Microsoft Identity and Access Administrator394 questions across 40 pages are complete and free, with no account or card.
394 questions in this bank
Free access · progress saved on this device
You have a Microsoft 365 subscription. You have an Azure subscription that contains an Azure App Service web app named App1. You have multiple devices that run Windows and are enrolled in Microsoft Intune. You deploy the Global Secure Access client to the devices by using Intune. You need to configure private access to App1. What should you do next?
Answer: B
You have a Microsoft 365 subscription. You need to ensure that users can grant enterprise applications access to their profile. The solution must ensure that the users can consent only to the User.Read and profile delegated permissions. What should you configure first?
Answer: B
HOTSPOT - You have a Microsoft 365 subscription. You configure a Global Secure Access security profile named SecurityProfile1. You need to create a Conditional Access policy named CAPolicy1 that will use SecurityProfile1. Which two settings should you configure to ensure that CAPolicy1 uses SecurityProfile1? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
You have a Microsoft 365 E5 subscription. You create an access review named Review1. Review1 requires that every six months, Microsoft 365 group owners review guest user access to their groups. You need to ensure that if the group owners fail to review the membership of Review1, guest users are removed automatically. Which settings should you configure for Review1?
Answer: D
HOTSPOT - You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains two Azure key vaults named KV1 and KV2 that use Azure role-based access control (Azure RBAC). The subscription contains the users shown in the following table.
KV1 contains a secret named Secret1. KV2 contains a secret named Secret2. Which users can read the values of each secret? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
this question doest appear to be correct. Answers are from epeat question, but the question itself is different. KV2 is mssing from the table
Source: Adapted from community discussion — armid
You have an Azure subscription that contains a user named User1 and an Azure key vault named Vault1. You need to ensure that User1 can read the metadata of certificates, keys, and secrets stored in Vault1. The solution must follow the principle of least privilege. Which role should you assign to User1?
Answer: C
You have a Microsoft 365 E5 subscription. You need to ensure that users can only access resources in the subscription from a device that has the Global Secure Access client connected. What should you do first?
Answer: A
The correct answer is: A. Enable Global Secure Access signaling. Explanation: Global Secure Access signaling is the key step to enforce that users can only access resources when connected through the GSA client. This signaling is needed to establish the security posture for users trying to access resources and ensure that the access is restricted to users with the GSA client.
Source: Adapted from community discussion — d526b99
You have on-premises Linux devices. You have a Microsoft 365 E5 subscription. You plan to configure Global Secure Access Internet Access. You need to ensure that the devices can connect to Global Secure Access. What should you do?
Answer: C
HOTSPOT - You have a Microsoft 365 tenant. You need to identify users who have leaked credentials. The solution must meet the following requirements: ✑ Identify sign-ins by users who are suspected of having leaked credentials. ✑ Flag the sign-ins as a high-risk event. ✑ Immediately enforce a control to mitigate the risk, while still allowing the user to access applications. What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks
Source: Adapted from community discussion — Tuvshinjargal
HOTSPOT - You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.
You plan to implement Azure AD Identity Protection. Which users can configure the user risk policy, and which users can view the risky users report? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection
Source: Adapted from community discussion — oberte007
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SC-300 practice, question 141. 394 questions available.
Version 1.0.0. How we source questions