SC-300 Azure AD Conditional Access

Question 1

Which Conditional Access grant control requires users to use a device that is marked as compliant in Microsoft Intune?

Accepted Answer

Require device to be marked as compliant

Answer

Require approved client app

Answer

Require hybrid Azure AD joined device

Answer

Require app protection policy

Question 2

A Conditional Access policy is set to 'Report-only' mode. What is the effect on users?

Accepted Answer

Policy evaluates but does not enforce; results are logged only

Answer

Users are blocked from signing in

Answer

Policy is enforced and users must comply

Answer

Policy is disabled and not evaluated

Question 3

Which named location type in Conditional Access allows you to specify trusted locations using IP ranges?

Accepted Answer

IP ranges location

Answer

Countries/Regions location

Answer

Trusted devices location

Answer

Compliant network location

Question 4

You want to require MFA only when users sign in from outside the corporate network. Which Conditional Access condition should you configure?

Accepted Answer

Named locations

Answer

Device platforms

Answer

User risk

Answer

Sign-in frequency

Question 5

Which session control in Conditional Access restricts the duration of a user's authenticated session before re-authentication is required?

Accepted Answer

Sign-in frequency

Answer

Application enforced restrictions

Answer

Persistent browser session

Answer

Continuous access evaluation

Question 6

A Conditional Access policy targets the 'All cloud apps' assignment. An administrator needs to exclude the Azure portal from this policy. Where is this exclusion configured?

Accepted Answer

Under 'Cloud apps or actions' > 'Exclude'

Answer

Under 'Conditions' > 'Locations'

Answer

Under 'Users' > 'Exclude'

Answer

Under 'Grant' controls