SC-300 Microsoft Identity and Access Administrator v1.0 4

Question 1

An administrator needs to ensure that guest users in Azure AD can only see their own profile and cannot enumerate other users in the directory. Which setting controls this?

Accepted Answer

External collaboration settings — guest user access restrictions

Answer

The 'Guest user access restrictions' in External collaboration settings controls what directory objects guest users can read or enumerate.

Question 2

A company uses Seamless SSO with Password Hash Synchronization. A user changes their on-premises AD password. How long before the new password hash is available in Azure AD?

Accepted Answer

Within 2 minutes via delta sync triggered by the password change

Answer

Azure AD Connect detects on-premises password changes within 2 minutes and syncs the hash to Azure AD via a triggered delta sync.

Question 3

Which Azure AD cross-tenant access setting controls whether your users can be invited as guests into another organization's tenant?

Accepted Answer

Outbound settings — B2B collaboration

Answer

Outbound B2B collaboration settings control whether your users can be invited to and access external Azure AD tenants as guests.

Question 4

An organization wants to automatically provision and deprovision user accounts in a SaaS application using Azure AD. Which protocol is preferred when supported by the application?

Accepted Answer

SCIM 2.0 provisioning

Answer

SCIM 2.0 is the standard protocol Azure AD uses for automated provisioning and deprovisioning to supported SaaS applications.

Question 5

A Conditional Access policy uses Sign-in frequency set to '1 hour'. What happens to a user's session after one hour of inactivity?

Accepted Answer

The user must re-authenticate on their next request after 1 hour has elapsed

Answer

Sign-in frequency controls how often users are prompted to re-authenticate; after the interval, the next resource request triggers a new sign-in.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Microsoft Identity and Access Administrator v1.0 4