Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Microsoft Identity and Access Administrator v1.0 Flashcards

7 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft Identity and Access Administrator v1.0 flashcards as text

  1. An administrator needs to ensure that guest users in Azure AD can only see their own profile and cannot enumerate other users in the directory. Which setting controls this?

    Answer: External collaboration settings — guest user access restrictions

    The 'Guest user access restrictions' in External collaboration settings controls what directory objects guest users can read or enumerate.

  2. A company uses Seamless SSO with Password Hash Synchronization. A user changes their on-premises AD password. How long before the new password hash is available in Azure AD?

    Answer: Within 2 minutes via delta sync triggered by the password change

    Azure AD Connect detects on-premises password changes within 2 minutes and syncs the hash to Azure AD via a triggered delta sync.

  3. Which Azure AD cross-tenant access setting controls whether your users can be invited as guests into another organization's tenant?

    Answer: Outbound settings — B2B collaboration

    Outbound B2B collaboration settings control whether your users can be invited to and access external Azure AD tenants as guests.

  4. An organization wants to automatically provision and deprovision user accounts in a SaaS application using Azure AD. Which protocol is preferred when supported by the application?

    Answer: SCIM 2.0 provisioning

    SCIM 2.0 is the standard protocol Azure AD uses for automated provisioning and deprovisioning to supported SaaS applications.

  5. A Conditional Access policy uses Sign-in frequency set to '1 hour'. What happens to a user's session after one hour of inactivity?

    Answer: The user must re-authenticate on their next request after 1 hour has elapsed

    Sign-in frequency controls how often users are prompted to re-authenticate; after the interval, the next resource request triggers a new sign-in.

  6. An administrator is configuring Azure AD Password Protection for on-premises Active Directory. Which component must be installed on each domain controller?

    Answer: Azure AD Password Protection DC agent

    The Azure AD Password Protection DC agent must be installed on each domain controller to enforce the banned password list during on-premises password changes.

  7. Which Azure AD feature allows an organization to require that access to a specific sensitive application always triggers a step-up authentication challenge, even if the user already has an active session?

    Answer: Conditional Access authentication context

    Authentication context lets applications trigger a Conditional Access policy with stricter controls (like MFA) for specific high-sensitivity operations within an app.