SC-300-KR 무료 덤프문제 온라인 액세스

Azure Active Directory(Azure AD) 테넌트에서 보안 기본 설정이 비활성화되어 있습니다.
다음 그림과 같이 조건부 액세스 정책을 생성하고 있습니다.

아래 그림에 제시된 정보를 바탕으로 각 문장을 완성하는 답을 드롭다운 메뉴에서 선택하세요.
참고: 정답 하나당 1점입니다.

정답:

Explanation:

Reference:
According to the Microsoft Identity and Access Administrator (SC-300) Study Guide and Microsoft Learn module "Implement Conditional Access policies" , a Conditional Access policy in Azure AD determines how access decisions are enforced based on user, application, and session signals.
When the goal is to prompt for MFA , this control is found in the Grant settings section of the policy configuration. The Grant control allows administrators to require specific conditions such as multi-factor authentication, device compliance, hybrid Azure AD join, or app protection. The official Microsoft documentation specifies:
"To require users to perform multi-factor authentication, navigate to the 'Grant' section of your Conditional Access policy and select 'Grant access' # 'Require multi-factor authentication'." Therefore, the first answer (for requiring MFA) corresponds to Grant settings .
On the other hand, if you want to ensure that a user is reauthenticated periodically - for example, every eight hours - this is configured under the Session settings section. Session controls define user experience within the session after access is granted. Microsoft documentation states:
"Session controls enable limiting user sessions, such as enforcing reauthentication frequency, requiring sign- in every X hours, or restricting persistent browser sessions." Hence, to prompt User1 to authenticate every eight hours, the appropriate configuration is within Session settings .

최근 발생한 보안 사고 문제를 해결해야 합니다.
각 인시던트에 대해 어떤 설정을 해야 할까요? 답을 찾으려면 적절한 정책 유형을 해당 인시던트로 드래그하세요. 각 정책 유형은 한 번, 여러 번 또는 전혀 사용되지 않을 수 있습니다. 콘텐츠를 보려면 창 사이의 분할 막대를 드래그하거나 스크롤해야 할 수 있습니다.
참고: 정답 하나당 1점입니다.

정답:

Explanation:

According to the Microsoft SC-300: Identity and Access Administrator official study guide and the Microsoft Learn "Implement and manage Azure AD Identity Protection" module, Azure AD Identity Protection detects two primary categories of risks: user risks and sign-in risks.
* User Risk Policy: A user risk represents the probability that a user ' s identity (credentials) has been compromised. Examples of user risk signals include leaked credentials , unusual sign-ins from different geographies , or sign-ins from infected devices . The Exam Ref SC-300 specifically lists "leaked credentials detected on the dark web or other compromised repositories" as the main trigger for a user risk policy. Such a policy can automatically force password change or enforce MFA to remediate the threat.
* Sign-in Risk Policy: A sign-in risk reflects the likelihood that a specific authentication attempt is not performed by the legitimate user. Sign-in risk is based on context, such as sign-ins from suspicious browsers , anonymous IP addresses (like TOR networks) , or impossible travel scenarios . The SC-300 documentation highlights these examples as conditions best handled with a sign-in risk policy, where conditional access can block or require MFA for the risky sign-in attempt.
Therefore:
* Leaked credentials are addressed through a User Risk Policy, since the account itself is compromised.
* Sign-ins from suspicious browsers and access from anonymous IP addresses are handled through Sign- in Risk Policies, as they relate to risky sessions rather than compromised identities.

핫스팟
contoso.com이라는 Azure Active Directory(Azure AD) 테넌트가 있고, 해당 테넌트에는 User1이라는 사용자가 있습니다.
User1은 다음 표에 나와 있는 장치를 보유하고 있습니다.
2020년 11월 5일, 귀하는 contoso.com에 다음과 같은 설정으로 이용 약관을 생성하고 시행합니다.
이름: Terms1
표시 이름: Contoso 이용 약관
사용자가 이용 약관을 펼치도록 요구: 켜짐
모든 기기에서 사용자의 동의를 요구: 켜기
동의 만료: 켜짐
유효기간 만료일: 2020년 12월 10일
빈도: 월간
2020년 11월 15일, User1은 Device3에서 Terms1에 동의합니다.
다음 각 문장에 대해, 문장이 사실이면 '예'를 선택하고, 그렇지 않으면 '아니요'를 선택하십시오.
참고: 정답 하나당 1점입니다.

인증 요구 사항을 충족하려면 비밀번호 제한을 구현해야 합니다.
DC1에 Azure AD 암호 보호 DC 에이전트를 설치합니다.
다음으로 무엇을 해야 할까요? 답변하려면 답변란에서 적절한 옵션을 선택하세요.
참고: 정답 하나당 1점입니다.

정답:

Explanation:
Server1
On DC1
Azure AD Password Protection has two components: the DC agent (installed on domain controllers) and the proxy service (installed on one or more member servers). The SC-300 materials and Microsoft Identity Governance guidance explain that the proxy service is required when domain controllers do not have direct internet access. The proxy retrieves the password protection policy and custom banned password list from Azure AD over outbound HTTPS and makes it available to DC agents. The documentation further states that you should deploy at least one proxy per forest and two for high availability, and that domain controllers do not need internet connectivity when a proxy is deployed. In this scenario, DCs are explicitly blocked from internet access, so the proxy must be placed on member servers. Both SERVER1 (Application Proxy connector) and SERVER2 (Azure AD Connect) are domain-joined member servers with internet connectivity and are appropriate locations for the AzureADPasswordProtectionProxy service; selecting both provides the recommended redundancy. The custom banned password list is configured in Azure AD at the tenant level (as part of Azure AD Password Protection settings), not on individual servers. Once configured, the policy and list are downloaded by the proxy and enforced by the DC agent during password set or change operations, satisfying the requirement to implement a banned password list for the litware.com forest.

A Datum에서 신규 사용자에게 라이선스를 할당해야 합니다. 솔루션은 기술 요구 사항을 충족해야 합니다.
어떤 유형의 객체를 생성해야 할까요?

• A.동적 사용자 보안 그룹
• B.유통 그룹
• C.행정 단위
• D.당신 안에