QUESTION: 57 Exam Topic: Implement identities in Azure AD Questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Active Directory forest that syncs to an Azure AD tenant.

You discover that when a user account is disabled in Active Directory, the disabled user can still authenticate to Azure AD for up to 30 minutes.

You need to ensure that when a user account is disabled in Active Directory, the user account is immediately prevented from authenticating to Azure AD.

Solution: You configure conditional access policies.

Does this meet the goal?

Answer(s): B

Explanation:

Correct Solution: You configure pass-through authentication.

Note: Azure AD Pass-through Authentication. Provides a simple password validation for Azure AD authentication services by using a software agent that runs on one or more on-premises servers. The servers validate the users directly with your on-premises Active Directory, which ensures that the password validation doesn't happen in the cloud.

Companies with a security requirement to immediately enforce on-premises user account states, password policies, and sign-in hours might use this authentication method.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn

Reveal Solution Next Question

QUESTION: 58 Exam Topic: Implement identities in Azure AD Questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 E5 subscription.

You create a user named User1.

You need to ensure that User1 can update the status of Identity Secure Score improvement actions.

Solution: You assign the Exchange Administrator role to User1.

Does this meet the goal?

Answer(s): A

Explanation:

Who can use the identity secure score?
To access identity secure score, you must be assigned one of the following roles in Azure Active Directory.

Read and write roles
With read and write access, you can make changes and directly interact with identity secure score.

Global administrator
Security administrator
Exchange administrator
SharePoint administrator

Reference:

https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/identity-secure-score

Reveal Solution Next Question

QUESTION: 59 Exam Topic: Implement identities in Azure AD Questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 E5 subscription.

You create a user named User1.

You need to ensure that User1 can update the status of Identity Secure Score improvement actions.

Solution: You assign the User Administrator role to User1.

Does this meet the goal?

Answer(s): B

Explanation:

Correct Solution: You assign the Exchange Administrator role to User1.

Note: Who can use the identity secure score?
To access identity secure score, you must be assigned one of the following roles in Azure Active Directory.

Read and write roles
With read and write access, you can make changes and directly interact with identity secure score.

Global administrator
Security administrator
Exchange administrator
SharePoint administrator

Reference:

https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/identity-secure-score

Reveal Solution Next Question

QUESTION: 60 Exam Topic: Implement identities in Azure AD Questions

You have the Azure resources shown in the following table.

To which identities can you assign the Contributor role for RG1?

User1 only
User1 and Group1 only
User1 and VM1 only
User1, VM1, and App1 only
User1, Group1, VM1, and App1

Answer(s): E

Reveal Solution Next Question

Free SC-300 Exam Braindumps (page: 15)

QUESTION: 57 Exam Topic: Implement identities in Azure AD Questions

Explanation:

Reference:

QUESTION: 58 Exam Topic: Implement identities in Azure AD Questions

Explanation:

Reference:

QUESTION: 59 Exam Topic: Implement identities in Azure AD Questions

Explanation:

Reference:

QUESTION: 60 Exam Topic: Implement identities in Azure AD Questions