SC-300 무료 덤프문제 온라인 액세스

You have a Microsoft 365 tenant.
All users have mobile phones and laptops.
The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity.
While working from the remote locations, the users connect their laptop to a wired network that has internet access.
You plan to implement multi-factor authentication (MFA).
Which MFA authentication method can the users use from the remote location?

• A.security questions
• B.voice
• C.an app password
• D.a notification through the Microsoft Authenticator app

You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2 and the users shown in the following table.

Group2 is a member of Group1.
You configure cross-tenant synchronization with a partner organization named fabrikam.com by using the following configurations:
* Provisioning status: On
* Users and groups: Group 1
* Prevent accidental deletion: 500
* Scope: Sync only assigned users and groups
* Scoping filter Department EQUALS Marketing
From the Cross-tenant synchronization settings, you set Provisioning Mode to Automatic. For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

정답:

Explanation:

You have a Microsoft Entra tenant that contains a user named User1.
You have an Azure subscription named Sub1. User1 is assigned the Owner role for Sub1.
You need to ensure that User1 can onboard Sub1 to Microsoft Entra Permissions Management The solution must follow the principle of least pri vilege.
Which role should you assign for Sub1, and which role should you assign to User1 for the tenant? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

정답:

Explanation:

According to the Microsoft Identity and Access Administrator (SC-300) Study Guide and official Microsoft Learn documentation ("Onboard Azure subscriptions to Microsoft Entra Permissions Management"), onboarding an Azure subscription to Microsoft Entra Permissions Management (EPM) requires a combination of Azure RBAC and Entra role permissions.
Step 1 - Azure (Sub1) Scope At the subscription level, the person onboarding must be able to grant the Permissions Management service principal access to the subscription. This requires "Microsoft.Authorization
/*/Write" permissions, which are included in the User Access Administrator and Owner roles.
However, applying the principle of least privilege, Microsoft recommends User Access Administrator rather than Owner because the Owner role includes full management rights to all resources, which exceeds what's needed for onboarding. The User Access Administrator role allows assigning roles and permissions but not managing resource content.
"Assign the User Access Administrator role at the subscription level to grant permissions needed to onboard into Permissions Management while following least-privilege principles." (Reference: SC-300 Exam Guide, Module "Implement and manage Microsoft Entra Permissions Management.") Step 2 - Microsoft Entra (Tenant) Scope At the tenant level, onboarding actions (such as connecting the subscription, managing connectors, and configuring data ingestion) require a directory role that grants access to EPM features. Microsoft documentation specifies that the Permissions Management Administrator role provides this exact access.
"The Permissions Management Administrator role is required in the Entra tena nt to configure connectors and manage onboarded cloud environments." The Global Administrator or Security Administrator could perform this task but would violate the least- privilege requirement since their permissions are far broader.
Final Selection: Sco pe
Role
Explanation:
Sub1
User Access Administrator
Allows assigning required permissions to onboard subscription
Tenant
Permissions Management Administrator
Provides the necessary rights to onboard and manage Permissions Management

You have an Azure AD tenant that c ontains a user named User1. User1 is assigned the User Administrator role.
You need to configure External collaboration settings for the tenant to meet the following requirements: |
*Guest users must be prevented from querying staff email addresses.
*Guest users must be able to access the tenant only if they are invited by User1.
Which three settings should you configure? To answer, select the appropriate settings in the answer area.

정답:

Explanation:
According to the Microsoft SC-300 Study Guide, Exam Ref SC-300, and Microsoft Entra External Collaboration (B2B) documentation, the configuration of External collaboration settings in Azure AD determines how guest users can access directory data and who can invite them into the tenant.
Let's analyze each requirement in context:
Requirement 1: "Guest users must be prevented from querying staff email addresses." To achieve this, Azure AD provides the setting Guest user access restrictions, which defines what a guest can see in the directory. The most restrictive setting ensures that guest users can only see their own profile details and no other users or groups.
# Therefore, select:
"Guest user access is restricted to properties and memberships of their own directory objects (most restrictive)." This prevents guests from discovering internal directory data such as email addresses of staff members or group memberships.
Requirement 2: "Guest users must be able to access the tenant only if they are invited by User1." User1 has the User Administrator role. This role is included among the "specific admin roles" allowed to invite guest users when the setting is configured appropriately.
To meet the requirement that only User1 (or other admins) can invite guests, you must configure:
# "Only users assigned to specific admin roles can invite guest users." This restricts invitation privileges to admin roles (such as Global Administrator, User Administrator, etc.) and prevents ordinary users or guests from inviting others.
Requirement 3: "Guests should not be able to self-enroll."
Azure AD B2B allows self-service sign-up through user flows (Identity Experience Framework). Enabling this feature would let external users sign up themselves - which violates the condition that guests must be invited by User1 only.
# Therefore, set Enable guest self-service sign-up via user flows = No.
Final Configuration Summary: Setting
Value
Guest user access restrictions
Guest user access is restricted to properties and memberships of their own directory objects (most restrictive) Guest invite restrictions Only users assigned to specific admin roles can invite guest users Enable guest self-service sign-up via user flows No
# Microsoft Official Documentation Reference (SC-300 Content):
"To prevent guests from seeing other users in the directory, configure guest user access restrictions to 'most restrictive.' To control who can invite guests, use the setting that limits invitations to users with admin roles.
To disallow self-service guest access, disable user flows for external sign-up."

You have a Microsoft 365 tenant.
The Azure Active Directory (Azure AD) tenant contains the groups shown in the following table.

In Azure AD. you add a new enterprise application named Appl. Which groups can you assign to App1?

• A.Group1 and Group4
• B.Group2 only
• C.Group1 only
• D.Group3 only
• E.Group1 and Group2 only