SC-300 Practice Test

Answer choices

1. A. It is automatically deleted when the first custom domain is verified
2. B. It becomes an unverified external domain, within the defined security and accountability boundaries.
3. C. It can be used only after another DNS verification, within the implement and manage user identities context.
4. D. It remains available after custom domains are added, as the selected approach for the stated technical and business outcome.

Wrong-answer review

• A. It is automatically deleted when the first custom domain is verified: Adding a custom domain does not trigger deletion of the tenant's original onmicrosoft.com domain.
• B. It becomes an unverified external domain, within the defined security and accountability boundaries.: The initial domain belongs to the tenant and does not become an external unverified domain after customization.
• C. It can be used only after another DNS verification, within the implement and manage user identities context.: DNS verification is required for added custom domains, not for re-establishing the tenant's existing initial domain.

Answer choices

1. A. Microsoft Entra hybrid joined, for the stated requirement.
2. B. Microsoft Entra registered for BYOD only, under this approach.
3. C. Microsoft Entra joined with no AD DS membership, for consideration.
4. D. A cloud-only user object, under the documented operational and governance requirements.

Answer choices

1. A. Report-only, as the selected response to the described condition.
2. B. On with block access, for this task.
3. C. Off with no evaluation logging, as the organization’s selected response.
4. D. A permanently active PIM assignment, for this decision.

Answer choices

1. A. A direct network peering connection to every SaaS provider
2. B. A reverse proxy used by Conditional Access App Control, under this approach.
3. C. An application registration with delegated permissions, within the defined security and accountability boundaries.
4. D. A Microsoft Entra provisioning agent, for the required business outcome.

Answer choices

1. A. Only the current percentage, because its value guarantees resistance to compromise, as described.
2. B. Application sign-in logs, because every failed sign-in automatically defines a score change
3. C. Identity Secure Score improvement actions and score history, under the documented operational and governance requirements.
4. D. A one-time export of guest users with no recommendation data, for the stated security, delivery, and accountability requirements.

Answer choices

1. A. Microsoft Entra External ID enables secure access for external users through federated authentication.
2. B. Microsoft Defender for Identity provides threat detection and remediation for Active Directory environments.
3. C. Microsoft Azure AD Application Proxy provides secure remote access to on-premises web applications.
4. D. Microsoft Entra Domain Services supplies managed Kerberos and NTLM domain capabilities

Answer choices

1. A. User risk, as the primary proposed approach.
2. B. Sign-in risk, under the documented operational and governance requirements.
3. C. Application risk, as selected.
4. D. Device compliance risk, as selected.

Answer choices

1. A. Create three system-assigned identities with unrelated permissions, for the described technical objective and its associated operational control requirements, for this decision.
2. B. Assign one user-assigned managed identity to all three workloads and authorize that identity on the vault, for evaluation.
3. C. Embed one shared client secret in all three workloads, for the stated implementation and support requirements.
4. D. Use three user-assigned identities but grant none of them access to the vault, under the documented operational and governance requirements.

Answer choices

1. A. Microsoft Entra audit logs, as the selected response to the described condition.
2. B. Microsoft Entra provisioning logs, as the primary proposed approach.
3. C. Microsoft Entra sign-in logs, as selected.
4. D. Azure subscription activity logs only, for this task.

Answer choices

1. A. Microsoft Entra ID P1 alone, because basic Conditional Access includes cross-resource access reviews with inactivity recommendations.
2. B. Microsoft Entra ID Governance or Entra Suite licensing for enhanced access reviews
3. C. Microsoft 365 E3 alone, because standard group membership reports include the multi-resource access review feature.
4. D. Microsoft Entra ID P2 alone, because PIM eligibility automatically unlocks multi-resource access reviews with inactivity recommendations.