SC-300 Azure AD Conditional Access 2

Question 1

Which Conditional Access condition evaluates the likelihood that a sign-in event is not performed by the legitimate owner of the account?

Accepted Answer

Sign-in risk

Answer

Sign-in risk reflects the probability that a given authentication request is not authorized by the account owner, based on Microsoft's threat intelligence.

Question 2

You need to enforce Conditional Access on legacy authentication protocols such as IMAP and POP3. Which condition should you configure?

Accepted Answer

Client apps > Exchange ActiveSync clients and other clients

Answer

The 'Client apps' condition with 'Exchange ActiveSync clients and other clients' targets legacy authentication protocols that do not support modern authentication.

Question 3

What is the minimum Azure AD license required to create and use Conditional Access policies?

Accepted Answer

Azure AD Premium P1

Answer

Azure AD Premium P1 is the minimum license tier that includes Conditional Access policy functionality.

Question 4

An administrator configures a Conditional Access policy with the 'Require approved client app' grant control. Which scenario will this control block?

Accepted Answer

A user accessing Exchange Online from a native mail app that is not Intune-managed

Answer

The 'Require approved client app' control blocks access from apps that are not on Microsoft's list of approved client applications, such as unmanaged native mail clients.

Question 5

Which feature allows Conditional Access policies to revoke access tokens in near real-time when a user's risk level changes?

Accepted Answer

Continuous access evaluation (CAE)

Answer

Continuous Access Evaluation (CAE) allows resource providers to revoke access tokens immediately when policy-relevant events such as account disablement or risk elevation occur.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Azure AD Conditional Access 2