Free SC-300 Exam Braindumps
Microsoft Identity and Access Administrator Questions 196–200 (page: 41)

You have a Microsoft Entra tenant that contains the groups shown in the following table.
You need to implement Privileged Identity Management (PIM) for the groups.
Which groups can be managed by using PIM?

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft Entra tenant that contains the users shown in the following table.
You have a user risk policy that has the following settings:
• Assignments:
o Include: Group1
o Exclude: Group2
• Sign-in risk: Medium and above
• Access controls:
o Grant access: Require password change
When the users attempt to sign in, user risk levels are detected as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains a resource group named RG1 and four users named User1, User2, User3, and User4.
You plan to assign the users the following roles for RG1:
• User1: Reader
• User2: Contributor
• User3: Storage Blob Data Reader
• User4: Virtual Machine Contributor
You are evaluating the use of attribute-based access control (ABAC).
Which user's role will support the use of ABAC?

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Linux.
You need to configure enhanced security for VM1. The solution must meet the following requirements:
• Ensure that users can sign in to VM1 by using their Microsoft Entra credentials.
• Ensure that users authenticate by using multi-factor out-of-band.
• Prevent users from signing in to VM1 by using passwords.
Which two authentication methods can you include in the solution? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

You have a Microsoft 365 E5 subscription.
You create an access review named Review1. Review1 requires that every six months, Microsoft 365 group owners review guest user access to their groups.
You need to ensure that if the group owners fail to review the membership of Review1, guest users are removed automatically.
Which settings should you configure for Review1?