HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You need to create two custom roles named Role1 and Role2. The solution must meet the following requirements:• Users that are assigned Role1 can manage application security groups.• Users that are assigned Role2 can manage Azure Firewall.Which resource provider permissions are required for each role? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
Answer(s): A
You have a Microsoft 365 tenant.All users have mobile phones and Windows 10 laptops.The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptop to a wired network that has internet access.You plan to implement multi-factor authentication (MFA).Which MFA authentication method can the users use from the remote location?
Answer(s): D
You have an Azure subscription. The subscription contains 50 virtual machines that run Windows Server.You enable Microsoft Entra login for the virtual machines.Users report that they cannot sign in to the virtual machines by using their Microsoft Entra credentials.You need to ensure that the users can sign in to the virtual machines.What should you do first?
DRAG DROP (Drag and Drop is not supported)You have a Microsoft 365 E5 tenant.You purchase a cloud app named App1.You need to enable real-time session-level monitoring of App1 by using Microsoft Defender for Cloud Apps.In which order should you perform the actions? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
HOTSPOT (Drag and Drop is not supported)Case StudyOverviewADatum Corporation is a consulting company in Montreal.ADatum recently acquired a Vancouver-based company named Litware, Inc.Existing Environment. ADatum EnvironmentThe on-premises network of ADatum contains an Active Directory Domain Services (AD DS) forest named adatum.com.ADatum has a Microsoft 365 E5 subscription. The subscription contains a verified domain that syncs with the adatum.com AD DS domain by using Azure AD Connect.ADatum has an Azure Active Directory (Azure AD) tenant named adatum.com. The tenant has Security defaults disabled.The tenant contains the users shown in the following table.The tenant contains the groups shown in the following table.Existing Environment. Litware EnvironmentLitware has an AD DS forest named litware.comExisting Environment. Problem StatementsADatum identifies the following issues:• Multiple users in the sales department have up to five devices. The sales department users report that sometimes they must contact the support department to join their devices to the Azure AD tenant because they have reached their device limit.• A recent security incident reveals that several users leaked their credentials, a suspicious browser was used for a sign-in, and resources were accessed from an anonymous IP address.• When you attempt to assign the Device Administrators role to IT_Group1, the group does NOT appear in the selection list.• Anyone in the organization can invite guest users, including other guests and non-administrators.• The helpdesk spends too much time resetting user passwords.• Users currently use only passwords for authentication.Requirements. Planned ChangesADatum plans to implement the following changes:• Configure self-service password reset (SSPR).• Configure multi-factor authentication (MFA) for all users.• Configure an access review for an access package named Package1.• Require admin approval for application access to organizational data.• Sync the AD DS users and groups of litware.com with the Azure AD tenant.• Ensure that only users that are assigned specific admin roles can invite guest users.• Increase the maximum number of devices that can be joined or registered to Azure AD to 10.Requirements. Technical RequirementsADatum identifies the following technical requirements:• Users assigned the User administrator role must be able to request permission to use the role when needed for up to one year.• Users must be prompted to register for MFA and provided with an option to bypass the registration for a grace period.• Users must provide one authentication method to reset their password by using SSPR. Available methods must include:- Email- Phone- Security questions- The Microsoft Authenticator app• Trust relationships must NOT be established between the adatum.com and litware.com AD DS domains.• The principle of least privilege must be used.You implement the planned changes for SSPR.What occurs when User3 attempts to use SSPR? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
Post your Comments and Discuss Microsoft SC-300 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-300 content, but please register or login to continue.