HOTSPOT (Drag and Drop is not supported) You have a Microsoft 365 tenant.You create a named location named HighRiskCountries that contains a list of high-risk countries.You need to limit the amount of time a user can stay authenticated when connecting from a high-risk country.What should you configure in a conditional access policy? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session
HOTSPOT (Drag and Drop is not supported) A user named User1 attempts to sign in to the tenant by entering the following incorrect passwords:-Pa55w0rd12-Pa55w0rd12-Pa55w0rd12-Pa55w.rd12-Pa55w.rd123-Pa55w.rd123-Pa55w.rd123-Pa55word12-Pa55word12-Pa55word12-Pa55w.rd12You need to identify how many sign-in attempts were tracked for User1, and how User1 can unlock her account before the 300-second lockout duration expires.What should identify? To answer, select the appropriateNOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment
HOTSPOT (Drag and Drop is not supported) You have an Azure Active Directory (Azure AD) tenant that has Security defaults disabled.You are creating a conditional access policy as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa
You have an Azure Active Directory (Azure AD) tenant that contains a user named SecAdmin1. SecAdmin1 is assigned the Security administrator role.SecAdmin1 reports that she cannot reset passwords from the Azure AD Identity Protection portal.You need to ensure that SecAdmin1 can manage passwords and invalidate sessions on behalf of non-administrative users. The solution must use the principle of least privilege.Which role should you assign to SecAdmin1?
Answer(s): B
https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference
You configure Azure Active Directory (Azure AD) Password Protection as shown in the exhibit. (Click the Exhibit tab.)You are evaluating the following passwords:-Pr0jectlitw@re-T@ilw1nd-C0nt0s0Which passwords will be blocked?
Answer(s): C
https://blog.enablingtechcorp.com/azure-ad-password-protection-password-evaluation
Post your Comments and Discuss Microsoft SC-300 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-300 content, but please register or login to continue.