Free SC-300 Exam Braindumps
Microsoft Identity and Access Administrator Questions 186–190 (page: 39)

Updated On: 10-Feb-2026

DRAG DROP (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription. The subscription contains 500 devices that run Windows.
You deploy the Global Secure Access client to the devices.
You need to prevent users from accessing https://contoso.com from the devices.
Which three actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



You have a Microsoft 365 tenant.
You currently allow email clients that use Basic authentication to connect to Microsoft Exchange Online.
You need to ensure that users can connect to Exchange Online only from email clients that use Modern authentication protocols.
What should you implement?

  1. a conditional access policy in Azure AD
  2. a compliance policy in Microsoft Intune
  3. an OAuth policy in Microsoft Defender for Cloud Apps
  4. an application control profile in Microsoft Intune

Answer(s): A



You plan to deploy a new Azure AD tenant.
Which multifactor authentication (MFA) method will be enabled by default for the tenant?

  1. Microsoft Authenticator
  2. SMS
  3. voice call
  4. email OTP

Answer(s): A



HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1 and the users shown in the following table.
The users have the devices shown in the following table.
You create the following two Conditional Access policies:
• Name: CAPolicy1
• Assignments
o Users or workload identities: Group1
o Cloud apps or actions: Office 365 SharePoint Online
o Conditions
Filter for devices: Exclude filtered devices from the policy
Rule syntax: device.displayName -startsWith “Device”
o Access controls
Grant: Block access
Session: 0 controls selected
o Enable policy: On
• Name: CAPolicy2
• Assignments
o Users or workload identities: Group2
o Cloud apps or actions: Office 365 SharePoint Online
o Conditions: 0 conditions selected
• Access controls
o Grant: Grant access
Require multifactor authentication
o Session: 0 controls selected
• Enable policy: On
All users confirm that they can successfully authenticate using MFA.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.


  1. See Explanation section for answer.

Answer(s): A

Explanation:



You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3 and a Microsoft SharePoint Online site named Site1.
The subscription contains the devices shown in the following table.
The users sign in to the devices as shown in the following table.
You have a Conditional Access policy that has the following settings:
• Name: CA1
• Assignments
o Users and groups: User1, User2, User3
o Cloud apps or actions: SharePoint - Site1
• Access controls
o Session: Use app enforced restrictions
From the SharePoint admin center, you configure Access control for unmanaged devices to allow limited, web-only access.
Which users will have full access to Site1?

  1. User1 only
  2. User2 only
  3. User3only
  4. User1 and User2 only
  5. User1, User2, and User3

Answer(s): B



Viewing page 39 of 83
Viewing questions 191 - 195 out of 475 questions


Post your Comments and Discuss Microsoft SC-300 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!