SC-300 Microsoft Identity and Access Administrator Dumps 2

Question 1

A company wants to enforce that users can only access Microsoft 365 from compliant devices. Which Conditional Access grant control should be configured?

Accepted Answer

Require device to be marked as compliant

Answer

The 'Require device to be marked as compliant' grant control ensures only Intune-compliant devices can access resources.

Question 2

An administrator needs to allow external users from a partner organization (contoso.com) to access internal SharePoint sites using their own credentials. What should be configured in Azure AD?

Accepted Answer

Azure AD B2B collaboration with allow list for contoso.com

Answer

Azure AD B2B collaboration allows external users to sign in with their own credentials; an allow list restricts this to specific domains.

Question 3

Which Azure AD feature automatically detects when a user's credentials have been leaked on the dark web and flags their sign-in as high risk?

Accepted Answer

Azure AD Identity Protection leaked credentials detection

Answer

Azure AD Identity Protection's leaked credentials detection compares credentials against known breach lists and raises user risk.

Question 4

A Privileged Identity Management (PIM) role assignment is set to 'eligible.' What must the user do before they can use the role?

Accepted Answer

Activate the role themselves, optionally providing a justification

Answer

With an eligible assignment, the user must self-activate the role in PIM, and activation may require MFA, justification, or approval.

Question 5

Which token type does Microsoft identity platform issue that contains user claims and is validated by the receiving API without a round-trip to Azure AD?

Accepted Answer

Access token (JWT)

Answer

A JWT access token is self-contained with claims and a signature, allowing the API to validate it locally.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Microsoft Identity and Access Administrator Dumps 2