You create a conditional access policy that blocks access when a user triggers a high-severity sign-in alert.You need to test the policy under the following conditions:-A user signs in from another country.-A user triggers a sign-in risk.What should you use to complete the test?
Answer(s): A
The Azure AD conditional access What if tool allows you to understand the impact of your conditional access policies on your environment. Instead of test driving your policies by performing multiple sign-ins manually, this tool enables you to evaluate a simulated sign-in of a user. The simulation estimates the impact this sign-in has on your policies and generates a simulation report. The report does not only list the applied conditional access policies but also classic policies if they exist.
https://azure.microsoft.com/en-us/updates/azure-ad-conditional-access-what-if-tool-is-now-available
HOTSPOT (Drag and Drop is not supported) You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.You have the locations shown in the following table.The tenant contains a named location that has the following configurations:-Name: Location1-Mark as trusted location: EnabledIPv4 range: 10.10.0.0/16 MFA has a trusted IP address range of 193.17.17.0/24.-Name: CAPolicy1-Assignments- Users or workload identities: Group1- Cloud apps or actions: All cloud apps-Conditions- Locations: All trusted locations-Access controls- Grant- Grant access: Require multi-factor authentication- Session: 0 controls selected-Enable policy: OnFor each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: No 10.10.0.150 is from a trusted location.Note: The trusted IPs feature of Azure AD Multi-Factor Authentication bypasses multi-factor authentication prompts for users who sign in from a defined IP address range. You can set trusted IP ranges for your on-premises environments. When users are in one of these locations, there's no Azure AD Multi-FactorAuthentication prompt. The trusted IPs feature requires Azure AD Premium P1 edition.Box 2: No 10.10.1.160 is from a trusted locationBox 3: Yes
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings
HOTSPOT (Drag and Drop is not supported) You have an Azure Active Directory (Azure AD) tenant named contoso.com that has Email one-time passcode for guests set to Yes.You invite the guest users shown in the following table.Which users will receive a one-time passcode, and how long will the passcode be valid? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: Guest3 only When does a guest user get a one-time passcode?When a guest user redeems an invitation or uses a link to a resource that has been shared with them, they'll receive a one-time passcode if:They don't have an Azure AD accountThey don't have a Microsoft accountThe inviting tenant didn't set up federation with social (like Google) or other identity providers.Box 2: 30 minutes One-time passcodes are valid for 30 minutes. After 30 minutes, that specific one-time passcode is no longer valid, and the user must request a new one. User sessions expire after 24 hours. After that time, the guest user receives a new passcode when they access the resource. Session expiration provides added security, especially when a guest user leaves their company or no longer needs access.
https://docs.microsoft.com/en-us/azure/active-directory/external-identities/one-time-passcode
You have a Microsoft 365 tenant.You currently allow email clients that use Basic authentication to connect to Microsoft Exchange Online.You need to ensure that users can connect to Exchange only from email clients that use Modern authentication protocols.What should you implement?
Answer(s): B
You have a Microsoft Entra tenant that contains the devices shown in the following table.You plan to configure Microsoft Entra Private Access.You deploy the Global Secure Access client to compatible devices.From which devices can you use Private Access?
Post your Comments and Discuss Microsoft SC-300 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-300 content, but please register or login to continue.