Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Microsoft Identity and Access Administrator Certification Flashcards

7 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft Identity and Access Administrator Certification flashcards as text

  1. A user reports they cannot activate their eligible PIM role because no approver is responding. Which PIM setting can prevent this scenario automatically after a set period?

    Answer: Approval timeout with auto-deny or configuring alternate approvers

    Configuring alternate approvers or setting a timeout policy ensures activation requests are not indefinitely blocked when primary approvers are unavailable.

  2. Which Azure AD feature allows an administrator to define which authentication methods (FIDO2, TOTP, SMS) are available to users across the tenant?

    Answer: Authentication Methods policy

    The Authentication Methods policy blade in Azure AD centrally controls which authentication methods are enabled and for which user groups.

  3. An enterprise wants guest users from a partner tenant to use their home tenant MFA rather than the resource tenant's MFA. Which cross-tenant access setting enables this?

    Answer: Inbound trust settings to accept MFA claims from the partner tenant

    Inbound cross-tenant access trust settings allow you to trust MFA claims from a specific external Azure AD tenant, avoiding dual MFA prompts.

  4. A company deploys Azure AD Password Protection on-premises. Which component on domain controllers enforces the banned password list?

    Answer: Azure AD Password Protection DC Agent

    The DC Agent service installed on each domain controller intercepts password change events and validates passwords against the global and custom banned password lists.

  5. Which claim in a JSON Web Token (JWT) represents the unique identifier of the user in Azure AD?

    Answer: oid (object ID)

    The 'oid' claim contains the immutable object ID of the user in Azure AD and is the recommended identifier for linking tokens to user accounts.

  6. An admin must ensure that only Intune-compliant devices can access Exchange Online. Which component combination is required?

    Answer: Conditional Access policy + Intune compliance policy

    A Conditional Access policy with a device compliance grant condition, combined with an Intune compliance policy defining the compliance rules, enforces device health requirements.

  7. In Azure AD Entitlement Management, what is the purpose of a 'connected organization'?

    Answer: To allow external users from specified domains to request access packages

    A connected organization in Entitlement Management defines a trusted external Azure AD tenant or domain whose users can be eligible to request access packages.