Free SC-300 Exam Braindumps
Microsoft Identity and Access Administrator Questions 141–145 (page: 30)

Updated On: 10-Feb-2026

You have an Azure subscription that contains an Azure SQL database named db1.
You deploy an Azure App Service web app named App1 that provides product information to users that connect to App1 anonymously.
You need to provide App1 with access to db1. The solution must meet the following requirements:
• Credentials must only be available to App1.
• Administrative effort must be minimized.
Which type of credentials should you use?

  1. a system-assigned managed identity
  2. an Azure Active Directory (Azure AD) user account
  3. a SQL Server account
  4. a user-assigned managed identity

Answer(s): A



You have an Azure subscription that contains the custom roles shown in the following table.
You need to create a custom Azure subscription role named Role3 by using the Azure portal. Role3 will use the baseline permissions of an existing role.
Which roles can you clone to create Role3?

  1. Role2 only
  2. built-in Azure subscription roles only
  3. built-in Azure subscription roles and Role2 only
  4. built-in Azure subscription roles and built-in Azure AD roles only
  5. Role1, Role2, built-in Azure subscription roles, and built-in Azure AD roles

Answer(s): C



You have a Microsoft 365 tenant.
All users have mobile phones and Windows 10 laptops.
The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptops to a wired network that has internet access.
You plan to implement multi-factor authentication (MFA).
Which MFA authentication method can the users use from the remote location?

  1. Windows Hello for Business
  2. an app password
  3. security questions
  4. email

Answer(s): A



HOTSPOT (Drag and Drop is not supported)
Your on-premises network contains an Active Directory domain that uses Microsoft Entra Connect sync to sync with a Microsoft Entra tenant.
You need to configure Microsoft Entra Connect sync to meet the following requirements:
• Microsoft Entra sign-ins must be authenticated by an Active Directory domain controller.
• Active Directory domain users must be able to use Microsoft Entra self-service password reset (SSPR).
• Minimize administrative effort.
What should you use for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



You have a Microsoft 365 tenant.
All users have mobile phones and Windows 10 laptops.
The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptops to a wired network that has internet access.
You plan to implement multi-factor authentication (MFA).
Which MFA authentication method can the users use from the remote location?

  1. voice
  2. Windows Hello for Business
  3. email
  4. security questions

Answer(s): B



Viewing page 30 of 83
Viewing questions 146 - 150 out of 475 questions


Post your Comments and Discuss Microsoft SC-300 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!