A company wants to monitor user sessions in a custom web app that is not integrated with Defender for Cloud Apps via API. They have already configured Conditional Access app control for the app. What should they do to monitor the sessions?

Create an access policy that blocks the custom app.

Create a session policy that targets the custom app and set the control to 'Monitor'.

Enable Cloud Discovery for the custom app.

Connect the custom app via its API to enable monitoring.

A company discovers that a third-party OAuth app has been granted high permissions to Microsoft 365 data. They want to prevent this app from accessing data in the future while allowing users to continue using other OAuth apps. What should they do?

Disable the Microsoft 365 connector in Defender for Cloud Apps.

Create an access policy that blocks all OAuth apps.

Remove the user accounts that granted the permissions.

Create an OAuth app policy that revokes the permissions of the specific app.

A company is deploying Cloud Discovery in a multi-geography environment. They want to ensure that discovery data is collected from all locations and that the data is attributed correctly. What is the best way to configure this?

Use only API-based monitoring for all apps.

Disable Cloud Discovery in some locations to reduce cost.

Deploy collectors in each location and configure IP-to-user mapping for each location.

Deploy a single collector in the central location and rely on VPN traffic.

Contoso wants to monitor user activities in Salesforce and enforce access policies for sensitive data. They have already connected Salesforce to Microsoft Defender for Cloud Apps. What should they configure next to ensure that policies can be applied to Salesforce activities?

Add Salesforce to the Cloud app catalog as a custom app.

Configure a session policy to block all downloads from Salesforce.

Create an access policy that targets the Salesforce app and specifies conditions such as user group and data sensitivity.

Enable the Cloud Discovery collector for Salesforce traffic.

What is the primary purpose of a session policy in Microsoft Defender for Cloud Apps?

To block access to an app entirely

To monitor and control user actions within a cloud app session

Microsoft Certified:Identity and Access Administrator Associate

Domain 3Objective 4

Manage and Monitor App Access by Using Microsoft Defender for Cloud Apps SC-300 Practice Questions (Page 3)

Part of the Plan and implement workload identities domain, which accounts for 20–25% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

20–25%of the exam

Questions 11–15

11application · medium
A company wants to monitor user sessions in a custom web app that is not integrated with Defender for Cloud Apps via API. They have already configured Conditional Access app control for the app. What should they do to monitor the sessions?
Select an answer first
12application · medium
A company discovers that a third-party OAuth app has been granted high permissions to Microsoft 365 data. They want to prevent this app from accessing data in the future while allowing users to continue using other OAuth apps. What should they do?
Select an answer first
13expert · hard
A company is deploying Cloud Discovery in a multi-geography environment. They want to ensure that discovery data is collected from all locations and that the data is attributed correctly. What is the best way to configure this?
Select an answer first
14application · medium
Contoso wants to monitor user activities in Salesforce and enforce access policies for sensitive data. They have already connected Salesforce to Microsoft Defender for Cloud Apps. What should they configure next to ensure that policies can be applied to Salesforce activities?
Select an answer first
15foundation · medium
What is the primary purpose of a session policy in Microsoft Defender for Cloud Apps?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.