Free SC-300 Exam Braindumps
Microsoft Identity and Access Administrator Questions 211–215 (page: 44)

You have an Azure subscription that contains a virtual machine named VM1 and an Azure key vault named Vault1. VM1 has a system-assigned managed identity.
You need to ensure that VM1 can retrieve the values of secrets stored in Vault1. The solution must minimize administrative effort.
What should you do first?

HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription named Sub1.
You plan to use Microsoft Entra Permissions Management to manage Sub1.
You need to ensure that Permissions Management can perform the following tasks:
• Identify unused permissions assigned to applications and managed identities.
• Provide users with recommendations about which permissions to remove.
• Remove unused permissions.
The solution must follow the principle of least privilege.
Which role should you assign to the service principal of Permissions Management, and what should you use to provide recommendations and remove unused permissions? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2. The subscription contains the users shown in the following table.
You create the following Conditional Access policies:
• Name: Policy1
• Users:
o Include: Group1
o Exclude: Group2
• Target resources:
o Include: All cloud apps
• Grant:
o Grant access: Require multi-factor authentication
• Session:
o Persistent browser session: Never persistent
• Name: Policy2
• Users:
o Include:
- Directory roles: Global Administrator
- Users and groups: User3
o Exclude: Group2
• Target resources:
o Include: All cloud apps
• Session:
o Sign-in frequency:
- Periodic authentication: 2 hours
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

You have a Microsoft 365 E5 subscription that contains a user named User1.
You need to ensure that User1 can create access reviews for Microsoft Entra roles. The solution must use the principle of least privilege.
Which role should you assign to User1?

You have a Microsoft Entra tenant that contains the users shown in the following table.
Admin4 creates a Conditional Access policy named Policy1 by using the Require multifactor authentication for Azure management template.
Which users will be required to use multi-factor authentication (MFA) the next time they sign in?