QUESTION: 109

You have a Microsoft 365 tenant.
The Azure Active Directory (Azure AD) tenant is configured to sync with an on-premises Active Directory domain. The domain contains the servers shown in the following table.
The domain controllers are prevented from communicating to the internet.
You implement Azure AD Password Protection on Server1 and Server2.
You deploy a new server named Server4 that runs Windows Server 2019.
You need to ensure that Azure AD Password Protection will continue to work if a single server fails.
What should you implement on Server4?

Azure AD Connect
Azure AD Application Proxy
Password Change Notification Service (PCNS)
the Azure AD Password Protection proxy service

Answer(s): D

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy

Reveal Solution Next Question

QUESTION: 110

You have a Microsoft Entra tenant.
You have the devices shown in the following table.
You configure Microsoft Entra Internet Access for the tenant.
On which devices can you use Global Secure Access?

Device1 only
Device3 only
Device1 and Device2 only
Device1, Device3, and Device4 only
Device1, Device2, Device3, and Device4

Answer(s): B

Reveal Solution Next Question

QUESTION: 111

DRAG DROP (Drag and Drop is not supported)
You have a Microsoft 365 E5 tenant.
You purchase a cloud app named App1.
You need to enable real-time session-level monitoring of App1 by using Microsoft Cloud App Security.
In which order should you perform the actions? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Reference:

https://docs.microsoft.com/en-us/cloud-app-security/proxy-deployment-any-app https://docs.microsoft.com/en-us/cloud-app-security/session-policy-aad

Reveal Solution Next Question

QUESTION: 112

You have a Microsoft 365 tenant.
All users have mobile phones and laptops.
The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptop to a wired network that has internet access.
You plan to implement multi-factor authentication (MFA).
Which MFA authentication method can the users use from the remote location?

a notification through the Microsoft Authenticator app
an app password
Windows Hello for Business
SMS

Answer(s): C

Explanation:

In Windows 10, Windows Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device and uses a biometric or PIN.
After an initial two-step verification of the user during enrollment, Windows Hello is set up on the user's device and Windows asks the user to set a gesture, which can be a biometric, such as a fingerprint, or a PIN. The user provides the gesture to verify their identity. Windows then uses Windows Hello to authenticate users.
Incorrect Answers:
A: A notification through the Microsoft Authenticator app requires connectivity to send the verification code to the device requesting the logon
B: An app password can be used to open an application but it cannot be used to sign in to a computer.
D: SMS requires a mobile phone

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview

Reveal Solution Next Question

Free SC-300 Exam Braindumps (page: 29)

QUESTION: 109

Reference:

QUESTION: 110

QUESTION: 111

Explanation:

Reference:

QUESTION: 112

Explanation:

Reference:

SC-300 Exam Discussions & Posts