SC-300 practice questions 91–100

1. Question 91 · 394 in bank

   You have an Azure subscription that contains an Azure Automation account named Automation1. You need to grant Automation1 access to Azure resources. The solution must meet the following requirements: • Ensure that any permissions granted to Automation1 are removed when the account is deleted. • Minimize administrative effort. What should you use?

   • Aa client secret
   • Ba system-assigned managed identity
   • Ca certificate
   • Duser-assigned managed identity

   Show answer

   Answer: B

   Explanation

   System-Assigned Managed Identity Lifecycle: Created and managed by Azure. The identity is tied to the lifecycle of the Azure resource (e.g., a virtual machine). When the resource is deleted, the identity is automatically deleted as well. Scope: Each system-assigned managed identity is unique to a single Azure resource. It cannot be shared across multiple resources. Use Case: Ideal for scenarios where you want the identity to be automatically managed and deleted with the resource1.

   Source: Adapted from community discussion — test123123

   Next question

2. Question 92 · 394 in bank

   HOTSPOT - You have an Azure Active Directory (Azure AD) tenant that contains a user named User1 and the groups shown in the following table.

   

   In the tenant, you create the groups shown in the following table.

   

   Which members can you add to GroupA and GroupB? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://bitsizedbytes.wordpress.com/2018/12/10/distribution-security-and-office-365-groups-nesting/

   Source: Adapted from community discussion — Val_0

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 93 · 394 in bank

   HOTSPOT - You have two Microsoft Entra tenants named contoso.com and fabrikam.com. Contoso.com contains the users shown in the following table.

   

   Contoso.com contains the groups shown in the following table.

   

   You configure cross-tenant synchronization from contoso.com to fabrikam.com and enable cross-tenant synchronization for User3 and Group2. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   NO - Cross-tenant sync does not sync members of groups nested within groups Yes - User2 is a direct member of a group that is explicitly going to be synced Yes - User3 is explicitly going to be synced

   Source: Adapted from community discussion — YesPlease

   

   Next question

4. Question 94 · 394 in bank

   You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com. Several users use their contoso.com email address for self-service sign-up to Microsoft Entra. You gain global administrator privileges to the Microsoft Entra tenant that contains the self-signed users. You need to prevent the users from creating user accounts in the contoso.com Microsoft Entra tenant for self-service sign-up to Microsoft 365 services. Which PowerShell cmdlet should you run?

   • AUpdate-MgPolicyAuthorizationPolicy
   • BUpdate-MgDomain
   • CUpdate-MgPolicyPermissionGrantPolicyExclude
   • DUpdate-MgDomainFederationConfiguration

   Show answer

   Answer: A

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 95 · 394 in bank

   You have a Microsoft Entra tenant that contains the users shown in the following table.

   

   You add an enterprise application named App1 and configure the following Self-service settings: • Allow users to request access to this application: Yes • To which group should assigned users be added: Group1 • Require approval before granting access to this application: Yes • Who is allowed to approve access to this application: User2 Which users can request access to App1?

   • AUser3 only
   • BUser2 and User3 only
   • CUser1 and User3 only
   • DUser1, User2, and User3

   Show answer

   Answer: D

   Explanation

   **Allow users to request access to this application: Yes**: This setting allows any user in the tenant to request access to App1. - **Require approval before granting access to this application: Yes**: This setting means that access requests need approval. - **Who is allowed to approve access to this application: User2**: This setting designates User2 as the approver for access requests. Since the setting "Allow users to request access to this application" is set to "Yes," any user in the tenant can request access to App1. This includes User1, User2, and User3. Therefore, the correct answer is: D. User1, User2, and User3

   Source: Adapted from community discussion — Btn26

   Next question

6. Question 96 · 394 in bank

   HOTSPOT - You have a Microsoft Entra tenant that contains the users shown in the following table.

   

   The tenant contains the identities shown in the following table.

   

   Which users can create custom security attributes, and to which identities can the attributes be assigned? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   This is wrong. A GA does not have the permission to do so. While a GA has widespread permissions across the tenant he does not have permissions for all tasks including creating custom security attributes.

   Source: Adapted from community discussion — csi_2025

   References

   • Microsoft Learn

   

   Next question

7. Question 97 · 394 in bank

   You have two Microsoft Entra tenants named contoso.com and fabrikam.com. Contoso.com contains the identities shown in the following table.

   

   You configure cross-tenant synchronization from contoso.com to fabrikam.com. Which identities will sync with fabrikam.com?

   • AUser1 only
   • BUser1 and Group1 only
   • CUser1 and Group2 only
   • DUser1, Group1, and Group2

   Show answer

   Answer: A

   References

   • Microsoft Learn

   Next question

8. Question 98 · 394 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2 and the users shown in the following table.

   

   Group2 is a member of Group1. You configure cross-tenant synchronization with a partner organization named fabrikam.com by using the following configurations: • Provisioning status: On • Users and groups: Group1 • Prevent accidental deletion: 500 • Scope: Sync only assigned users and groups • Scoping filter: Department EQUALS Marketing From the Cross-tenant synchronization settings, you set Provisioning Mode to Automatic. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   "User1 will be synchronized to fabrikam.com." Yes → User1 is directly in Group1 and in the Marketing department. "User2 will be synchronized to fabrikam.com." No → Group2 is in Group1, but User2 is only inside Group2, not Group1 directly. Only Group1 and its direct members are selected for sync. "User3 will be synchronized to fabrikam.com." No → Even though User3 is in Group1, they are in HR, which does not meet the Marketing department filter.

   Source: Adapted from community discussion — Shingie

   

   Next question

9. Question 99 · 394 in bank

   HOTSPOT - You need to implement on-premises application and SharePoint Online restrictions to meet the authentication requirements and the access requirements. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/sharepoint/app-enforced-restrictions https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session

   Source: Adapted from community discussion — waituna

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 100 · 394 in bank

    HOTSPOT - You need to configure app registration in Azure AD to meet the delegation requirements. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-app-roles

    Source: Adapted from community discussion — hwoarang

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-300 practice, question 91. 394 questions available.