A company has enabled Internet Access for all users. The security team wants to block access to a specific category of websites, such as social media, for all users. Which configuration should you implement?

Create a web filtering policy that blocks the social media category and assign it to all users.

Create a Conditional Access policy that blocks access to social media sites.

Enable the Microsoft 365 traffic profile and block social media in that profile.

Configure the client to use a local proxy that blocks social media sites.

What is the primary purpose of deploying the Global Secure Access client on user devices?

To enable the device to route traffic through the Microsoft Entra Internet Access and Private Access services

To install a local firewall on the device to block malicious traffic

To synchronize the device's local user profiles with Microsoft Entra ID

To replace the need for a VPN client when accessing on-premises applications

Fabrikam is deploying Global Secure Access Private Access to allow remote users to access an internal HR application hosted on a legacy server. The application uses a hostname that is not publicly resolvable. Users will connect from unmanaged personal devices. Which configuration should you implement to ensure users can access the application securely?

Deploy the Global Secure Access client only on managed devices and require users to use a VPN for unmanaged devices.

Create a Private Access application for the HR app, assign it to the users, and configure the client to use the internal DNS suffix for resolution.

Configure a Conditional Access policy to block access from unmanaged devices.

Create a public DNS record for the HR app and configure the client to use the public hostname.

A company uses Global Secure Access Private Access to connect users to a private application. The application is accessed via a fully qualified domain name (FQDN) that resolves to a private IP address. Users report that they can access the application when on the corporate network but not when using Global Secure Access. What is the most likely cause?

The FQDN is not included in the Private Access traffic forwarding profile's application definition.

The users' devices do not have the correct DNS settings.

The users are not assigned the Global Secure Access client license.

The private IP address is not reachable from the Global Secure Access service.

Which component is required on a user's device to enable Global Secure Access traffic forwarding?

Microsoft Entra Connect sync agent

Azure AD Application Proxy connector

Microsoft Certified:Identity and Access Administrator Associate

Domain 2Objective 4

Implement Global Secure Access SC-300 Practice Questions (Page 4)

Part of the Implement authentication and access management domain, which accounts for 25–30% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

25–30%of the exam

Questions 16–20

16application · medium
A company has enabled Internet Access for all users. The security team wants to block access to a specific category of websites, such as social media, for all users. Which configuration should you implement?
Select an answer first
17foundation · easy
What is the primary purpose of deploying the Global Secure Access client on user devices?
Select an answer first
18application · medium
Fabrikam is deploying Global Secure Access Private Access to allow remote users to access an internal HR application hosted on a legacy server. The application uses a hostname that is not publicly resolvable. Users will connect from unmanaged personal devices. Which configuration should you implement to ensure users can access the application securely?
Select an answer first
19expert · hard
A company uses Global Secure Access Private Access to connect users to a private application. The application is accessed via a fully qualified domain name (FQDN) that resolves to a private IP address. Users report that they can access the application when on the corporate network but not when using Global Secure Access. What is the most likely cause?
Select an answer first
20foundation · easy
Which component is required on a user's device to enable Global Secure Access traffic forwarding?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.

Implement Global Secure Access SC-300 Practice Questions (Page 4)

Questions 16–20

A company has enabled Internet Access for all users. The security team wants to block access to a specific category of websites, such as social media, for all users. Which configuration should you implement?

What is the primary purpose of deploying the Global Secure Access client on user devices?

Which component is required on a user's device to enable Global Secure Access traffic forwarding?

Keep studying — Implement authentication and access management