QUESTION: 25

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains an Azure AD enterprise application named App1.
A contractor uses the credentials of user1@outlook.com.
You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as user1@outlook.com.
What should you do?

Run the New-AzureADMSInvitation cmdlet.
Configure the External collaboration settings.
Add a WS-Fed identity provider.
Implement Azure AD Connect.

Answer(s): A

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal https://docs.microsoft.com/en-us/powershell/module/azuread/new-azureadmsinvitation?view=azureadps-2.0

Reveal Solution Next Question

QUESTION: 26

You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users.
From the Groups blade in the Azure Active Directory admin center, you assign Microsoft 365 Enterprise E5 licenses to the users.
You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort.
What should you use?

the Administrative units blade in the Azure Active Directory admin center
the Set-AzureAdUser cmdlet
the Groups blade in the Azure Active Directory admin center
the Set-MsolUserLicense cmdlet

Answer(s): D

Explanation:

The Set-MsolUserLicense cmdlet updates the license assignment for a user. This can include adding a new license, removing a license, updating the license options, or any combination of these actions.
Note:
There are several versions of this question in the exam. The question has two possible correct answers:
1. the Licenses blade in the Azure Active Directory admin center
2. the Set-MsolUserLicense cmdlet
Other incorrect answer options you may see on the exam include the following:
- the Identity Governance blade in the Azure Active Directory admin center
- the Set-WindowsProductKey cmdlet
- the Set-AzureAdGroup cmdlet

Reference:

https://docs.microsoft.com/en-us/powershell/module/msonline/set-msoluserlicense?view=azureadps-1.0

Reveal Solution Next Question

QUESTION: 27

You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1.
A contractor uses the credentials of user1@outlook.com.
You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as user1@outlook.com.
What should you do?

Implement Microsoft Entra Connect sync.
Add a custom domain name to contoso.com.
Implement Microsoft Entra Application Proxy.
Run the New-MgInvitation cmdlet.

Answer(s): D

Reveal Solution Next Question

QUESTION: 28

HOTSPOT (Drag and Drop is not supported)
You have an Azure Active Directory (Azure AD) tenant and an Azure web app named App1.
You need to provide guest users with self-service sign-up for App1. The solution must meet the following requirements:
-Guest users must be able to sign up by using a one-time password.
-The users must provide their first name, last name, city, and email address during the sign-up process.
What should you configure in the Azure Active Directory admin center for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/external-identities/identity-providers https://docs.microsoft.com/en-us/azure/active-directory/external-identities/self-service-sign-up-overview

Reveal Solution Next Question

Free SC-300 Exam Braindumps (page: 8)

QUESTION: 25

Reference:

QUESTION: 26

Explanation:

Reference:

QUESTION: 27

QUESTION: 28

Explanation:

Reference:

SC-300 Exam Discussions & Posts