Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Azure AD Conditional Access Flashcards

6 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Azure AD Conditional Access flashcards as text

  1. Which Conditional Access grant control requires users to use a device that is marked as compliant in Microsoft Intune?

    Answer: Require device to be marked as compliant

    The 'Require device to be marked as compliant' grant control enforces that the accessing device meets Intune compliance policies.

  2. A Conditional Access policy is set to 'Report-only' mode. What is the effect on users?

    Answer: Policy evaluates but does not enforce; results are logged only

    Report-only mode evaluates the policy against sign-in events and logs the outcome without enforcing the controls.

  3. Which named location type in Conditional Access allows you to specify trusted locations using IP ranges?

    Answer: IP ranges location

    IP ranges named locations let administrators define trusted network zones by specifying IPv4 or IPv6 CIDR blocks.

  4. You want to require MFA only when users sign in from outside the corporate network. Which Conditional Access condition should you configure?

    Answer: Named locations

    Named locations let you include or exclude specific IP ranges so MFA is enforced only for sign-ins originating outside the trusted corporate network.

  5. Which session control in Conditional Access restricts the duration of a user's authenticated session before re-authentication is required?

    Answer: Sign-in frequency

    Sign-in frequency controls how often users must re-authenticate, overriding the default session lifetime.

  6. A Conditional Access policy targets the 'All cloud apps' assignment. An administrator needs to exclude the Azure portal from this policy. Where is this exclusion configured?

    Answer: Under 'Cloud apps or actions' > 'Exclude'

    Specific apps can be excluded from a policy by selecting them under the 'Exclude' tab within the 'Cloud apps or actions' assignment section.