Manage Risk by Using Microsoft Entra ID Protection SC-300 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company has enabled the sign-in risk policy to require MFA when sign-in risk is medium or higher. A user's sign-in was flagged as 'Low risk' but the user is accessing a highly sensitive application. You need to ensure that the sign-in is protected without changing the risk policy. What should you do?

   • ACreate a Conditional Access policy that requires MFA for the sensitive application.
   • BIncrease the sign-in risk policy threshold to low.
   • CBlock the user's sign-in until the risk level increases.
   • DManually mark the sign-in as risky in the Risky sign-ins report.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company uses a managed identity for an Azure function. The function's identity was flagged as 'Risky' in the Entra ID Protection workload identity report. You need to remediate the risky workload identity. What should you do?

   • AReview the managed identity's permissions and remove any excessive access.
   • BDelete the managed identity and recreate it.
   • CRotate the managed identity's client secret.
   • DDisable the managed identity.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A user reports that they received a prompt to complete multifactor authentication (MFA) because their sign-in was flagged as risky by Microsoft Entra ID Protection. Which risk type triggered this prompt?

   • AMFA registration risk
   • BUser risk
   • CSign-in risk
   • DIdentity risk
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   Contoso has a sign-in risk policy that blocks high-risk sign-ins. A user's sign-in is flagged as 'High risk' because of a new device. The user is a remote worker who frequently uses new devices. You need to allow the user to sign in while maintaining security. What should you do?

   • ADismiss the sign-in risk and allow the sign-in.
   • BInvestigate the sign-in event and confirm the user's identity, then dismiss the risk if it is a false positive.
   • CBlock the user's account until they contact the helpdesk.
   • DAdd the user's device to the trusted devices list.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   Fabrikam has enabled the sign-in risk policy to require MFA when sign-in risk is medium or higher. A user who has not yet registered for MFA is blocked from accessing a critical application because the sign-in was flagged as medium risk. You need to allow the user to access the application while still enforcing risk-based controls. What should you do?

   • ARequire the user to register for MFA and then retry sign-in.
   • BChange the sign-in risk policy to block access instead of requiring MFA.
   • CAdd the user to an exclusion group in the sign-in risk policy.
   • DDismiss the sign-in risk in the Risky sign-ins report.
   Reveal Solution Discussion Select an answer first