Microsoft SC-300 Answers

You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are

assigned to individual users.

From the Groups blade in the Azure Active Directory admin center, you assign Microsoft 365

Enterprise E5

licenses to the users.

You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of

administrative effort.

What should you use? 

You have an Azure Active Directory (Azure AD) tenant that contains a user named SecAdmin1.

SecAdmin1 is

assigned the Security administrator role.

SecAdmin1 reports that she cannot reset passwords from the Azure AD Identity Protection portal.

You need to ensure that SecAdmin1 can manage passwords and invalidate sessions on behalf of

nonadministrative

users. The solution must use the principle of least privilege.

Which role should you assign to SecAdmin1? 

You have a Microsoft Entra tenant. You need to configure continuous access evaluation for app sign-ins and assign the configuration to users that are assigned the Application Administrator role. What should you configure? 

Note: This question is part of a series of questions that present the same scenario. Each question in

the series contains a unique solution that might meet the stated goals. Some question sets might

have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have an Active Directory forest that syncs to a Microsoft Entra tenant.

You discover that when a user account is disabled in Active Directory, the disabled user can still

authenticate to Microsoft Entra for up to 30 minutes.

You need to ensure that when a user account is disabled in Active Directory, the user account is

immediately prevented from authenticating to Microsoft Entra.

Solution: You configure Microsoft Entra Password Protection.

Does this meet the goal?

You have an Azure AD tenant that contains the users shown in the following table.

The tenant has the authentication methods shown in the following table.

Which users will sign in to cloud apps by matching a number shown in the app with a number shown on their phone?