Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
Microsoft logo

Microsoft Certified:Identity and Access Administrator Associate

Domain 2Objective 3

Manage Risk by Using Microsoft Entra ID Protection SC-300 Practice Questions (Page 2)

Part of the Implement authentication and access management domain, which accounts for 25–30% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here
5free pages
6concepts
25–30%of the exam

Questions 6–10

  1. 6foundation · easy

    You need to ensure that all users in your organization have registered for multifactor authentication (MFA). Which Microsoft Entra feature should you use to automatically prompt users to register?

    Select an answer first
  2. 7foundation · easy

    You need to investigate a specific sign-in event that was flagged as risky by Microsoft Entra ID Protection. Which report should you review?

    Select an answer first
  3. 8foundation · easy

    A user has been flagged as risky by Microsoft Entra ID Protection. You have investigated the risk and determined it was a false positive. What action should you take to resolve the risk?

    Select an answer first
  4. 9expert · hard

    Contoso has the following configuration: - User risk policy: Block access when user risk is medium or higher. - Sign-in risk policy: Require MFA when sign-in risk is medium or higher. - MFA registration campaign: Enabled for all users. - Conditional Access policy: Require MFA for all users when accessing the HR application. A user who has not registered for MFA attempts to access the HR application. The sign-in is flagged as 'Medium risk'. The user is blocked. You need to allow the user to access the HR application while maintaining the risk-based controls. What should you do?

    Select an answer first
  5. 10application · medium

    A company has enabled the sign-in risk policy to block access when sign-in risk is high. A user's sign-in was flagged as 'High risk' because of an anonymous IP address. The user is traveling and using a public Wi-Fi network. You need to allow the user to access the application while still maintaining risk-based controls. What should you do?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Keep studying — Implement authentication and access management

Full SC-300 curriculum →Every domain, objective & concept — with linked practiceSC-300 exam overview →Microsoft Certified: Identity and Access Administrator Associate

Other objectives in Implement authentication and access management

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.