Question 1

You create a new Microsoft 365 E5 tenant.

You need to ensure that when users connect to the Microsoft 365 portal from an anonymous IP

address, they are prompted to use multi-factor authentication (MFA).

What should you configure?

Options :

A : a sign-in risk policy

B : a user risk policy

C : an MFA registration policy

Answer: A

Question 2

You have an Azure subscription that contains a virtual machine named VM1. VM1 has the following configurations:

Private IP address: 172.16.1.5

Public IP address 10fl.143.16U5

System-assigned managed identity status: On

You install an app named App1 on VM1.

You need to configure App1 to request a managed identity app-only access token. Which IP address

should App1 use for the request?

Options :

A : 108.143.161.25

B : 127.0.0.1

C : 169.254.169.254

D : 172.1615

Answer: C

Question 3

Your network contains an on-premises Active Directory domain that syncs to an Azure Active

Directory (Azure AD) tenantUsers sign in to computers that run Windows 10 and are joined to the domain.

You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).

You need to configure the computers for Azure AD Seamless SSO.

What should you do?

Options :

A : Enable Enterprise State Roaming.

B : Configure Sign-in options.

C : Install the Azure AD Connect Authentication Agent.

D : Modify the Intranet Zone settings.

Answer: D

Question 4

You need to meet the planned changes and technical requirements for App1. What should you implement?

Options :

A : a policy set in Microsoft Endpoint Manager

B : an app configuratifon policy in Microsoft Endpoint Manager

C : an app registration in Azure AD

D : Azure AD Application Proxy

Answer: C

Question 5

Note: This question is part of a series of questions that present the same scenario. Each question in

the series contains a unique solution that might meet the stated goals. Some question sets might

have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have an Active Directory forest that syncs to a Microsoft Entra tenant.

You discover that when a user account is disabled in Active Directory, the disabled user can still

authenticate to Microsoft Entra for up to 30 minutes.

You need to ensure that when a user account is disabled in Active Directory, the user account is

immediately prevented from authenticating to Microsoft Entra.

Solution: You configure Microsoft Entra Password Protection.

Does this meet the goal?

Options :

A : Yes

B : No

Answer: B

Free SC-300 Mock Exam – Practice Online Confidently

Buying Options: