Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Microsoft Identity and Access Administrator Dumps Flashcards

7 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft Identity and Access Administrator Dumps flashcards as text

  1. A company wants to enforce that users can only access Microsoft 365 from compliant devices. Which Conditional Access grant control should be configured?

    Answer: Require device to be marked as compliant

    The 'Require device to be marked as compliant' grant control ensures only Intune-compliant devices can access resources.

  2. An administrator needs to allow external users from a partner organization (contoso.com) to access internal SharePoint sites using their own credentials. What should be configured in Azure AD?

    Answer: Azure AD B2B collaboration with allow list for contoso.com

    Azure AD B2B collaboration allows external users to sign in with their own credentials; an allow list restricts this to specific domains.

  3. Which Azure AD feature automatically detects when a user's credentials have been leaked on the dark web and flags their sign-in as high risk?

    Answer: Azure AD Identity Protection leaked credentials detection

    Azure AD Identity Protection's leaked credentials detection compares credentials against known breach lists and raises user risk.

  4. A Privileged Identity Management (PIM) role assignment is set to 'eligible.' What must the user do before they can use the role?

    Answer: Activate the role themselves, optionally providing a justification

    With an eligible assignment, the user must self-activate the role in PIM, and activation may require MFA, justification, or approval.

  5. Which token type does Microsoft identity platform issue that contains user claims and is validated by the receiving API without a round-trip to Azure AD?

    Answer: Access token (JWT)

    A JWT access token is self-contained with claims and a signature, allowing the API to validate it locally.

  6. An organization uses Azure AD Connect. After a recent change, some synchronized users cannot sign in to Azure AD. The administrator suspects an attribute sync issue. Which tool should be used first to diagnose the problem?

    Answer: Synchronization Service Manager

    Synchronization Service Manager shows connector errors and object-level sync details, making it the primary diagnostic tool for attribute sync issues.

  7. A user reports they are prompted for MFA every time they sign in, even from a trusted corporate network. What Conditional Access configuration would eliminate repeated MFA prompts from that network?

    Answer: Create a named location for the corporate IP range and exclude it from the MFA policy

    Defining the corporate IP range as a trusted named location and excluding it from the Conditional Access MFA requirement removes the repeated prompt.