Free SC-300 Exam Braindumps
Microsoft Identity and Access Administrator Questions 146–150 (page: 31)

Updated On: 10-Feb-2026

HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant. The tenant contains the users shown in the following table.
Sub1 contains a resource group named RG1.
The tenant contains the groups shown in the following table.
You deploy a virtual machine named VM1 to RG1. VM1 runs Windows Server and has Microsoft Entra login enabled.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.


  1. See Explanation section for answer.

Answer(s): A

Explanation:



HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription that contains the following virtual machine:
• Name: V1
• Azure region: East US
• System-assigned managed identity: Disabled
You create the managed identities shown in the following table.
You perform the following actions:
• Assign Managed1 to V1.
• Create a resource group named RG1 in the West US region.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription that contains the key vaults shown in the following table.
The subscription contains the users shown in the following table.
On June 1, Admin4 performs the following actions:
• Deletes a certificate named Certificate1 from KeyVault1
• Deletes a secret named Secret1 from KeyVault2
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.


  1. See Explanation section for answer.

Answer(s): A

Explanation:



You have an Azure AD tenant.
You open the risk detections report.
Which risk detection type is classified as a user risk?

  1. password spray
  2. anonymous IP address
  3. unfamiliar sign-in properties
  4. Azure AD threat intelligence

Answer(s): D



You have a management group named Group1 that contains two Azure subscriptions named Sub1 and Sub2. The subscriptions are linked to a Microsoft Entra tenant that contains a user named User1.
You need to ensure that User1 can onboard Sub1 to Permissions Management. The solution must follow the principle of least privilege.
Which permission should you grant to User1?

  1. Microsoft.Authorization/roleAssignments/read for Sub1
  2. Microsoft.Authorization/roleAssignments/write for Group1
  3. MicrosoftAuthorization/roleAssignments/write for Sub1
  4. Microsoft.Authorization/roleAssignments/read for Group1

Answer(s): C



Viewing page 31 of 83
Viewing questions 151 - 155 out of 475 questions


Post your Comments and Discuss Microsoft SC-300 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!