You have an Azure Active Directory (Azure AD) tenant.You configure self-service password reset (SSPR) by using the following settings:-Require users to register when signing in: Yes-Number of methods required to reset: 1What is a valid authentication method available to users?
Answer(s): A
A one-gate policy requires one piece of authentication data, such as an email address or phone number.A one-gate policy applies in the following circumstances:It's within the first 30 days of a trial subscription; orA custom domain hasn't been configured for your Azure AD tenant so is using the default *.onmicrosoft.com. The default *.onmicrosoft.com domain isn't recommended for production use; and Azure AD Connect isn't synchronizing identities.
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#administrator-reset-policy-differences
You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.The tenant has the authentication methods shown in the following table.Which users will sign in to cloud apps by matching a number shown in the app with a number shown on their phone?
Microsoft Authenticator You can also allow your employee's phone to become a passwordless authentication method. You may already be using the Authenticator app as a convenient multi-factor authentication option in addition to a password. You can also use the Authenticator App as a passwordless option.The Authenticator App turns any iOS or Android phone into a strong, passwordless credential. Users can sign in to any platform or browser by getting a notification to their phone, matching a number displayed on the screen to the one on their phone, and then using their biometric (touch or face) or PIN to confirm.Incorrect:* Not User2FIDO2 security keys The FIDO (Fast IDentity Online) Alliance helps to promote open authentication standards and reduce the use of passwords as a form of authentication. FIDO2 is the latest standard that incorporates the web authentication (WebAuthn) standard.FIDO2 security keys are an unphishable standards-based passwordless authentication method that can come in any form factor. Fast Identity Online (FIDO) is an open standard for passwordless authentication. FIDO allows users and organizations to leverage the standard to sign in to their resources without a username or password using an external security key or a platform key built into a device.
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-passwordless
You have an Azure Active Directory (Azure AD) tenant that contains a user named User1 and the conditional access policies shown in the following table.You need to evaluate which policies will be applied to User1 when User1 attempts to sign-in from various IP addresses.Which feature should you use?
Answer(s): C
The Azure AD conditional access What if tool allows you to understand the impact of your conditional access policies on your environment. Instead of test driving your policies by performing multiple sign-ins manually, this tool enables you to evaluate a simulated sign-in of a user. The simulation estimates the impact this sign-in has on your policies and generates a simulation report. The report does not only list the applied conditional access policies but also classic policies if they exist.
https://azure.microsoft.com/en-us/updates/azure-ad-conditional-access-what-if-tool-is-now-available
You have a Microsoft 365 tenant.All users have mobile phones and Windows 10 laptops.The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptops to a wired network that has internet access.You plan to implement multi-factor authentication (MFA).Which MFA authentication method can the users use from the remote location?
The Microsoft Authenticator app provides an additional level of security to your Azure AD work or school account or your Microsoft account and is available forAndroid and iOS. With the Microsoft Authenticator app, users can authenticate in a passwordless way during sign-in, or as an additional verification option during self-service password reset (SSPR) or multifactor authentication events.
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-authenticator-app#verification-code-from-mobile-app
You have a Microsoft 365 E5 subscription.You need to ensure that users can only access resources in the subscription from a device that has the Global Secure Access client connected.What should you do first?
Post your Comments and Discuss Microsoft SC-300 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-300 content, but please register or login to continue.