SC-300 practice questions 11–20

1. Question 11 · 394 in bank

   You have an Azure Active Directory (Azure AD) tenant named contoso.com. You need to ensure that Azure AD External Identities pricing is based on monthly active users (MAU). What should you configure?

   • Aa user flow
   • Bthe terms of use
   • Ca linked subscription
   • Dan access review

   Show answer

   Answer: C

   Explanation

   To ensure that Azure AD External Identities pricing is based on monthly active users (MAU), you should configure: C. a linked subscription You need to link your Azure AD External Identities to a billing subscription that supports monthly active users (MAU) billing. This allows you to pay based on the number of unique users who access your applications or services each month. Options A (a user flow), B (the terms of use), and D (an access review) are not related to configuring billing for Azure AD External Identities based on MAU.

   Source: Adapted from community discussion — sherifhamed

   References

   • Microsoft Learn

   Next question

2. Question 12 · 394 in bank

   You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com. Several users use their contoso.com email address for self-service sign-up to Azure Active Directory (Azure AD). You gain global administrator privileges to the Azure AD tenant that contains the self-signed users. You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services. Which PowerShell cmdlet should you run?

   • ASet-MsolCompanySettings
   • BSet-MsolDomainFederationSettings
   • CUpdate-MsolfederatedDomain
   • DSet-MsolDomain

   Show answer

   Answer: A

   Explanation

   The correct answer is A As reference, Self-service sign-up: Method by which a user signs up for a cloud service and has an identity automatically created for them in Azure AD based on their email domain. Azure AD cmdlet Set-MsolCompanySettings could help you to prevent creating user accounts with parameters: AllowEmailVerifiedUsers (users can join the tenant by email validation)-->when is TRUE. AllowAdHocSubscriptions (controls the ability for users to perform self-service sign-up) e.g. Set-MsolCompanySettings -AllowEmailVerifiedUsers $false -AllowAdHocSubscriptions $false

   Source: Adapted from community discussion — julioglez88

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 13 · 394 in bank

   DRAG DROP - You have a new Microsoft 365 tenant that uses a domain name of contoso.onmicrosoft.com. You register the name contoso.com with a domain registrar. You need to use contoso.com as the default domain name for new Microsoft 365 users. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://practical365.com/configure-a-custom-domain-in-office-365/

   Source: Adapted from community discussion — EmnCours

   

   Next question

4. Question 14 · 394 in bank

   You have a Microsoft 365 subscription. You need to ensure that when users access the Microsoft 365 portal from Microsoft Edge and have their browser language set to Spanish, they are presented with a Spanish sign-in form. What should you do in the Microsoft Entra admin center?

   • AFrom Settings for the users, configure the Usage location setting.
   • BFrom Global Secure Access, configure the Session management settings.
   • CConfigure the Company branding settings.
   • DCreate a Conditional Access policy.

   Show answer

   Answer: C

   Next question

5. Question 15 · 394 in bank

   DRAG DROP - You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3. You need to configure the users as shown in the following table.

   

   Which portal should you use to configure each user? To answer, drag the appropriate portals to the correct users. Each portal may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer: User 1: Azure AD Admin center User 2: Microsoft Purview admin center (legacy Microsoft Compliance Admin center), these roles came from Exchange, Microsoft is not enforcing the roles permission from Exchange, Microsoft is recommending using Microsoft Purview Admin center. I believe this answer is too old. it could be true years ago, however, Microsoft today is with MS purview to assign these roles. Record management and Quarantine role are known as SCC (security and compliance center) SCC roles have evolved from Exchange role groups design to MS Purview. User 3: Endpoint Manager/Tenant administration/Roles/ you will see these two roles in the endpoint admin center.

   Source: Adapted from community discussion — sergioandreslq

   References

   • Microsoft Learn

   

   Next question

6. Question 16 · 394 in bank

   You have an Active Directory forest that syncs to an Azure Active Directory (Azure AD) tenant. The tenant uses pass-through authentication. A corporate security policy states the following: ✑ Domain controllers must never communicate directly to the internet. ✑ Only required software must be installed on servers. The Active Directory domain contains the on-premises servers shown in the following table.

   

   You need to ensure that users can authenticate to Azure AD if a server fails. On which server should you install an additional pass-through authentication agent?

   • AServer4
   • BServer2
   • CServer1
   • DServer3

   Show answer

   Answer: A

   Explanation

   Server 4 The standalone Authentication Agents can be installed on any Windows Server 2016 or later, with TLS 1.2 enabled. The server needs to be on the same Active Directory forest as the users whose passwords you need to validate.

   Source: Adapted from community discussion — Nilz76

   Next question

7. Question 17 · 394 in bank

   You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of user1@outlook.com. You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as user1@outlook.com. What should you do?

   • AImplement Microsoft Entra Connect sync.
   • BAdd a custom domain name to contoso.com.
   • CImplement Microsoft Entra Application Proxy.
   • DRun the New-MgInvitation cmdlet.

   Show answer

   Answer: D

   References

   • Microsoft Learn

   Next question

8. Question 18 · 394 in bank

   HOTSPOT - You have an Azure Active Directory (Azure AD) tenant and an Azure web app named App1. You need to provide guest users with self-service sign-up for App1. The solution must meet the following requirements: ✑ Guest users must be able to sign up by using a one-time password. ✑ The users must provide their first name, last name, city, and email address during the sign-up process. What should you configure in the Azure Active Directory admin center for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/active-directory/external-identities/identity-providers https://docs.microsoft.com/en-us/azure/active-directory/external-identities/self-service-sign-up-overview

   Source: Adapted from community discussion — OK2020

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 19 · 394 in bank

   You have an Azure Active Directory (Azure AD) Azure AD tenant. You need to bulk create 25 new user accounts by uploading a template file. Which properties are required in the template file?

   • AdisplayName, identityIssuer, usageLocation, and userType
   • BaccountEnabled, givenName, surname, and userPrincipalName
   • CaccountEnabled, displayName, userPrincipalName, and passwordProfile
   • DaccountEnabled, passwordProfile, usageLocation, and userPrincipalName

   Show answer

   Answer: C

   Explanation

   This is so old, here you don't have good answer here. I checked right now, bulk create in Entra ID and is: displayName, userPrincipalName, PasswordProfile, accountEnabled.

   Source: Adapted from community discussion — bardock100

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 20 · 394 in bank

    HOTSPOT - Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains computers that run Windows 11. You have a Microsoft 365 E5 subscription. You plan to enable hybrid join and enroll the computers in Microsoft Intune. You need to recommend the software that should be deployed to the domain, and the actions that should be performed in Intune. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    1: Domain= Entra Connect - Required for hybrid Azure AD join 1: Intune= Modify the mobile device management (MDM) user scope Enables automatic enrollment into Intune

    Source: Adapted from community discussion — Frank9020

    References

    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-300 practice, question 11. 394 questions available.