SC-300 Practice Test

SC-300 Practice Test practice questions, page 13 of 19, with answer review and explanations.

Question 61

You have an Azure subscription that contains an Azure Automation account named Automation1. You need to grant Automation1 access to Azure resources. The solution must meet the following requirements: • Ensure that any permissions granted to Automation1 are removed when the account is deleted. • Minimize administrative effort. What should you use?

  1. a client secret
  2. a system-assigned managed identity
  3. a certificate
  4. user-assigned managed identity

Question 62

You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of user1@outlook.com. You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as user1@outlook.com. What should you do?

  1. Add a custom domain name to contoso.com.
  2. Configure the External collaboration settings.
  3. Create a guest user account in contoso.com.
  4. Add a WS-Fed identity provider.

Question 63

You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com. Several users use their contoso.com email address for self-service sign-up to Microsoft Entra. You gain global administrator privileges to the Microsoft Entra tenant that contains the self-signed users. You need to prevent the users from creating user accounts in the contoso.com Microsoft Entra tenant for self-service sign-up to Microsoft 365 services. Which PowerShell cmdlet should you run?

  1. Update-MgPolicyAuthorizationPolicy
  2. Update-MgDomain
  3. Update-MgPolicyPermissionGrantPolicyExclude
  4. Update-MgDomainFederationConfiguration

Question 64

You have a Microsoft Entra tenant that contains the users shown in the following table. You add an enterprise application named App1 and configure the following Self-service settings: • Allow users to request access to this application: Yes • To which group should assigned users be added: Group1 • Require approval before granting access to this application: Yes • Who is allowed to approve access to this application: User2 Which users can request access to App1?

  1. User3 only
  2. User2 and User3 only
  3. User1 and User3 only
  4. User1, User2, and User3

Question 65

You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of user1@outlook.com. You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as user1@outlook.com. What should you do?

  1. Implement Microsoft Entra Connect sync.
  2. Create a guest user account in contoso.com.
  3. Configure the External collaboration settings.
  4. Run the New-MgUser cmdlet.