Microsoft Certified:Identity and Access Administrator Associate
Domain 2Objective 3
Manage Risk by Using Microsoft Entra ID Protection SC-300 Practice Questions (Page 5)
Part of the Implement authentication and access management domain, which accounts for 25–30% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)
24questions here
5free pages
6concepts
25–30%of the exam
Questions 21–24
- 21
A company uses a service principal for an automated backup job. The service principal's credentials were found in a public code repository. You need to remediate the risky workload identity and prevent further misuse. What should you do?
Select an answer first - 22
A user reports that they received a notification about a sign-in from a new device. The sign-in was flagged as 'Medium risk' in the Risky sign-ins report. The user confirms it was them. You need to remediate the sign-in risk without disrupting the user's access. What should you do?
Select an answer first - 23
A user reports that they received an MFA prompt for a sign-in they did not attempt. The sign-in log shows a 'Sign-in risk' event with a risk level of 'Medium'. The user is in a group that has a Conditional Access policy requiring MFA for medium-risk sign-ins. What should you do?
Select an answer first - 24
You want to encourage users to register for multifactor authentication (MFA) by showing them a registration prompt at sign-in. Which Microsoft Entra feature is designed to do this?
Select an answer first
Finished these 4 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to SC-300
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.