SC-300 Microsoft Identity and Access Administrator Dumps 5

Question 1

Which Azure AD Connect sync rule precedence value takes priority when two rules conflict — a lower number or a higher number?

Accepted Answer

Lower number (e.g., 50) takes priority over higher numbers

Answer

In Azure AD Connect, sync rules with a lower precedence number have higher priority and win conflicts over rules with higher numbers.

Question 2

An administrator needs to audit all changes made to Conditional Access policies in the last 30 days. Where should they look?

Accepted Answer

Microsoft Entra audit logs filtered by category 'Policy'

Answer

Microsoft Entra audit logs capture all configuration changes, including Conditional Access policy modifications, filterable by the 'Policy' category.

Question 3

A company acquires another organization and wants to allow the acquired company's Azure AD users to access resources in the parent company's tenant without converting them to guest accounts. Which feature enables this?

Accepted Answer

Azure AD cross-tenant synchronization

Answer

Cross-tenant synchronization automatically creates and maintains member (non-guest) user objects in the resource tenant synced from the source tenant.

Question 4

Which Microsoft Entra workload identity feature detects when a service principal or managed identity exhibits anomalous behavior, such as signing in from an unusual location?

Accepted Answer

Identity Protection for workload identities

Answer

Identity Protection for workload identities extends risk detection to service principals and managed identities, flagging anomalous sign-ins.

Question 5

An administrator registers an application and needs to ensure it can only be used by users within the organization's tenant. What setting controls this?

Accepted Answer

Set 'Supported account types' to 'Accounts in this organizational directory only (Single tenant)'

Answer

Setting 'Supported account types' to single-tenant restricts the application so that only accounts in the home tenant can authenticate.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Microsoft Identity and Access Administrator Dumps 5