SC-300 Practice Test 2 — 10 Questions

Question 1

You want to allow external users to sign in to your Microsoft Entra tenant using their Google accounts. Which TWO steps are required to configure Google federation?

Accepted Answer

Create a Google Cloud Platform project and obtain a Client ID and Client Secret.. Federating with social identity providers like Google improves the onboarding experience for B2B guests by allowing them to use familiar credentials. This reduces the need for them to manage a separate password for your tenant and leverages the security features of their existing identity provider, such as Google's own multi-factor authentication.

Answer

Enable the 'Email one-time passcode for guests' setting in the Entra admin center.

Answer

Assign a Microsoft Entra ID P2 license to every Google user who will sign in.

Answer

Configure a custom domain in Entra ID that matches the @gmail.com suffix.

Question 2

You are assigning a Microsoft 365 Business Premium license to a new user. The assignment fails with an error stating that the usage location is not set. Why is the 'Usage Location' attribute mandatory for license assignment?

Accepted Answer

Microsoft uses it to comply with local regulations and verify service availability in the user's region.. The 'Usage Location' attribute is not just a metadata field; it has legal and functional implications for Microsoft services. Microsoft must comply with local laws and regulations regarding data residency and service availability, which varies by country. Setting this correctly is a prerequisite for any license-based resource provisioning in Entra ID.

Answer

It determines the physical data center where the user's mailbox will be hosted.

Answer

It is used to automatically set the user's time zone and language in Outlook.

Answer

It is required for the user to be able to register for Multi-Factor Authentication.

Question 3

You need to configure B2B collaboration settings in Microsoft Entra ID to restrict external access. The solution must meet the following requirements:
1. Allow users to invite guests only from the domain 'fabrikam.com'.
2. Prevent guests from searching the directory for other users.
Which TWO settings should you configure?

Accepted Answer

Set External user read permissions to 'Guest users are limited to properties and memberships of their own directory objects'.. B2B collaboration settings provide granular control over how external users interact with your directory. Restricting invitations to specific domains is a common security requirement for sensitive environments. Similarly, limiting directory search capabilities for guests prevents data harvesting and ensures that external users can only interact with the specific people or resources they have been assigned.

Answer

Configure a Cross-tenant access policy for 'fabrikam.com' with B2B direct connect enabled.

Answer

Enable the 'Member users and users assigned to specific admin roles can invite guest users' setting.

Answer

Create a Conditional Access policy that blocks all external users except those from 'fabrikam.com'.

Question 4

You accidentally delete a cloud-only user account from the Microsoft Entra admin center. You need to restore the user and their associated group memberships. Within how many days must you perform the restoration before the user is permanently deleted?

Accepted Answer

30 days. Microsoft Entra ID implements a 'soft-delete' state for user accounts to protect against accidental data loss. During this period, the user object and most of its properties, including group memberships, can be fully recovered. Once this window expires, the data is purged from the system and cannot be retrieved.

Answer

14 days

Answer

60 days

Answer

90 days

Question 5

You need to perform a bulk invite of 50 guest users from a partner company using a CSV file in the Microsoft Entra admin center. Which column is mandatory in the CSV file for the bulk invitation process to succeed?

Accepted Answer

Email address to invite. Bulk operations are a key skill for identity administrators to handle large-scale changes efficiently. For B2B invitations, Entra ID requires specific identifiers to send the invitation emails and create the guest user objects. Knowing the required schema for these CSV files prevents upload errors and ensures a smooth onboarding experience for external partners.

Answer

First name

Answer

Redirect URL

Answer

User principal name

Question 6

You are managing a hybrid environment with Microsoft Entra Connect. You need to ensure that when a user's account is disabled in the on-premises Active Directory, the corresponding cloud account is also disabled immediately. What is the default behavior of Entra Connect regarding account status?

Accepted Answer

The cloud account is disabled during the next delta synchronization cycle.. Synchronizing account status is a critical security control. If an employee leaves the company, their access must be revoked across all systems. Microsoft Entra Connect handles this by mapping the 'userAccountControl' attribute from on-premises to the 'accountEnabled' property in the cloud, ensuring that the cloud identity reflects the local administrative state.

Answer

The cloud account remains enabled until the administrator manually runs a full synchronization.

Answer

The cloud account is immediately disabled via a real-time webhook call to Entra ID.

Answer

The cloud account is deleted rather than disabled to save on license costs.

Question 7

Your company uses Microsoft Entra Connect to sync identities from an on-premises Active Directory. You have a user named 'User1' who exists in both environments, but they are not currently linked. You need to perform a 'soft-match' to link them. Which attribute must be identical on both the on-premises and cloud objects?

Accepted Answer

proxyAddresses. Soft-matching is a critical process for merging existing cloud identities with on-premises accounts during the initial setup of directory synchronization. It prevents the creation of duplicate accounts and ensures that users maintain their existing cloud data and permissions while transitioning to a synchronized identity model managed from the local Active Directory environment.

Answer

ObjectGUID

Answer

DisplayName

Answer

EmployeeID