SC-300 practice questions 241–250

1. Question 241 · 394 in bank

   You have an Azure Active Directory (Azure AD) tenant that contains cloud-based enterprise apps. You need to group related apps into categories in the My Apps portal. What should you create?

   • Atags
   • Bcollections
   • Cnaming policies
   • Ddynamic groups

   Show answer

   Answer: B

   Explanation

   n the My Apps portal, applications appear in default collections and your custom app collections. The Apps collection in My Apps is a default collection that contains all the applications that have been assigned to you, sorted alphabetically. B is the correct answer based on the link provided.

   Source: Adapted from community discussion — wooyourdaddy

   References

   • Microsoft Learn

   Next question

2. Question 242 · 394 in bank

   The Azure Active Directory (Azure AD) tenant contains the groups shown in the following table.

   

   In Azure AD, you add a new enterprise application named App1. Which groups can you assign to App1?

   • AGroup1 only
   • BGroup2 only
   • CGroup3 only
   • DGroup1 and Group4
   • EGroup1 and Group3

   Show answer

   Answer: E

   Explanation

   MS documentation is not up to date! Just tested in my tenant, all the below groups are supported 1- Security 2- Microsoft 365 3- Mail-Enabled security Group

   Source: Adapted from community discussion — HelloItsSam

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 243 · 394 in bank

   You have an Azure Active Directory (Azure AD) tenant that contains the users shown in, the following table.

   

   The User settings for enterprise applications have the following configurations: ✑ Users can consent to apps accessing company data on their behalf: No ✑ Users can consent to apps accessing company data for the groups they own: No ✑ Users can request admin consent to apps they are unable to consent to: Yes Who can review admin consent requests: Admin2, User2

   

   User1 attempts, to add an app that requires consent to access company data. Which user can provide consent?

   • AUser1
   • BUser2
   • CAdmin1
   • DAdmin2

   Show answer

   Answer: C

   Explanation

   The answer is correct - C. Admin1 Application Administrator To approve requests, a reviewer must be a global administrator, cloud application administrator, or application administrator. https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/configure-admin-consent-workflow

   Source: Adapted from community discussion — jack987

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 244 · 394 in bank

   You have a Microsoft 365 subscription. The subscription contains users that use Microsoft Outlook 2016 and Outlook 2013 clients. You need to implement tenant restrictions. The solution must minimize administrative effort. What should you do first?

   • AConfigure the Outlook 2013 clients to use modern authentication.
   • BUpgrade the Outlook 2013 clients to Outlook 2016.
   • CFrom the Exchange admin center, configure Organization Sharing.
   • DUpgrade all the Outlook clients to Outlook 2019.

   Show answer

   Answer: A

   Explanation

   Microsoft Office 2013 on Microsoft Windows computers supports Modern authentication. But, to turn it on, you need to configure the following registry keys https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/enable-modern-authentication?view=o365-worldwide

   Source: Adapted from community discussion — PandaTuga

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 245 · 394 in bank

   You have a Microsoft 365 E5 subscription and an Azure subscription. You plan to analyze Microsoft Entra sign-in logs by using Azure Monitor. You need to configure diagnostic settings for Microsoft Entra. Which destination should you configure for the sign-in logs?

   • Aan Azure event hub
   • Ban Azure SQL database
   • Ca Log Analytics workspace
   • Dan Azure Storage account

   Show answer

   Answer: C

   Next question

6. Question 246 · 394 in bank

   You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

   

   You add an enterprise application named App1 to Azure AD and set User1 as the owner of App1. App1 requires admin consent to access Azure AD before the app can be used. You configure the Admin consent requests settings as shown in the following exhibit.

   

   Admin1, Admin2, Admin3, and User’ are added as reviewers. Which users can review and approve the admin consent requests?

   • AAdmin1 only
   • BAdmin1, Admin2 and Admin3 only
   • CAdmin1, Admin2, and User1 only
   • DAdmin1 and Admin2 only
   • EAdmin1, Admin2, Admin3, and User1

   Show answer

   Answer: D

   Explanation

   https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/configure-admin-consent-workflow "To approve requests, a reviewer must be a global administrator, cloud application administrator, or application administrator. The reviewer must already have one of these admin roles assigned; simply designating them as a reviewer doesn't elevate their privileges."

   Source: Adapted from community discussion — Techfall

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 247 · 394 in bank

   You have an Azure subscription that contains an Azure Automation account named Automation1 and an Azure key vault named Vault1. Vault1 contains a secret named Secret1. You enable a system-assigned managed identity for Automation1. You need to ensure that Automation1 can read the contents of Secret1. The solution must meet the following requirements: • Prevent Automation1 from accessing other secrets stored in Vault1. • Follow the principle of least privilege. What should you do?

   • AFrom Vault1, configure the Access control (IAM) settings.
   • BFrom Automation1, configure the Identity settings.
   • CFrom Automation1, configure the Run as accounts settings.
   • DFrom Secret1, configure the Access control (IAM) settings.

   Show answer

   Answer: D

   Explanation

   https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guide?tabs=azure-cli Note: >Assigning roles on individual keys, secrets and certificates should be avoided. Exceptions to general guidance: >Scenarios where individual secrets must be shared between multiple applications, for example, one application needs to access data from the other application I guess the exam wants us to answer D in this case though. I would select D.

   Source: Adapted from community discussion — blanco00555

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 248 · 394 in bank

   You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to be notified if a user downloads more than 50 files in one minute from Site1. Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

   • Asession policy
   • Bactivity policy
   • Cfile policy
   • Danomaly detection policy

   Show answer

   Answer: B

   Explanation

   High download rate You can set your activity policy so that you receive an alert when there has been an unexpected or uncharacteristic level of downloading activity. To configure this sort of policy, under Rate parameters, choose the parameters to trigger the alert. https://learn.microsoft.com/en-us/defender-cloud-apps/user-activity-policies#custom-alerts

   Source: Adapted from community discussion — OrangeSG

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 249 · 394 in bank

   You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. Site1 hosts PDF files. You need to prevent users from printing the files directly from Site1. Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

   • Aactivity policy
   • Baccess policy
   • Cfile policy
   • Dsession policy

   Show answer

   Answer: D

   References

   • Microsoft Learn

   Next question

10. Question 250 · 394 in bank

    You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps and Conditional Access policies. You need to block access to cloud apps when a user is assessed as high risk. Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

    • Aaccess policy
    • BOAuth app policy
    • Canomaly detection policy
    • Dactivity policy

    Show answer

    Answer: A

    Explanation

    Correct. A Microsoft Defender for Cloud Apps access policies enable real-time monitoring and control over access to cloud apps based on user, location, device, and app. https://learn.microsoft.com/en-us/defender-cloud-apps/access-policy-aad

    Source: Adapted from community discussion — Zak366

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-300 practice, question 241. 394 questions available.