SC-300 Practice Test practice questions, page 5 of 19, with answer review and explanations.
Question 21
Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. Users sign in to computers that run Windows 10 and are joined to the domain. You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO). You need to configure the Windows 10 computers to support Azure AD Seamless SSO. What should you do?
Configure Sign-in options from the Settings app.
Enable Enterprise State Roaming.
Modify the Intranet Zone settings.
Install the Azure AD Connect Authentication Agent.
Question 22
You have an Azure Active Directory (Azure AD) tenant that: contains a user named User1. You need to ensure that User1 can create new catalogs and add1 resources to the catalogs they own. What should you do?
From the Roles and administrators blade, modify the Groups administrator role.
From the Roles and administrators blade, modify the Service support administrator role.
From the Identity Governance blade, modify the Entitlement management settings.
From the Identity Governance blade, modify the roles and administrators for the General catalog.
Question 23
Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. Users sign in to computers that run Windows 10 and are joined to the domain. You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO). You need to configure the Windows 10 computers to support Azure AD Seamless SSO. What should you do?
Configure Sign-in options from the Settings app.
Enable Enterprise State Roaming.
Modify the Local intranet Zone settings.
Install the Azure AD Connect Authentication Agent.
Question 24
Your company has two divisions named Contoso East and Contoso West. The Microsoft 365 identity architecture for both divisions is shown in the following exhibit. You need to assign users from the Contoso East division access to Microsoft SharePoint Online sites in the Contoso West tenant. The solution must not require additional Microsoft 365 licenses. What should you do?
Configure Azure AD Application Proxy in the Contoso West tenant.
Invite the Contoso East users as guests in the Contoso West tenant.
Deploy a second Azure AD Connect server to Contoso East and configure the server to sync the Contoso East Active Directory forest to the Contoso West tenant.
Configure the existing Azure AD Connect server in Contoso East to sync the Contoso East Active Directory forest to the Contoso West tenant.
Question 25
You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. You have an administrative unit named Au1. Group1, User2, and User3 are members of Au1. User5 is assigned the User administrator role for Au1. For which users can User5 reset passwords?