Valid SC-300 Dumps shared by PassLeader for Helping Passing SC-300 Exam! PassLeader now offer the newest SC-300 VCE dumps and SC-300 PDF dumps, the PassLeader SC-300 exam questions have been updated and ANSWERS have been corrected, get the newest PassLeader SC-300 dumps with VCE and PDF here: https://www.passleader.com/sc-300.html (204 Q&As Dumps –> 231 Q&As Dumps –> 309 Q&As Dumps)
BTW, DOWNLOAD part of PassLeader SC-300 dumps from Cloud Storage: https://drive.google.com/drive/folders/1r63PflsI0kg5nq3xZf5SDNTwJZLMnGkF
NEW QUESTION 159
You have a Microsoft 365 E5 subscription. You need to create a Microsoft Defender for Cloud Apps session policy. What should you do first?
A. From the Microsoft Defender for Cloud Apps portal, select User monitoring.
B. From the Microsoft Defender for Cloud Apps portal, select App onboarding/maintenance.
C. From the Azure Active Directory admin center, create a Conditional Access policy.
D. From the Microsoft Defender for Cloud Apps portal, create a continuous report.
Answer: A
NEW QUESTION 160
You need to meet the authentication requirements for leaked credentials. What should you do?
A. Enable federation with PingFederate in Azure AD Connect.
B. Configure Azure AD Password Protection.
C. Enable password hash synchronization in Azure AD Connect.
D. Configure an authentication method policy in Azure AD.
Answer: C
Explanation:
https://docs.microsoft.com/en-us/azure/security/fundamentals/steps-secure-identity
NEW QUESTION 161
You have a Microsoft 365 tenant. All users have mobile phones and laptops. The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptop to a wired network that has internet access. You plan to implement multi-factor authentication (MFA). Which MFA authentication method can the users use from the remote location?
A. a notification through the Microsoft Authenticator app
B. email
C. security questions
D. a verification code from the Microsoft Authenticator app
Answer: D
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-authenticator-app#verification-code-from-mobile-app
NEW QUESTION 162
You use Azure Monitor to analyze Azure Active Directory (Azure AD) activity logs. You receive more than 100 email alerts each day for failed Azure AD user sign-in attempts. You need to ensure that a new security administrator receives the alerts instead of you.
Solution: From Azure AD, you create an assignment for the Insights administrator role.
Does this meet the goal?
A. Yes
B. No
Answer: B
NEW QUESTION 163
You use Azure Monitor to analyze Azure Active Directory (Azure AD) activity logs. You receive more than 100 email alerts each day for failed Azure AD user sign-in attempts. You need to ensure that a new security administrator receives the alerts instead of you.
Solution: From Azure AD, you modify the Diagnostics settings.
Does this meet the goal?
A. Yes
B. No
Answer: A
NEW QUESTION 164
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains an Azure AD enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as [email protected]. What should you do?
A. Run the New-AzureADMSInvitation cmdlet.
B. Configure the External collaboration settings.
C. Add a WS-Fed identity provider.
D. Implement Azure AD Connect.
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal
https://docs.microsoft.com/en-us/powershell/module/azuread/new-azureadmsinvitation?view=azureadps-2.0
NEW QUESTION 165
You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users. From the Groups blade in the Azure Active Directory admin center, you assign Microsoft 365 Enterprise E5 licenses to the users. You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort. What should you use?
A. the Administrative units blade in the Azure Active Directory admin center
B. the Set-AzureAdUser cmdlet
C. the Groups blade in the Azure Active Directory admin center
D. the Set-MsolUserLicense cmdlet
Answer: D
Explanation:
The Set-MsolUserLicense cmdlet updates the license assignment for a user. This can include adding a new license, removing a license, updating the license options, or any combination of these actions.
https://docs.microsoft.com/en-us/powershell/module/msonline/set-msoluserlicense?view=azureadps-1.0
NEW QUESTION 166
You have an Azure Active Directory (Azure AD) Azure AD tenant. You need to bulk create 25 new user accounts by uploading a template file. Which properties are required in the template file?
A. displayName, identityIssuer, usageLocation, and userType
B. accountEnabled, givenName, surname, and userPrincipalName
C. accountEnabled, displayName, userPrincipalName, and passwordProfile
D. accountEnabled, passwordProfile, usageLocation, and userPrincipalName
Answer: C
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/users-bulk-add
NEW QUESTION 167
You have an Azure Active Directory (Azure AD) tenant that contains cloud-based enterprise apps. You need to group related apps into categories in the My Apps portal. What should you create?
A. tags
B. collections
C. naming policies
D. dynamic groups
Answer: B
Explanation:
https://support.microsoft.com/en-us/account-billing/customize-app-collections-in-the-my-apps-portal-2dae6b8a-d8b0-4a16-9a5d-71ed4d6a6c1d
NEW QUESTION 168
You have an Azure Active Directory Premium P2 tenant. You create a Log Analytics workspace. You need to ensure that you can view Azure Active Directory (Azure AD) audit log information by using Azure Monitor. What should you do first?
A. Run the Set-AzureADTenantDetail cmdlet.
B. Create an Azure AD workbook.
C. Modify the Diagnostics settings for Azure AD.
D. Run the Get-AzureADAuditDirectoryLogs cmdlet.
Answer: C
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-integrate-activity-logs-with-log-analytics
NEW QUESTION 169
HotSpot
You have an Azure subscription. You need to create two custom roles named Role1 and Role2. The solution must meet the following requirements:
– Users that are assigned Role1 can create or delete instances of Azure Container Apps.
– Users that are assigned Role2 can enforce adaptive network hardening rules.
Which resource provider permissions are required for each role? (To answer, select the appropriate options in the answer area.)
Answer:
NEW QUESTION 170
Drag and Drop
You have a Microsoft 365 E5 subscription that contains two users named User1 and User2. You need to ensure that User1 can create access reviews for groups, and that User2 can review the history report for all the completed access reviews. The solution must use the principle of least privilege. Which role should you assign to each user? (To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)
Answer:
NEW QUESTION 171
……
Get the newest PassLeader SC-300 VCE dumps here: https://www.passleader.com/sc-300.html (204 Q&As Dumps –> 231 Q&As Dumps –> 309 Q&As Dumps)
And, DOWNLOAD the newest PassLeader SC-300 PDF dumps from Cloud Storage for free: https://drive.google.com/drive/folders/1r63PflsI0kg5nq3xZf5SDNTwJZLMnGkF