Online Access Free SC-300 Practice Test

You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users.
From the Groups blade in the Azure Active Directory admin center, you assign Microsoft 365 Enterprise E5 licenses to the users.
You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort.
What should you use?

• A.the Licenses blade in the Azure Active Directory admin center
• B.the Identity Governance blade in the Azure Active Directory admin center
• C.the Set-WindowsProductKey cmdlet
• D.the Set-AzureAdUser cmdlet

You have an Azure subscription that uses Azure AD Privileged Identity Management (PIM).
You need to identify users that are eligible for the Cloud Application Administrator role.
Which blade in the Privileged Identity Management settings should you use?

• A.Review access
• B.Azure resources
• C.Privileged access groups
• D.Azure AD roles

You have a Microsoft 365 tenant.
The Azure Active Directory (Azure AD) tenant syncs to an on-premises Active Directory domain. The domain contains the servers shown in the following table.

The domain controllers are prevented from communicating to the internet.
You implement Azure AD Password Protection on Server1 and Server2.
You deploy a new server named Server4 that runs Windows Server 2019.
You need to ensure that Azure AD Password Protection will continue to work if a single server fails.
What should you implement on Server4?

• A.Azure AD Application Proxy
• B.the Azure AD Password Protection proxy service
• C.Password Change Notification Service (PCNS)
• D.Azure AD Connect

You work for a company named Contoso, Ltd. that has a Microsoft Entra tenant named contoso.com. Contoso is working on a project with the following two partner companies:
* A company named A. Datum Corporation that has a Microsoft Entra tenant named adatum.com
* A company named Fabrikam, Inc. that has a Microsoft Entra tenant named fabtikam.com When you attempt to invite a new guest user from adatum.com to contoso.com, you receive an error message.
You can successfully invite a new guest user from fabiikam.com to contoso.com. You need to be able to invite new guest users from adatum.com to contoso.com. What should you configure?

• A.Verifiable credentials
• B.Collaboration restrictions
• C.Named locations
• D.Guest invite settings

You have a Microsoft 365 tenant.
You configure a conditional access policy as shown in the Conditional Access policy exhibit. (Click the Conditional Access policy tab.)

You view the User administrator role settings as shown in the Role setting details exhibit. (Click the Role setting details tab.)

You view the User administrator role assignments as shown in the Role assignments exhibit. (Click the Role assignments lab.)

For each of the following statement, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Statement
Answer
1. Before Admin1 can perform a task that requires the User Administrator role, an approver must approve the activation request.
Yes
2. Admin2 can request activation of the User Administrator role for a period of two hours.
No
3. If Admin3 connects to the Azure Active Directory admin center, and then activates the User Administrator role, Admin3 will be prompted to authenticate by using multi-factor authentication (MFA) twice.
Based on Microsoft's SC-300 Identity and Access Administrator Study Guide , Microsoft Learn module
"Manage Azure AD roles by using Privileged Identity Management (PIM)" , and Exam Ref SC-300 , the following logic applies:
* Approval requirement (Admin1) - In the Role setting details image, Require approval to activate is set to Yes, and one approver is listed. This means before any user (e.g., Admin1) can activate the User Administrator role, approval must be granted. Therefore, Admin1 must have the activation request approved before performing any User Administrator tasks. # (Yes)
* Activation duration (Admin2) - The configuration shows Activation maximum duration (hours): 8 hours . This defines the maximum allowed time a user can remain active after role activation. Admin2 can activate for up to 8 hours, not 2 hours unless specifically limited during activation. Hence, the statement claiming Admin2 can activate for "two hours" is incorrect. # (No)
* MFA enforcement (Admin3) - Two relevant controls exist:
* Conditional Access policy requiring MFA for all users.
* PIM role setting On activation, require Azure MFA = Yes.
According to Microsoft documentation, when both Conditional Access and PIM MFA enforcement apply, Azure AD intelligently avoids redundant prompts by honoring a single valid MFA session token. This means Admin3 would only be prompted once for MFA, even though both mechanisms require it. # (No) Therefore, as verified by official Microsoft materials and SC-300 documentation: