무료 온라인 액세스 Microsoft.SC-300-KR.v2026-06-08.q173 모의 시험 (Page 30)

덤프 신청
연락하기

홈페이지
모든 덤프 보기
업로드

인기 인증사:

Microsoft
Cisco
CompTIA
VMware
Oracle
Citrix
Juniper
SAP
Fortinet
전체보기

Microsoft
Cisco
CompTIA
VMware
Oracle
Citrix
Juniper
SAP
Fortinet

홈페이지
Microsoft
SC-300-KR
Microsoft.SC-300-KR.v2026-06-08.q173 모의시험 (Page 30)

««
«
…
25
26
27
28
29
30
31
32
33
34
…
»
»»

SC-300-KR 문제 141

Identity Governance를 사용하여 애플리케이션 액세스 할당을 추적해야 합니다. 솔루션은 위임 요구 사항을 충족해야 합니다.
가장 먼저 무엇을 해야 하나요?

A. 엔터프라이즈 애플리케이션에 대한 사용자 동의 설정을 수정합니다.

B. 카탈로그를 만듭니다.

C. 프로그램을 만듭니다.

D. 엔터프라이즈 애플리케이션에 대한 관리자 동의 요청 설정을 수정합니다.

정답: B

In Azure AD Identity Governance, application access granted through Entitlement management is organized around catalogs and access packages. The SC-300 study materials explain that "a catalog is a container for resources and access packages" and that you must add your enterprise applications (or the groups tied to those apps) to a catalog before you can build access packages that users can request. Creating the catalog first enables you to place only the required resources in scope and to delegate day-to-day ownership: "catalog owners can manage the resources and access packages within their catalog without being tenant-wide admins," satisfying the delegation requirement to use custom catalogs and least privilege. After the catalog exists, you create one or more access packages that include the application (or groups) and policies that control who can request, how they are approved, and for how long. Identity Governance then lets you track access package assignments and review who has the app over time. By contrast, programs are used to group and report on governance initiatives (for example, collections of access reviews) rather than to onboard application resources; and modifying user/admin consent settings affects app consent behavior, not the lifecycle tracking of assignments. Therefore, the correct first step to track application access assignments while meeting the delegation requirements is to create a catalog.

코멘트: *

성함: *

메일: *

확인코드: *

insert code

SC-300-KR 문제 142

Microsoft 365 테넌트와 adatum.com이라는 Active Directory 도메인이 있습니다.
Azure AD Connect는 Express 설정을 사용하여 배포합니다.
다음 요구 사항을 충족하도록 셀프 서비스 비밀번호 재설정(SSPR)을 구성해야 합니다.
사용자가 비밀번호를 재설정할 때 모바일 앱 알림에 응답하거나 미리 정의된 보안 질문 3개에 답하라는 메시지가 표시됩니다.
비밀번호가 재설정된 위치와 관계없이 테넌트와 도메인 간에 비밀번호를 동기화해야 합니다.
어떻게 해야 할까요? 답변하려면 답변 영역에서 적절한 선택지를 선택하세요.
참고사항: 정답을 선택할 때마다 1점이 부여됩니다.

정답:

Explanation:

According to the official Microsoft SC-300: Identity and Access Administrator Study Guide and Microsoft Learn documentation on "Implement and manage self-service password reset (SSPR)", configuration of SSPR requires settings in both Azure AD and Azure AD Connect.
* Azure AD Configuration (Password reset blade):In the Azure AD admin center, the Password reset blade includes three primary sections: Properties, Authentication methods, and Registration.
* The Authentication methods section determines which verification methods users can use when resetting their password.
* To meet the requirement that users must respond to a mobile app notification or answer three security questions, you must configure these under Authentication methods.Microsoft documentation explicitly states:
"In the Authentication methods section of the Password reset settings, choose which methods users can use, such as mobile app notification, email, or security questions."
* Azure AD Connect Configuration:When users reset their password in Azure AD or on-premises, synchronization must occur both ways to ensure passwords remain consistent.
* Enabling Password writeback in Azure AD Connect allows password changes made in Azure AD (such as through SSPR) to be written back to the on-premises Active Directory.The study guide confirms:
"Password writeback enables users who change or reset their password in Azure AD to have that new password written back to their on-premises Active Directory." Therefore, to meet both requirements - user verification via mobile app or security questions and password synchronization between cloud and on-premises - the correct configuration is:
* From the Password reset blade: Authentication methods
* From Azure AD Connect: Password writeback

코멘트: *

성함: *

메일: *

확인코드: *

insert code

SC-300-KR 문제 143

다음 표에 표시된 그룹이 포함된 Azure Active Directory(Azure AD) 테넌트가 있습니다.

어떤 그룹에 대해 액세스 검토를 생성할 수 있나요?

A. 그룹1만

B. 그룹1과 그룹4만

C. Group1과 Group2만

D. Group1, Group2, Group4, Group5만

E. 그룹1, 그룹2, 그룹3, 그룹4 및 그룹5

정답: D

The SC-300 official study guide and Microsoft Learn: Manage Access Reviews confirm that Access Reviews in Azure AD can target user-based groups, Azure AD roles, and enterprise applications. However, dynamic device groups are not supported for access reviews.

코멘트: *

성함: *

메일: *

확인코드: *

insert code

SC-300-KR 문제 144

Microsoft Entra 테넌트가 있습니다.
로그인 실패 횟수 10회로 제한하는 스마트 잠금 기능을 구현해야 합니다. Microsoft Entra 관리 센터에서 무엇을 설정해야 하나요?

A. 사용자 위험 정책

B. 암호 보호

C. 인증 강도

D. 로그인 위험 정책

정답: B

According to the Microsoft SC-300 Study Guide and Microsoft Learn module: "Implement and manage smart lockout and password protection" , Smart Lockout is a feature of Microsoft Entra Password Protection that helps prevent brute-force attacks by locking out accounts after repeated failed sign-in attempts.
The configuration for Smart Lockout includes two primary settings:
* Lockout threshold - the number of failed sign-ins before locking the account.
* Lockout duration - how long the account remains locked before another attempt is allowed.
These settings are managed under Password protection in the Entra admin center, not under user or sign-in risk policies (those are part of Identity Protection) or authentication strengths.
By configuring the lockout threshold to 10 failed sign-ins, you meet the requirement.

코멘트: *

성함: *

메일: *

확인코드: *

insert code

SC-300-KR 문제 145

다음 표에 나와 있는 리소스가 포함된 Azure 구독이 있습니다.

속성 기반 액세스 제어(ABAC)를 사용하여 리소스에 대한 권한을 부여해야 합니다.
어떤 리소스에 권한을 부여할 수 있나요?

A. Vault1

B. VM1

C. App1

D. storage 1

정답: D

According to Microsoft Learn: "Configure Attribute-Based Access Control (ABAC) for Azure resources", ABAC allows you to assign access permissions based on resource attributes and user attributes (claims).
Currently, ABAC is available for Azure Storage (Blob and Queue) and Azure Key Vault (limited preview for specific scenarios). However, the generally available and supported ABAC implementation as per SC-300 and Azure documentation is for Azure Storage accounts.
This means that you can use ABAC in storage1 to grant fine-grained access (for example, based on object tags or user department claims) while resources like VM1, App1, and Vault1 still rely on traditional RBAC (role-based access control).

코멘트: *

성함: *

메일: *

확인코드: *

insert code

««
«
…
25
26
27
28
29
30
31
32
33
34
…
»
»»

다른 버전: 460Microsoft.SC-300-KR.v2026-06-03.q151; 689Microsoft.SC-300-KR.v2026-04-21.q141; 804Microsoft.SC-300-KR.v2026-03-16.q211; 685Microsoft.SC-300-KR.v2026-03-03.q165; 803Microsoft.SC-300-KR.v2025-11-24.q159; 881Microsoft.SC-300-KR.v2025-02-28.q117

최근 업로드: 122WGU.Data-Driven-Decision-Making.v2026-06-17.q46; 132HP.HPE7-A05.v2026-06-17.q115; 107HP.HPE7-A02.v2026-06-17.q96; 112SAP.C_S4PM_2601.v2026-06-17.q38; 110Oracle.1Z0-1072-25.v2026-06-17.q18; 158VMware.6V0-22.25.v2026-06-16.q98; 150NetworkAppliance.NS0-901.v2026-06-16.q35; 145Cisco.300-220.v2026-06-16.q145; 135Huawei.H20-923_V1.0.v2026-06-16.q21; 161Google.Professional-Cloud-DevOps-Engineer.v2026-06-16.q142

[×]

PDF 파일 다운로드

메일 주소를 입력하시고 다운로드 하세요. Microsoft.SC-300-KR.v2026-06-08.q173 모의시험 시험자료를 다운 받으세요.

메일:

DMCA
업로드
문의하기
개인 정보 정책
이용약관

www.krdump.com 자료에는 Cisco 인증 시험의 실제 질문과 답변이 포함되어 있지 않습니다.

©2026 www.krdump.com

Web Analytics