SC-300 practice questions 51–60

1. Question 51 · 394 in bank

   You have a Microsoft 365 tenant that uses the domain named fabrikam.com. The Guest invite settings for Azure Active Directory (Azure AD) are configured as shown in the exhibit. (Click the Exhibit tab.)

   

   A user named bsmith@fabrikam.com shares a Microsoft SharePoint Online document library to the users shown in the following table.

   

   Which users will be emailed a passcode?

   • AUser2 only
   • BUser1 only
   • CUser1 and User2 only
   • DUser1, User2, and User3

   Show answer

   Answer: A

   Explanation

   I think "A". https://learn.microsoft.com/en-us/azure/active-directory/external-identities/one-time-passcode (At the end of page) --Frequently asked questions-- What happens to my existing guest users if I enable email one-time passcode? Your existing guest users won't be affected if you enable email one-time passcode, as your existing users are already past the point of redemption. Enabling email one-time passcode will only affect future redemption process activities where new guest users are redeeming into the tenant. Say: Your existing guest users won't be affected... User1 is already inside. So it doesn't affect him.

   Source: Adapted from community discussion — Matajare

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 52 · 394 in bank

   Select 2

   You have an Azure Active Directory (Azure AD) tenant named contoso.com. You plan to bulk invite Azure AD business-to-business (B2B) collaboration users. Which two parameters must you include when you create the bulk invite? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • Aemail address
   • Bredirection URL
   • Cusername
   • Dshared key
   • Epassword

   Show answer

   Answer: AB

   Explanation

   When creating a bulk invite for Azure AD business-to-business (B2B) collaboration users, you must include the following parameters: A. Email address: The email address is required to specify the email of the external user who will be invited to collaborate with your organization. B. Redirection URL: The redirection URL is necessary to specify where the invited user will be redirected to after they accept the invitation. It typically leads to the sign-up or sign-in page for the external user's organization. The other options (C, D, and E) are not typically part of the bulk invite process.

   Source: Adapted from community discussion — sherifhamed

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 53 · 394 in bank

   HOTSPOT - Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with Azure AD and contains the users shown in the following table.

   

   In Azure AD Connect, Domain/OU Filtering is configured as shown in the following exhibit.

   

   Azure AD Connect is configured as shown in the following exhibit.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   YES - Pass writeback is enabled (and SSPR works with PTA, PHS and ADFS federated environments) YES - Because auth is PTA NO - User2 not synced

   Source: Adapted from community discussion — [Removed]

   

   Next question

4. Question 54 · 394 in bank

   You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users. From the Groups blade in the Azure Active Directory admin center, you assign Microsoft Office 365 Enterprise E5 licenses to a group that includes all users. You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort. What should you use?

   • Athe Update-MgGroup cmdlet
   • Bthe Licenses blade in the Azure Active Directory admin center
   • Cthe Set-WindowsProductKey cmdlet
   • Dthe Administrative units blade in the Azure Active Directory admin center

   Show answer

   Answer: B

   Explanation

   There are several versions of this question in the exam. The question has two possible correct answers: 1. the Licenses blade in the Azure Active Directory admin center 2. the Set-MsolUserLicense cmdlet Other incorrect answer options you may see on the exam include the following: ✑ the Administrative units blade in the Azure Active Directory admin center ✑ the Groups blade in the Azure Active Directory admin center ✑ the Set-AzureAdGroup cmdlet

   Source: Adapted from community discussion — OrangeSG

   Next question

5. Question 55 · 394 in bank

   You have an Azure AD tenant that contains the users shown in the following table.

   

   You need to compare the role permissions of each user. The solution must minimize administrative effort. What should you use?

   • Athe Microsoft 365 Defender portal
   • Bthe Microsoft 365 admin center
   • Cthe Microsoft Entra admin center
   • Dthe Microsoft Purview compliance portal

   Show answer

   Answer: B

   Explanation

   https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/assign-admin-roles?view=o365-worldwide#compare-roles You can now compare permissions for up to 3 roles at a time so you can find the least permissive role to assign. In the admin center

   Source: Adapted from community discussion — JuanZ

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 56 · 394 in bank

   You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com. Several users use their contoso.com email address for self-service sign-up to Azure AD. You gain global administrator privileges to the Azure AD tenant that contains the self-signed users. You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services. Which PowerShell cmdlet should you run?

   • AUpdate-MgOrganization
   • BUpdate-MgPolicyPermissionGrantPolicyExclude
   • CUpdate-MgDomain
   • DUpdate-MgDomainFederationConfiguration

   Show answer

   Answer: A

   Explanation

   A: The PowerShell cmdlet Update-MgOrganization is used to configure settings for the organization, including self-service sign-up options. B. Update-MgPolicyPermissionGrantPolicyExclude: This cmdlet is used to modify permission grant policies for apps, not for disabling self-service sign-up.

   Source: Adapted from community discussion — Frank9020

   References

   • Microsoft Learn

   Next question

7. Question 57 · 394 in bank

   HOTSPOT - You have an Azure AD tenant. You need to configure the following External Identities features: • B2B collaboration • Monthly active users (MAU)-based pricing Which two settings should you configure? To answer, select the settings in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The second one is Linked Subscriptions. For the first one, we don't have enough info to be sure. What B2B setting are we configuring? I assume that the answer is external collaboration settings, since there's no mention about collaborating with another Microsoft Entra organization. Microsoft says: B2B collaboration is enabled by default, but comprehensive admin settings let you control your inbound and outbound B2B collaboration with external partners and organizations: For B2B collaboration with other Microsoft Entra organizations, use cross-tenant access settings. Manage inbound and outbound B2B collaboration, and scope access to specific users, groups, and applications. Set a default configuration that applies to all external organizations, and then create individual, organization-specific settings as needed. Using cross-tenant access settings, you can also trust multi-factor (MFA) and device claims (compliant claims and Microsoft Entra hybrid joined claims) from other Microsoft Entra organizations.

   Source: Adapted from community discussion — penatuna

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 58 · 394 in bank

   You have an Azure AD tenant that contains the external user shown in the following exhibit.

   

   You update the email address of the user. You need to ensure that the user can authenticate by using the updated email address. What should you do for the user?

   • AModify the Authentication methods settings.
   • BReset the password.
   • CRevoke the active sessions.
   • DReset the redemption status.

   Show answer

   Answer: D

   Explanation

   https://learn.microsoft.com/en-us/entra/external-id/reset-redemption-status update the guest user's sign-in information after they've redeemed your invitation for B2B collaboration. There might be times when you'll need to update their sign-in information, for example when: • The user wants to sign in using a different email and identity provider • etc To manage these scenarios previously, you had to manually delete the guest user’s account from your directory and reinvite the user. Now you can use the Microsoft Entra admin center, PowerShell or the Microsoft Graph invitation API to reset the user's redemption status and reinvite the user while keeping the user's object ID, group memberships, and app assignments.

   Source: Adapted from community discussion — OrangeSG

   References

   • Microsoft Learn

   Next question

9. Question 59 · 394 in bank

   You have a Microsoft Entra ID P2 tenant named contoso.com that contains a registered app named App1. On January 1, App1 was deleted. You need to restore App1. What is the last day on which you can restore App1?

   • AJanuary 14
   • BJanuary 30
   • CMarch 30
   • DJune 30

   Show answer

   Answer: B

   Next question

10. Question 60 · 394 in bank

    You have an Azure AD tenant. You need to ensure that only users from specific external domains can be invited as guests to the tenant. Which settings should you configure?

    • AExternal collaboration settings
    • BAll identity providers
    • CCross-tenant access settings
    • DLinked subscriptions

    Show answer

    Answer: A

    Explanation

    The correct answer is A. External collaboration settings. External collaboration settings allow you to control who can collaborate with your Azure AD tenant. You can use external collaboration settings to specify which external domains are allowed to be invited as guests to your tenant.

    Source: Adapted from community discussion — haazybanj

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-300 practice, question 51. 394 questions available.