Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

SC-300 Microsoft Identity and Access Administrator

  • Microsoft
  • 5 free sample questions

About this exam

SC-300 is the Microsoft exam Microsoft Identity and Access Administrator. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
SC-300
Vendor
Microsoft
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for SC-300.

Question 1

You need to configure the MFA settings for users who connect from the Boston office. The solution must meet the authentication requirements and the access requirements. What should you configure

  1. Option A:
    named locations that have a private IP address range
  2. Option B:
    named locations that have a public IP address range
  3. Option C:
    trusted IPs that have a public IP address range
  4. Option D:
    trusted IPs that have a private IP address range
Show answer and explanation

Correct answer: B

Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition Location offer your country set, IP ranges MFA trusted IP and corporate network VPN gateway IP address: This is the public IP address of the VPN device for your on-premises network. The VPN device requires an IPv4 public IP address. Specify a valid public IP address for the VPN device to which you want to connect. It must be reachable by Azure Client Address space: List the IP address ranges that you want routed to the local on-premises network through this gateway. You can add multiple address space ranges. Make sure that the ranges you specify here do not overlap with ranges of other networks your virtual network connects to, or with the address ranges of the virtual network itself.

Question 2

You need to meet the authentication requirements for leaked credentials. What should you do?

  1. Option A:
    Enable federation with PingFederate in Azure AD Connect
  2. Option B:
    Configure Azure AD Password Protection.
  3. Option C:
    Enable password hash synchronization in Azure AD Connect.
  4. Option D:
    Configure an authentication method policy in Azure AD.
Show answer and explanation

Correct answer: C

"Configure the Azure AD Password Protection proxy service on:"
The relevant solution is:
✅ B. Configure Azure AD Password Protection
For Azure AD Password Protection:
  • The proxy service is installed on member servers, not on domain controllers.
  • The DC agent is installed on all domain controllers.
Therefore, the proxy service should be configured on:
Configure the Azure AD Password Protection proxy service on
SERVER1
SERVER2
DC1 should not host the proxy service (unless it is also being used as a member server, which is not the recommended deployment).
Answer: B. Configure Azure AD Password Protection
Proxy Service Servers: SERVER1 and SERVER2.

See all 5 free sample questions