SC-300 practice questions 391–394

1. Question 391 · 394 in bank

   HOTSPOT - You need to create the LWGroup1 group to meet the management requirements. How should you complete the dynamic membership rule? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   If you want your group to exclude guest users and include only members of your organization, you can use the following syntax: (user.objectId -ne null) -and (user.userType -eq "Member") It is directly on Microsoft web page https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership

   Source: Adapted from community discussion — Taigr

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 392 · 394 in bank

   HOTSPOT - You need to meet the technical requirements for the probability that user identities were compromised. What should the users do first, and what should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-policies

   Source: Adapted from community discussion — 007Ali

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 393 · 394 in bank

   You need to configure the MFA settings for users who connect from the Boston office. The solution must meet the authentication requirements and the access requirements. What should you include in the configuration?

   • Anamed locations that have a private IP address range
   • Bnamed locations that have a public IP address range
   • Ctrusted IPs that have a public IP address range
   • Dtrusted IPs that have a private IP address range

   Show answer

   Answer: B

   Explanation

   Named Locations are part of Conditional Access Policies whereas "Trusted IPs" are in the legacy MFA settings, which would not be preferred. The IP address will appear to be coming into Azure from the NAT'd public address not the internal network private address. So I'd say: B. named locations that have a public IP address range

   Source: Adapted from community discussion — 007Ali

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 394 · 394 in bank

   HOTSPOT - You need to support the planned changes and meet the technical requirements for MFA. Which feature should you use, and how long before the users must complete the registration? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Well, this is something confuse... They ask you to force MFA using CA policy. If you use it, you will be forced to register for MFA YES or YES and there will not be any 14 days grace period. This happens when you use CA, so if they are giving you the option to choose grace days, the answer cannot be MFA CA policy. It has to be MFA registration. I TESTED THIS! there you have, if they ask you for something with 14 days grace period, it cannot be MFA CA policy, if they don't give you that option on the exam, you can go for MFA CA.

   Source: Adapted from community discussion — Hot_156

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-300 practice, question 391. 394 questions available.