SC-300 Microsoft Identity and Access Administrator Dumps 4

Question 1

A developer registers a multi-tenant application in Azure AD. A user from a different Azure AD tenant attempts to consent to the application but is blocked. What is the most likely cause?

Accepted Answer

The external tenant has admin consent required for all applications and no admin has consented

Answer

If the external tenant requires admin consent for all apps, individual users cannot consent, and an administrator must grant tenant-wide consent first.

Question 2

Which hybrid identity authentication method allows password hash synchronization to Azure AD while also supporting on-premises authentication policies like account lockout and hours restrictions?

Accepted Answer

Pass-through Authentication (PTA)

Answer

Pass-through Authentication validates credentials against on-premises AD in real time, so on-premises policies like lockout and logon hours are enforced.

Question 3

An administrator configures an entitlement management access package with an approval workflow requiring two stages. What happens if the first approver does not respond within the configured timeout?

Accepted Answer

The request escalates to the fallback approver defined in that stage

Answer

Entitlement management supports fallback approvers per stage; if the primary approver times out, the request escalates to the fallback approver.

Question 4

Which Azure AD Conditional Access policy component determines WHO the policy applies to?

Accepted Answer

Assignments — Users and groups

Answer

The 'Assignments — Users and groups' section of a Conditional Access policy defines which users, groups, or roles the policy targets.

Question 5

A global administrator wants to prevent any other administrator from removing the MFA requirement on a critical Conditional Access policy. Which feature provides this protection?

Accepted Answer

Setting the policy as a protected action requiring re-authentication with Conditional Access

Answer

Protected actions in Azure AD require re-authentication (with elevated Conditional Access) to perform sensitive operations like modifying specific policies, adding extra friction.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Microsoft Identity and Access Administrator Dumps 4