Microsoft Identity and Access Administrator (SC-300) - Microsoft Exam Questions

You have an Azure AD tenant You open the risk detections report.

Which risk detection type is classified as a user risk?

You need to configure the detection of multi-staged attacks to meet the monitoring requirements.

What should you do?

Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. The tenant contains the users shown in the following table.



Azure AD Connect is configured in Azure AD as shown in the following exhibit. All the users work remotely.



Connectivity from the on-premises domain to the internet is lost. Which users can sign in to Azure AD?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it as a result these questions will not appear in the review screen. You have a Microsoft 365 E5 subscription. You create a user named User1. You need to ensure that User1 can update the status of identity Secure Score improvement actions. Solution: You assign the User Administrator role to User1. Does this meet the goal?

You have a Microsoft 365 tenant. All users must use the Microsoft Authenticator app for multi-factor authentication (MFA) when accessing Microsoft 365 services. Some users report that they received an MFA prompt on their Microsoft Authenticator app without initiating a sign-in request. You need to block the users automatically when they report an MFA request that they did not Initiate. Solution: From the Azure portal, you configure the Fraud alert settings for multi-factor authentication (MFA). Does this meet the goal?