Free SC-300 Exam Braindumps (page: 13)

Page 13 of 80

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 tenant that has 5,000 users. One hundred of the users are executives. The executives have a dedicated support team.

You need to ensure that the support team can reset passwords and manage multi-factor authentication (MFA) settings for only the executives. The solution must use the principle of least privilege.

Which object type and Azure Active Directory (Azure AD) role should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.



You have an administrative unit named Au1. Group1, User2, and User3 are members of Au1.

User5 is assigned the User administrator role for Au1.

For which users can User5 reset passwords?

  1. User1, User2, and User3
  2. User1 and User2 only
  3. User3 and User4 only
  4. User2 and User3 only

Answer(s): D

Explanation:

Only the users in the administrative unit, not the users in the Groups in the administrative unit.

For example, a User Administrator scoped to an administrative unit that contains a group can and can't do the following:


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/roles/administrative-units



You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.



You create a dynamic user group and configure the following rule syntax.

user.usageLocation -in ["US","AU"] -and (user.department -eq "Sales") -and -not (user.jobTitle -eq "Manager") –or (user. jobTitle -eq "SalesRep")

Which users will be added to the group?

  1. User1 only
  2. User2 only
  3. User3 only
  4. User1 and User2 only
  5. User1 and User3 only
  6. User1, User2, and User3

Answer(s): D

Explanation:

User1 produced by expression part: user.usageLocation -in ["US","AU"] -and (user.department -eq "Sales") -and -not (user.jobTitle -eq "Manager")

User2 produces by expression part –or (user. jobTitle -eq "SalesRep")

Note: Operator precedence
All operators are listed below in order of precedence from highest to lowest. Operators on same line are of equal precedence:
-eq -ne -startsWith -notStartsWith -contains -notContains -match –notMatch -in -notIn
-not
-and
-or
-any -all


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership



You have an Azure AD tenant that contains a user named User1.

User1 needs to manage license assignments and reset user passwords.

Which role should you assign to User1?

  1. Helpdesk administrator
  2. Billing administrator
  3. License administrator
  4. User administrator

Answer(s): D

Explanation:

User Administrator
Can manage all aspects of users and groups, including resetting passwords for limited admins.

In particular:
Assign licenses for all users, including all administrators

Incorrect:
* License Administrator

Deprecated roles
The following roles should not be used. They have been deprecated and will be removed from Azure AD in the future.

* AdHoc License Administrator
* Etc.


Reference:

https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference



Page 13 of 80



Post your Comments and Discuss Microsoft SC-300 exam with other Community members:

Subodh commented on December 11, 2024
Q45 Is wrong, it should be User Administrator
Anonymous
upvote

gg commented on December 01, 2024
it seems ok the questions and answers look legit.
Anonymous
upvote

Anonymous commented on March 24, 2024
as per https://learn.microsoft.com/en-us/entra/id-governance/deploy-access-reviews question 32 is wrong. Its asking for least privileged access.
Anonymous
upvote

siva commented on May 17, 2023
very helpfull
Anonymous
upvote

Barley commented on December 22, 2023
question 18 is wrong
UNITED STATES
upvote

Barley commented on December 22, 2023
question 22 is out of date and should be updated.
UNITED STATES
upvote

MyBrain commented on October 12, 2023
q28 and q32 are the same but with different response... what is the right answer in this case? thanks !
Anonymous
upvote

Jorn commented on July 13, 2023
relevant questions
UNITED KINGDOM
upvote

Barley commented on December 22, 2023
Question 22 is out of date and should be updated.
UNITED STATES
upvote

Barley commented on December 22, 2023
Question 18 is wrong
UNITED STATES
upvote

MyBrain commented on October 12, 2023
Q28 and Q32 are the same but with different response... What is the right answer in this case? Thanks !
Anonymous
upvote

ferry commented on September 29, 2023
gret was ok
NETHERLANDS
upvote

mani commented on August 29, 2023
awesome questions
Anonymous
upvote

Jorn commented on July 13, 2023
Relevant questions
UNITED KINGDOM
upvote

Paiva commented on June 04, 2023
PDF is good formatted and exam prep course practice questions are same as the test.
GERMANY
upvote

siva commented on May 17, 2023
very helpfull
Anonymous
upvote

Liotta commented on April 11, 2023
A friend recommended this site and I went based on her recommendation. I am glad I did. The questions are all valid and I passed.
CANADA
upvote

Lesli commented on March 30, 2023
Just purchased and downloaded my files. So far all looks good.
UNITED STATES
upvote

lols De Tees commented on September 02, 2022
I passed the exam today. The majority of the question was the same as the practice test. However, there were 11 new questions added.
UNITED STATES
upvote

Brendan commented on August 01, 2022
Now I know how to pass these freaking stupid exams. These exam dumps are the best way to pass your exams.
UNITED STATES
upvote