SC-300 Microsoft Identity and Access Administrator Certification 5

Question 1

A company needs to synchronize on-premises AD groups to Azure AD without deploying Azure AD Connect Sync. Which lightweight alternative should they use?

Accepted Answer

Azure AD Connect cloud sync

Answer

Azure AD Connect cloud sync uses lightweight provisioning agents and is designed for scenarios where full Azure AD Connect Sync is not needed or desired.

Question 2

Which Microsoft Entra feature allows administrators to publish on-premises web applications securely to external users without a VPN?

Accepted Answer

Microsoft Entra application proxy

Answer

Entra Application Proxy publishes on-premises web applications through the cloud so external users access them via Azure AD authentication without a VPN tunnel.

Question 3

An access review is configured for an Azure AD group. What happens to group members who do not respond to the review and auto-apply is enabled with 'Remove access' as the result?

Accepted Answer

They are automatically removed from the group at review completion

Answer

When auto-apply is enabled with 'Remove access,' members who are not approved (including non-responses) are automatically removed from the group when the review period ends.

Question 4

A tenant administrator wants to prevent any user from consenting to third-party applications requesting high-privilege permissions. Which setting enforces this?

Accepted Answer

User consent settings set to 'Do not allow user consent' or restricted to verified publishers only

Answer

The User consent settings under Enterprise Applications > Consent and Permissions centrally controls whether users can grant consent and to what level of permissions.

Question 5

Which Azure AD role grants the minimum permissions needed to reset passwords for non-admin users and manage authentication methods for those users?

Accepted Answer

Authentication Administrator

Answer

The Authentication Administrator role can reset passwords and manage authentication methods for non-privileged users, with more scope than Helpdesk Administrator.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Microsoft Identity and Access Administrator Certification 5