A company uses a service principal for an automated deployment pipeline. The service principal's client secret was found in a public code repository. The service principal has permissions to access a production resource group. The security team wants to remediate the risky workload identity while minimizing downtime for the deployment pipeline. What should you do?

Disable the service principal until the leak is investigated.

Ignore the leak because the service principal is not a user.

Rotate the client secret and update the pipeline to use the new secret.

Delete the service principal and recreate it with the same permissions.

Fabrikam has the following configuration: - User risk policy: Block access when user risk is high. - Sign-in risk policy: Require MFA when sign-in risk is medium or higher. - MFA registration campaign: Enabled for all users. - Conditional Access policy: Require MFA for all users when accessing the admin portal. A user who is not registered for MFA attempts to access the admin portal. The sign-in is flagged as 'Medium risk'. The user is blocked. You need to allow the user to access the admin portal while maintaining risk-based controls. What should you do?

Have the user register for MFA and then retry access.

Change the Conditional Access policy to not require MFA for the admin portal.

Add the user to an exclusion group in the sign-in risk policy.

Dismiss the sign-in risk in the Risky sign-ins report.

Wide World Importers wants to require MFA for all users but has a large number of users who have not registered. They want to minimize helpdesk calls. What should you configure?

Enable the MFA registration campaign with a deadline and require MFA after the deadline.

Disable MFA and use a different authentication method.

Require MFA only for users who have already registered.

Require MFA for all users immediately and provide helpdesk training.

Fabrikam has a user risk policy that requires a password change for medium-risk users. A user is flagged as 'Medium risk' and has not registered for MFA. The user is trying to sign in. What should you configure to ensure the user can complete the password change and register for MFA?

Block the user until an admin resets their password.

Require MFA registration as part of the user risk policy.

Dismiss the user risk and allow the user to sign in without changes.

Enable the MFA registration campaign and require MFA registration before the password change.

Microsoft Certified:Identity and Access Administrator Associate

Domain 2Objective 3

Manage Risk by Using Microsoft Entra ID Protection SC-300 Practice Questions (Page 1)

Part of the Implement authentication and access management domain, which accounts for 25–30% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

6concepts

25–30%of the exam

Questions 1–5

1expert · hard
A company uses a service principal for an automated deployment pipeline. The service principal's client secret was found in a public code repository. The service principal has permissions to access a production resource group. The security team wants to remediate the risky workload identity while minimizing downtime for the deployment pipeline. What should you do?
Select an answer first
2expert · hard
Fabrikam has the following configuration: - User risk policy: Block access when user risk is high. - Sign-in risk policy: Require MFA when sign-in risk is medium or higher. - MFA registration campaign: Enabled for all users. - Conditional Access policy: Require MFA for all users when accessing the admin portal. A user who is not registered for MFA attempts to access the admin portal. The sign-in is flagged as 'Medium risk'. The user is blocked. You need to allow the user to access the admin portal while maintaining risk-based controls. What should you do?
Select an answer first
3application · medium
Wide World Importers wants to require MFA for all users but has a large number of users who have not registered. They want to minimize helpdesk calls. What should you configure?
Select an answer first
4application · medium
Fabrikam has a user risk policy that requires a password change for medium-risk users. A user is flagged as 'Medium risk' and has not registered for MFA. The user is trying to sign in. What should you configure to ensure the user can complete the password change and register for MFA?
Select an answer first
5foundation · easy
A user's account has been flagged with a high user risk in Microsoft Entra ID Protection. You need to remediate the risk so the user can sign in without being blocked. Which action should you take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.

Manage Risk by Using Microsoft Entra ID Protection SC-300 Practice Questions (Page 1)

Questions 1–5

Wide World Importers wants to require MFA for all users but has a large number of users who have not registered. They want to minimize helpdesk calls. What should you configure?

Fabrikam has a user risk policy that requires a password change for medium-risk users. A user is flagged as 'Medium risk' and has not registered for MFA. The user is trying to sign in. What should you configure to ensure the user can complete the password change and register for MFA?

A user's account has been flagged with a high user risk in Microsoft Entra ID Protection. You need to remediate the risk so the user can sign in without being blocked. Which action should you take?

Keep studying — Implement authentication and access management