administrator, or global administrator. Then, browse toAzure Active Directory > Propertiesand selectManage security defaults. Set theEnable security defaultstoggle toYesand selectSave.

After that, you can assign Admin1 theIdentity Administratorrole for Au1 to enable them to manage security defaults for the tenant.

https://practical365.com/what-are-azure-ad-security-defaults-and-should-you-use-them/


Question No. 3

You need implement the planned changes for application access to organizational dat

a. What should you configure?

Show Answer Hide Answer
Correct Answer: B

Question No. 4

You have an Azure Active Directory (Azure AD) tenant that contains the objects shown in the following table.

Which objects can you add as eligible in Azure Privileged identity Management (PIM) for an Azure AD role?

Show Answer Hide Answer
Question No. 5

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.

You need to identify which users access Facebook from their devices and browsers. The solution must minimize administrative effort.

What should you do first?

Show Answer Hide Answer
Correct Answer: C