Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Microsoft Identity and Access Administrator v1.0 Flashcards

7 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft Identity and Access Administrator v1.0 flashcards as text

  1. An organization wants to enforce that users can only access Microsoft 365 apps from devices that are Intune-compliant. Which Conditional Access grant control should be configured?

    Answer: Require device to be marked as compliant

    The 'Require device to be marked as compliant' grant control ensures only Intune-compliant devices can access the specified apps.

  2. A security team needs to review all privileged role assignments in Azure AD on a quarterly basis. Which feature best automates this process?

    Answer: Privileged Identity Management access reviews

    PIM access reviews allow automated recurring reviews of privileged role assignments by designated reviewers.

  3. A user reports they cannot reset their password using SSPR. Upon investigation, you find the user is not a member of any SSPR-enabled group. What is the quickest fix?

    Answer: Enable SSPR for 'All users' or add the user to the enabled group

    SSPR scope must include the user, either by enabling it for all users or adding the user to the configured group.

  4. Which Azure AD identity governance feature allows external users to request access to internal resources through a defined approval workflow?

    Answer: Entitlement management access packages

    Entitlement management access packages let external users self-request access through configured approval workflows.

  5. An administrator needs to ensure that a service principal used by an application cannot be granted consent to access sensitive data by regular users. Which setting should be configured?

    Answer: Enable admin consent workflow and restrict user consent

    Enabling the admin consent workflow and restricting user consent forces sensitive permission grants to require administrator approval.

  6. A Conditional Access policy is set to block access from 'Any location' except a named location called 'Corporate Network'. A user on the corporate network is still being blocked. What is the most likely cause?

    Answer: The named location IP ranges do not include the user's current IP

    If the user's IP is not within the IP ranges defined in the named location, the exclusion will not match and the block applies.

  7. Which Azure AD feature allows an administrator to define a custom set of attributes that can be assigned to users to support authorization decisions?

    Answer: Custom security attributes

    Custom security attributes are strongly typed, reusable attributes defined by admins specifically for access control and authorization scenarios.