Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
MICROSOFT

Microsoft Certified:Identity and Access Administrator Associate

SC-300Identity And Access Administrator Associate

The Microsoft Certified: Identity and Access Administrator Associate certification validates your ability to design, implement, and manage identity and access solutions using Microsoft Entra. It is aimed at professionals responsible for ensuring secure access and identity governance. Earning it demonstrates your expertise in applying Zero Trust principles and managing identities across applications and resources.

492 practice questions · Updated 2026-07-30

4Domains
16Objectives
143Concepts
492Questions

SC-300 Curriculum

Every domain, objective, and concept the SC-300 exam measures.

  1. Built-in Microsoft Entra Roles
  2. Custom Microsoft Entra Roles
  3. Administrative Units Usage
  4. Configure Administrative Units
  5. Evaluate Effective Permissions
  6. Manage Domains in Microsoft Entra ID
  7. Manage Domains in Microsoft 365
  8. Company Branding Settings
  9. Tenant Properties Configuration
  10. User Settings Configuration
  11. Group Settings Configuration
  12. Device Settings Configuration
  1. User Creation
  2. User Configuration
  3. User Management
  4. Group Creation
  5. Group Configuration
  6. Group Management
  7. Custom Security Attributes
  8. Bulk Operations Automation
  9. Device Join Management
  10. Device Registration Management
  11. License Assignment
  12. License Modification
  13. License Reporting
  1. External Collaboration Settings
  2. Invite External Users Individually
  3. Bulk Invite External Users
  4. Manage External User Accounts
  5. Cross-Tenant Access Settings
  6. Cross-Tenant Synchronization
  7. Configure External Identity Providers

Implement and manage hybrid identity

7 concepts · 19 questions
  1. Microsoft Entra Connect Sync Configuration
  2. Microsoft Entra Cloud Sync Setup
  3. Password Hash Synchronization Implementation
  4. Pass-Through Authentication Configuration
  5. Seamless Single Sign-On Setup
  6. AD FS Migration Planning
  7. Microsoft Entra Connect Health Monitoring

  1. Authentication Planning
  2. Certificate-Based Authentication
  3. Temporary Access Pass
  4. OAuth 2.0 Tokens
  5. Microsoft Authenticator
  6. Passkeys (FIDO2)
  7. Tenant-Wide MFA Settings
  8. Self-Service Password Reset (SSPR)
  9. Windows Hello for Business
  10. Account Disabling and Session Revocation
  11. Microsoft Entra Password Protection
  12. Microsoft Entra Kerberos Authentication
  1. Conditional Access Policy Planning
  2. Policy Assignment Implementation
  3. Policy Control Implementation
  4. Policy Testing and Troubleshooting
  5. Session Management Implementation
  6. Device-Enforced Restrictions
  7. Continuous Access Evaluation
  8. Authentication Context Configuration
  9. Protected Actions Implementation
  10. Template-Based Policy Creation
  1. User Risk Management
  2. Sign-In Risk Management
  3. Multifactor Authentication Registration
  4. Risky User Monitoring
  5. Risky Sign-In Monitoring
  6. Risky Workload Identity Management

Implement Global Secure Access

7 concepts · 33 questions
  1. Global Secure Access Clients Deployment
  2. Private Access Configuration
  3. Private Access Management
  4. Internet Access Deployment
  5. Internet Access Management
  6. Microsoft 365 Internet Access Deployment
  7. Microsoft 365 Internet Access Management

  1. Identify Application Identities
  2. Create Managed Identities
  3. Assign Managed Identity to Resource
  4. Access Resources with Managed Identity
  1. Enterprise Application Settings
  2. Microsoft Entra Role Assignment
  3. On-Premises App Integration
  4. SaaS App Integration
  5. User and Group Management
  6. User and Admin Consent Configuration
  7. Application Collections Management

Plan and implement app registrations

9 concepts · 37 questions
  1. Understand App Registration
  2. Plan App Registration Strategy
  3. Create App Registration
  4. Configure Redirect URIs
  5. Set Up Client Secrets and Certificates
  6. Assign API Permissions
  7. Consent Framework
  8. Create App Roles
  9. Assign App Roles
  1. Cloud Discovery Configuration
  2. Cloud Discovery Analysis
  3. Connected Apps Configuration
  4. Application-Enforced Restrictions Implementation
  5. Conditional Access App Control Configuration
  6. Access Policies Creation
  7. Session Policies Creation
  8. OAuth App Policies Management
  9. Cloud App Catalog Management

  1. Entitlement Planning
  2. Catalog Creation
  3. Catalog Configuration
  4. Access Package Creation
  5. Access Package Configuration
  6. Access Request Management
  7. Terms of Use Implementation
  8. Terms of Use Management
  9. External User Lifecycle Management
  10. Connected Organization Configuration
  11. Connected Organization Management
  1. Understand Access Review Purpose
  2. Identify Access Review Scenarios
  3. Define Access Review Scope
  4. Access Review Scheduling
  5. Create Access Reviews
  6. Configure Access Review Settings
  7. Automate Access Reviews
  8. Monitor Access Review Progress
  9. Analyze Access Review Results
  10. Respond to Access Review Outcomes
  11. Document Access Review Processes

Plan and implement privileged access

11 concepts · 35 questions
  1. Microsoft Entra Roles Planning
  2. Microsoft Entra Roles Management
  3. Azure Resources Planning in PIM
  4. Azure Resources Management in PIM
  5. PIM for Groups Configuration
  6. PIM Request Process Management
  7. PIM Approval Process Management
  8. PIM Audit History Analysis
  9. PIM Reports Analysis
  10. Break-Glass Accounts Creation
  11. Break-Glass Accounts Management
  1. Sign-in Logs Analysis
  2. Audit Logs Analysis
  3. Provisioning Logs Analysis
  4. Configure Diagnostic Settings
  5. KQL Queries in Log Analytics
  6. Workbooks and Reporting
  7. Identity Secure Score Monitoring
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.

Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for SC-300, so none is invented.