Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Azure AD Conditional Access Flashcards

6 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Azure AD Conditional Access flashcards as text

  1. Which Conditional Access policy template is designed to protect administrator accounts by requiring MFA for all administrative roles?

    Answer: Require MFA for admins

    The 'Require MFA for admins' template targets users assigned to privileged directory roles and enforces multi-factor authentication for their sign-ins.

  2. Which Conditional Access control can restrict what users can do within a cloud application session without blocking access entirely?

    Answer: Session control: Use Conditional Access App Control

    Conditional Access App Control routes sessions through Microsoft Defender for Cloud Apps to apply granular session policies such as blocking downloads or copy-paste.

  3. An administrator needs users on unmanaged devices to only view (not download) files in SharePoint Online. Which Conditional Access session control achieves this?

    Answer: Use Conditional Access App Control

    Conditional Access App Control, combined with a Defender for Cloud Apps session policy, can restrict download actions for sessions originating from unmanaged devices.

  4. What happens when a Conditional Access policy has conflicting grant controls where both 'Require MFA' and 'Require compliant device' are selected and 'Require one of the selected controls' is chosen?

    Answer: Access is granted if the user satisfies at least one of the controls

    When 'Require one of the selected controls' is configured, access is granted as soon as the user satisfies any one of the listed grant controls.

  5. Which tool in the Azure portal lets administrators test whether a specific user would be affected by a Conditional Access policy without the user signing in?

    Answer: What If tool

    The 'What If' tool in the Conditional Access blade simulates which policies would apply to a user under specified conditions without requiring an actual sign-in.

  6. A Conditional Access policy targets the 'Register security information' user action. What does this policy control?

    Answer: It controls the conditions under which users can register MFA methods and SSPR

    Targeting the 'Register security information' user action allows administrators to enforce Conditional Access controls such as MFA or trusted location requirements during the security information registration process.