SC-300 Azure AD Conditional Access 3

Question 1

Which Conditional Access policy template is designed to protect administrator accounts by requiring MFA for all administrative roles?

Accepted Answer

Require MFA for admins

Answer

Require MFA for all users

Answer

Require compliant device for admins

Answer

Block legacy authentication

Question 2

Which Conditional Access control can restrict what users can do within a cloud application session without blocking access entirely?

Accepted Answer

Session control: Use Conditional Access App Control

Answer

Grant control: Require MFA

Answer

Session control: Use app enforced restrictions

Answer

Grant control: Require compliant device

Question 3

An administrator needs users on unmanaged devices to only view (not download) files in SharePoint Online. Which Conditional Access session control achieves this?

Accepted Answer

Use Conditional Access App Control

Answer

Sign-in frequency

Answer

Persistent browser session: Never persistent

Answer

Use app enforced restrictions

Question 4

What happens when a Conditional Access policy has conflicting grant controls where both 'Require MFA' and 'Require compliant device' are selected and 'Require one of the selected controls' is chosen?

Accepted Answer

Access is granted if the user satisfies at least one of the controls

Answer

Both controls must be satisfied before access is granted

Answer

Access is blocked until an admin resolves the conflict

Answer

The most restrictive control is automatically applied

Question 5

Which tool in the Azure portal lets administrators test whether a specific user would be affected by a Conditional Access policy without the user signing in?

Accepted Answer

What If tool

Answer

Azure AD Audit Logs

Answer

Sign-in Diagnostics

Answer

Identity Secure Score

Question 6

A Conditional Access policy targets the 'Register security information' user action. What does this policy control?

Accepted Answer

It controls the conditions under which users can register MFA methods and SSPR

Answer

It restricts which devices can access the My Apps portal

Answer

It enforces MFA when accessing security reports in the Azure portal

Answer

It blocks access to Azure AD audit logs