Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Microsoft Identity and Access Administrator v1.0 Flashcards

7 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft Identity and Access Administrator v1.0 flashcards as text

  1. An organization uses Azure AD B2C for customer identity. They want to allow customers to sign in with their Google accounts. What must be configured in B2C?

    Answer: An OAuth 2.0 social identity provider for Google

    Azure AD B2C supports Google as a social identity provider using OAuth 2.0, configured in the Identity providers section.

  2. A user's Azure AD Identity Protection risk level is set to 'High' due to leaked credentials. Which automatic remediation action should a risk-based Conditional Access policy enforce?

    Answer: Require password change with MFA

    For high user risk, the recommended remediation is requiring the user to perform MFA and change their password to clear the risk.

  3. Which PIM setting ensures that a user must provide a business justification before activating an eligible Azure AD role?

    Answer: Require justification on activation

    The 'Require justification on activation' PIM role setting forces users to enter a justification reason before their role is activated.

  4. An organization needs to federate their on-premises Active Directory with Azure AD using a third-party federation service. Which protocol does Azure AD require the federation service to support?

    Answer: WS-Federation or SAML 2.0

    Azure AD supports federation with third-party identity providers using WS-Federation or SAML 2.0 protocols.

  5. A developer registers an application in Azure AD. The application needs to call Microsoft Graph as itself (no user context). Which OAuth 2.0 grant type should be used?

    Answer: Client credentials flow

    The client credentials flow is used for daemon/service applications that authenticate as themselves without a signed-in user.

  6. An administrator wants to prevent users from registering new MFA methods unless they are in a trusted location. Which feature enables this control?

    Answer: Conditional Access Authentication Context for MFA registration

    Conditional Access Authentication Context can be applied to the MFA registration combined registration experience to restrict where users can register.

  7. Which Azure AD feature enables administrators to see a risk score for each sign-in and take automated action based on that score?

    Answer: Azure AD Identity Protection sign-in risk policy

    Azure AD Identity Protection evaluates each sign-in and assigns a risk level, which can trigger automated Conditional Access responses.