Free SC-300 Exam Braindumps
Microsoft Identity and Access Administrator Questions 91–95 (page: 20)

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft Entra tenant named contoso.com that contains an administrative unit named AU1 and two users named User1 and User2. User1 is a member of AU1.
You need to perform the following role assignments:
• User1: Security Administrator
• User2: User Administrator
For which scopes can each user be assigned the role? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users.
From the Groups blade in the Microsoft Entra admin center, you assign Microsoft Office 365 Enterprise E5 licenses to a group that includes all users.
You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort.
What should you use?

You have an Azure subscription that contains a storage account named storage1.
You plan to deploy an app named App1 that will be hosted on multiple virtual machines. The virtual machines will authenticate to a third-party API by using secrets.
You need to recommend an authentication solution for the virtual machines. The solution must meet the following requirements:
• Securely store secrets.
• Ensure that credentials do NOT need to be stored in the App1 code.
• Ensure that the virtual machines can access Azure resources by using Microsoft Entra authentication
• Minimize administrative effort.
What should you include in the recommendation?

HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription named Sub1 that contains the resources shown in the following table.
Sub1 contains the managed identities shown in the following table.
Sub1 has the role-based access control (RBAC) role assignments shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure Automation account named Automation1.
You need to grant Automation1 access to Azure resources. The solution must meet the following requirements:
• Ensure that any permissions granted to Automation1 are removed when the account is deleted.
• Minimize administrative effort.
What should you use?