Nov-2025 Download Free Latest Exam SC-300 Certified Sample Questions
Prepare for your exam certification with our SC-300 Certified Microsoft
The Microsoft SC-300 exam is intended for those who have experience in technology and security roles, and who are familiar with Microsoft 365 workloads. It is ideal for professionals such as security administrators, systems administrators, and IT professionals who are responsible for managing identity and access solutions in their respective organizations. Microsoft Identity and Access Administrator certification exam is designed to help individuals demonstrate their expertise in identity and access management and to validate their skills to potential employers.
Microsoft SC-300 certification exam is a great certification for professionals who want to enhance their career in managing identity and access in Microsoft Azure. Microsoft Identity and Access Administrator certification will test your practical skills and knowledge about Azure identity and access management. By passing this certification exam, you can demonstrate your expertise in implementing and managing identity solutions for cloud-based applications. Therefore, if you want to become a Microsoft Identity and Access Administrator, you should consider taking this certification exam.
To pass the Microsoft SC-300 exam, candidates must demonstrate their ability to implement and manage Azure Active Directory, configure access management for Azure resources, and implement multi-factor authentication. They must also be able to monitor and troubleshoot identity and access solutions, as well as implement conditional access policies in Azure. SC-300 exam consists of multiple-choice questions and requires a passing score of 700 out of 1000. Passing the Microsoft SC-300 exam is a great way to demonstrate your expertise in identity and access management in Azure, and can help you advance your career in this field.
NEW QUESTION # 130
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
All users who run applications registered in Azure AD are subject to conditional access policies.
You need to prevent the users from using legacy authentication.
What should you include in the conditional access policies to filter out legacy authentication attempts?
- A. a user risk condition
- B. a client apps condition
- C. a sign-in risk condition
- D. a cloud apps or actions condition
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/block-legacy-authentication
NEW QUESTION # 131
You need to identify which roles to use for managing role assignments. The solution must meet the delegation requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal
https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference
NEW QUESTION # 132
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Linux.
You need to configure enhanced security for VM1. The solution must meet the following requirements:
- Ensure that users can sign in to VM1 by using their Microsoft Entra
credentials.
- Ensure that users authenticate by using multi-factor out-of-band.
- Prevent users from signing in to VM1 by using passwords.
Which two authentication methods can you include in the solution? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. the Microsoft Authenticator app
- B. FIDO2 security keys
- C. SMS
- D. Temporary Access Pass
- E. Windows Hello for Business
Answer: A,B
NEW QUESTION # 133
You need to resolve the recent security incident issues.
What should you configure for each incident? To answer, drag the appropriate policy types to the correct issues. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 134
You have an Azure Active Directory (Azure AD) tenant that has Security defaults disabled.
You are creating a conditional access policy as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-u
NEW QUESTION # 135
You have an Azure AD tenant contains the users shown in the following table.
In Azure AD Privileged Identity Management (PIM), you configure the Global Administrator role as shown in the following exhibit.
User 1 is eligible for the Global Administrator role.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 136
You need to configure the MFA settings for users who connect from the Boston office. The solution must meet the authentication requirements and the access requirements. What should you configure?
- A. trusted IPs that have a private IP address range
- B. named locations that have a public IP address range
- C. trusted IPs that have a public IP address range
- D. named locations that have a private IP address range
Answer: B
NEW QUESTION # 137
Hotspot Question
You have an Azure subscription that contains a user named User1.
You onboard Microsoft Entra Permissions Management.
You need to perform the following tasks:
- Identify all the accounts that are assigned the Global Administrator
role permanently.
- Review the Permission Creep Index (PCI) of User1.
Which tab in Permissions Management should you use for each task? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
NEW QUESTION # 138
Hotspot Question
You have a hybrid Microsoft 365 subscription that contains the users shown in the following table.
You plan to deploy an on-premises app named App1. App1 will be registered in Azure AD and will use Azure AD Application Proxy.
You need to delegate the installation of the Application Proxy connector and ensure that User1 can register App1 in Azure AD. The solution must use the principle of least privilege.
Which user should perform the installation, and which role should you assign to User1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 139
You have an Azure Active Directory (Azure AD) tenant that has multi-factor authentication (MFA) enabled.
The account lockout settings are configured as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 140
You have a Microsoft 365 subscription that contains the users shown in the following table.
From the tenan1, you configure a naming policy for groups.
Which users are affected by the naming policy?
- A. User3 and User4 only
- B. User2 only
- C. User1, User2, User3, and User4
- D. User2 and User3 only
- E. User3only
- F. User1, User2, and User3 only
Answer: A
NEW QUESTION # 141
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the objects shown in the following table.
You install Azure AD Connect. You configure the Domain and OU filtering settings as shown in the Domain and OU Filtering exhibit. (Click theDomain and OU Filteringtab.)
You configure the Filter users and devices settings as shown in the Filter Users and Devices exhibit. (Click theFilter Users and Devicestab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom
NEW QUESTION # 142
You have an Active Directory forest that syncs to an Azure Active Directory (Azure AD) tenant.
The tenant uses pass-through authentication.
A corporate security policy states the following:
* Domain controllers must never communicate directly to the internet.
* Only required software must be installed on servers.
The Active Directory domain contains the on-premises servers shown in the following table.
You need to ensure that users can authenticate to Azure AD if a server fails.
On which server should you install an additional pass-through authentication agent?
- A. Server2
- B. Server4
- C. Server3
- D. Server1
Answer: B
Explanation:
The standalone Authentication Agents can be installed on any Windows Server 2016 or later, with TLS 1.2 enabled. The server needs to be on the same Active Directory forest as the users whose passwords you need to validate.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta-quick-start
NEW QUESTION # 143
You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3.
You have two Azure AD roles that have the Activation settings shown in the following table.
The Azure AD roles have the Assignment settings shown in the following table.
The Azure AD roles have the eligible users shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 144
You have a Microsoft 365 tenant.
You need to identify users who have leaked credentials. The solution must meet the following requirements.
* Identity sign-Ins by users who ate suspected of having leaked credentials.
* Rag the sign-ins as a high risk event.
* Immediately enforce a control to mitigate the risk, while still allowing the user to access applications.
What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks
NEW QUESTION # 145
You create the Azure Active Directory (Azure AD) users shown in the following table.
On February 1, 2021, you configure the multi-factor authentication (MFA) settings as shown in the following exhibit.
The users authentication to Azure AD on their devices as shown in the following table.
On February 26, 2021, what will the multi-factor auth status be for each user?
- A.
- B.
- C.
- D.
Answer: C
NEW QUESTION # 146
You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3.
You need to configure the users as shown in the following table.
Which portal should you use to configure each user? To answer, drag the appropriate portals to the correct users. Each portal may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 147
You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.
You plan to implement Azure AD Identity Protection.
Which users can configure the user risk policy, and which users can view the risky users report? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection
NEW QUESTION # 148
You need to implement on-premises application and SharePoint Online restrictions to meet the authentication requirements and the access requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 149
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1.
User1 has the devices shown in the following table.
On November 5, 2020, you create and enforce terms of use in contoso.com that has the following settings:
Name: Terms1
Display name: Contoso terms of use
Require users to expand the terms of use: On
Require users to consent on every device: On
Expire consents: On
Expire starting on: December 10, 2020
Frequency: Monthly
On November 15, 2020, User1 accepts Terms1 on Device3.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 150
Your company requires that users request access before they can access corporate applications.
You register a new enterprise application named MyApp1 in Azure Active Dilatory (Azure AD) and configure single sign-on (SSO) for MyApp1.
Which settings should you configure next for MyApp1?
- A. Self-service
- B. Application proxy
- C. Provisioning
- D. Roles and administrators
Answer: D
NEW QUESTION # 151
Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant.
The tenant contains the groups shown in the following table.
The tenant contains the users shown in the following table.
You create an access review as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 152
......
Free Microsoft SC-300 Exam 2025 Practice Materials Collection: https://certblaster.prep4away.com/Microsoft-certification/braindumps.SC-300.ete.file.html