HOTSPOT (Drag and Drop is not supported) You have a Microsoft 365 tenant.You need to identify users who have leaked credentials. The solution must meet the following requirements:-Identify sign-ins by users who are suspected of having leaked credentials.-Flag the sign-ins as a high-risk event.-Immediately enforce a control to mitigate the risk, while still allowing the user to access applications.What should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks
HOTSPOT (Drag and Drop is not supported) You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.You plan to implement Azure AD Identity Protection.Which users can configure the user risk policy, and which users can view the risky users report? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection
HOTSPOT (Drag and Drop is not supported) You have an Azure Active Directory (Azure AD) tenant that contains a group named Group3 and an administrative unit named Department1.Department1 has the users shown in the Users exhibit. (Click the Users tab.)Department1 has the groups shown in the Groups exhibit. (Click the Groups tab.)Department1 has the user administrator assignments shown in the Assignments exhibit. (Click the Assignments tab.)The members of Group2 are shown in the Group2 exhibit. (Click the Group2 tab.)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/active-directory/roles/administrative-units
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a Microsoft 365 tenant.All users must use the Microsoft Authenticator app for multi-factor authentication (MFA) when accessing Microsoft 365 services.Some users report that they received an MFA prompt on their Microsoft Authenticator app without initiating a sign-in request.You need to block the users automatically when they report an MFA request that they did not initiate.Solution: From the Azure portal, you configure the Fraud alert settings for multi-factor authentication (MFA).Does this meet the goal?
The fraud alert feature lets users report fraudulent attempts to access their resources. When an unknown and suspicious MFA prompt is received, users can report the fraud attempt using the Microsoft Authenticator app or through their phone.The following fraud alert configuration options are available:- Automatically block users who report fraud.- Code to report fraud during initial greeting.
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings
You have a Microsoft 365 tenant.All users have mobile phones and laptops.The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptop to a wired network that has internet access.You plan to implement multi-factor authentication (MFA).Which MFA authentication method can the users use from the remote location?
Answer(s): D
The Authenticator app can be used as a software token to generate an OATH verification code. After entering your username and password, you enter the code provided by the Authenticator app into the sign-in interface.Incorrect Answers:A: A notification through the Microsoft Authenticator app requires connectivity to send the verification code to the device requesting the logon.B: An email requires network connectivity.C: Security questions are not used as an authentication method but can be used during the self-service password reset (SSPR) process.
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-authenticator-app#verification-code-from-mobile-app
Post your Comments and Discuss Microsoft SC-300 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-300 content, but please register or login to continue.