SC-300 Free Practice Test

- (Exam Topic 4)
You have a Microsoft 365 tenant.
All users must use the Microsoft Authenticator app for multi-factor authentication (MFA) when accessing Microsoft 365 services.
Some users report that they received an MFA prompt on their Microsoft Authenticator app without initiating a sign-in request.
You need to block the users automatically when they report an MFA request that they did not Initiate. Solution: From the Azure portal, you configure the Account lockout settings for multi-factor authentication
(MFA).
Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: B
You need to configure the fraud alert settings. Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

- (Exam Topic 2)
You need to meet the planned changes and technical requirements for App1. What should you implement?

1. A. a policy set in Microsoft Endpoint Manager
2. B. an app configuration policy in Microsoft Endpoint Manager
3. C. an app registration in Azure AD
4. D. Azure AD Application Proxy

Correct Answer: C
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app

- (Exam Topic 3)
You need to implement the planned changes for litware.com. What should you configure?

1. A. Azure AD Connect cloud sync between the Azure AD tenant and litware.com
2. B. Azure AD Connect to include the litware.com domain
3. C. staging mode in Azure AD Connect for the litware.com domain

Correct Answer: C

- (Exam Topic 2)
You need to meet the technical requirements for the probability that user identifies were compromised. What should the users do first, and what should you configure? To answer, select the appropriate options in
the answer area.
NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory forest. The tenant-uses through authentication.
A corporate security policy states the following:
Domain controllers must never communicate directly to the internet.
Only required software must be- installed on servers.
The Active Directory domain contains the on-premises servers shown in the following table.

You need to ensure that users can authenticate to Azure AD if a server fails.
On which server should you install an additional pass-through authentication agent?

1. A. Server2
2. B. Server4
3. C. Server1
4. D. Server3

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta-quick-start