Free SC-300 Exam Braindumps
Microsoft Identity and Access Administrator Questions 106–110 (page: 23)

Updated On: 10-Feb-2026

You have a Microsoft Entra tenant that contains the users shown in the following table.
The tenant has the authentication methods shown in the following table.
Which users will sign in to cloud apps by using number matching?

  1. User1 only
  2. User2 only
  3. User3 only
  4. User1 and User2 only
  5. User2 and User3 only

Answer(s): A



You have a Microsoft 365 tenant.
All users have computers that run Windows 10. Most computers are company-owned and joined to Azure Active Directory (Azure AD). Some computers are user- owned and are only registered in Azure AD.
You need to prevent users who connect to Microsoft SharePoint Online on their user-owned computer from downloading or syncing files. Other users must NOT be restricted.
Which policy type should you create?

  1. a Microsoft Cloud App Security activity policy that has Microsoft Office 365 governance actions configured
  2. an Azure AD conditional access policy that has session controls configured
  3. an Azure AD conditional access policy that has client apps conditions configured
  4. a Microsoft Cloud App Security app discovery policy that has governance actions configured

Answer(s): B


Reference:

https://docs.microsoft.com/en-us/cloud-app-security/proxy-intro-aad



You have an Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant.
The on-premises network contains a VPN server that authenticates to the on-premises Active Directory domain. The VPN server does NOT support Azure Multi
Factor Authentication (MFA).
You need to recommend a solution to provide Azure MFA for VPN connections.
What should you include in the recommendation?

  1. Azure AD Application Proxy
  2. an Azure AD Password Protection proxy
  3. Network Policy Server (NPS)
  4. a pass-through authentication proxy

Answer(s): C


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-vpn



You have a Microsoft 365 tenant.
The Azure Active Directory (Azure AD) tenant is configured to sync with an on-premises Active Directory domain. The domain contains the servers shown in the following table.
The domain controllers are prevented from communicating to the internet.
You implement Azure AD Password Protection on Server1 and Server2.
You deploy a new server named Server4 that runs Windows Server 2019.
You need to ensure that Azure AD Password Protection will continue to work if a single server fails.
What should you implement on Server4?

  1. Azure AD Connect
  2. Azure AD Application Proxy
  3. Password Change Notification Service (PCNS)
  4. the Azure AD Password Protection proxy service

Answer(s): D


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy



You have a Microsoft Entra tenant.
You have the devices shown in the following table.
You configure Microsoft Entra Internet Access for the tenant.
On which devices can you use Global Secure Access?

  1. Device1 only
  2. Device3 only
  3. Device1 and Device2 only
  4. Device1, Device3, and Device4 only
  5. Device1, Device2, Device3, and Device4

Answer(s): B



Viewing page 23 of 83
Viewing questions 111 - 115 out of 475 questions


Post your Comments and Discuss Microsoft SC-300 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!