SC-300 Free Practice Test

- (Exam Topic 1)
You need to track application access assignments by using Identity Governance. The solution must meet the delegation requirements.
What should you do first?

1. A. Modify the User consent settings for the enterprise applications.
2. B. Create a catalog.
3. C. Create a program.
4. D. Modify the Admin consent requests settings for the enterprise applications.

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-overview

- (Exam Topic 4)
You configure a new Microsoft 36S tenant to use a default domain name of contosso.com.
You need to ensure that you can control access to Microsoft 365 resource-, by using conditional access policy.
What should you do first?

1. A. Disable the User consent settings.
2. B. Disable Security defaults.
3. C. Configure a multi-factor authentication (Ml A) registration policy1.
4. D. Configure password protection for Windows Server Active Directory.

Correct Answer: B

- (Exam Topic 4)
You have a Microsoft 365 tenant.
Sometimes, users use external, third-party applications that require limited access to the Microsoft 365 data of the respective user. The users register the applications in Azure Active Directory (Azure AD).
You need to receive an alert if a registered application gains read and write access to the users’ email. What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:
Reference:
https://docs.microsoft.com/en-us/cloud-app-security/app-permission-policy

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant.
You create an enterprise application collection named HR Apps that has the following settings:
• Applications: Appl. App?, App3
• Owners: Admin 1
• Users and groups: HRUsers
AH three apps have the following Properties settings:
• Enabled for users to sign in: Yes
• User assignment required: Yes
• Visible to users: Yes
Users report that when they go to the My Apps portal, they only sue App1 and App2-You need to ensure that the users can also see App3. What should you do from App3?
What should you do from App3?

1. A. From Users and groups, add HRUsers.
2. B. Prom Properties, change User assignment required to No.
3. C. From Permissions, review the User consent permissions.
4. D. From Single sign on, configure a sign-on method.

Correct Answer: A
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/assign-user-or-group-access-portal https://docs.microsoft.com/en-us/azure/active-directory/user-help/my-applications-portal-workspaces

- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant that contains cloud-based enterprise apps. You need to group related apps into categories in the My Apps portal.
What should you create?

1. A. tags
2. B. collections
3. C. naming policies
4. D. dynamic groups

Correct Answer: B
Reference:
https://support.microsoft.com/en-us/account-billing/customize-app-collections-in-the-my-apps-portal-2dae6b8a