Free Microsoft SC-300 Practice Test Questions

Question 1

Note: This question is part of a series of questions that present the same scenario. Each question inthe series contains a unique solution that might meet the stated goals. Some question sets mighthave more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You have an Active Directory forest that syncs to a Microsoft Entra tenant.You discover that when a user account is disabled in Active Directory, the disabled user can stillauthenticate to Microsoft Entra for up to 30 minutes.You need to ensure that when a user account is disabled in Active Directory, the user account isimmediately prevented from authenticating to Microsoft Entra.Solution: You configure Microsoft Entra Password Protection.Does this meet the goal?

A : Yes

B : No

Answer: B

Question 2

You have a Microsoft 365 tenant.

In Azure Active Directory (Azure AD), you configure the terms of use.

You need to ensure that only users who accept the terms of use can access the resources in the tenant. Other users must be denied access.

What should you configure?

A : an access policy in Microsoft Cloud App Security.

B : Terms and conditions in Microsoft Endpoint Manager.

C : a conditional access policy in Azure AD

D : a compliance policy in Microsoft Endpoint Manager

Answer: C

Question 3

Note: This question is part of a series of questions that present the same scenario. Each question inthe series contains a unique solution that might meet the stated goals. Some question sets mighthave more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You have an Active Directory forest that syncs to a Microsoft Entra tenant.You discover that when a user account is disabled in Active Directory, the disabled user can stillauthenticate to Microsoft Entra for up to 30 minutes.You need to ensure that when a user account is disabled in Active Directory, the user account isimmediately prevented from authenticating to Microsoft Entra.Solution: You configure Microsoft Entra Password Protection.Does this meet the goal?

A : Yes

B : No

Answer: B

Question 4

You have a Microsoft 365 E5 subscription.You need to create a Microsoft Defender for Cloud Apps session policy.What should you do first?

A : From the Microsoft Defender for Cloud Apps portal, select User monitoring

B : From the Microsoft Defender for Cloud Apps portal, select App onboarding/maintenance

C : From the Azure Active Directory admin center, create a Conditional Access policy.

D : From the Microsoft Defender for Cloud Apps portal, create a continuous report.

Answer: C

Question 5

You need to configure the detection of multi-staged attacks to meet the monitoring requirements. What should you do?

A : Customize the Azure Sentinel rule logic.

B : Create a workbook.

C : Add Azure Sentinel data connectors.

D : Add an Azure Sentinel playbook

Answer: A

Free Microsoft SC-300 Exam Practice Questions 2026