Your organization wants to reduce the risk of unauthorized access from shared devices. You need to ensure that users are prompted to reauthenticate after 30 minutes of inactivity when accessing Microsoft 365 apps from unmanaged devices. What should you configure?

Access control: Block access for unmanaged devices.

Session control: Sign-in frequency of 30 minutes for the policy assigned to unmanaged devices.

Session control: Persistent browser session of 30 minutes.

Grant control: Require device to be marked as compliant.

An organization wants to implement a Conditional Access policy that requires multi-factor authentication for all users when accessing cloud apps from outside the corporate network. What should be considered first during the planning phase?

The session control that will enforce the policy

The impact on user productivity and the security risk being addressed

The specific cloud apps that will be included in the policy

The location condition configuration in the policy

Your organization has a custom line-of-business application that contains sensitive data. You want to require step-up authentication for a specific high-risk action within the application, but not for all access. You plan to use authentication context to achieve this. What should you configure?

Configure the application to require MFA using its own settings.

Use a protected action to require MFA for the application.

Create a Conditional Access policy that requires MFA for the application and all users.

Create an authentication context, assign it to the application's sensitive action, and create a Conditional Access policy that requires MFA when that context is requested.

An organization wants to keep users signed in for a longer period on trusted devices. Which session control should be configured in a Conditional Access policy?

Application enforced restrictions

Use Conditional Access app control

Microsoft Certified:Identity and Access Administrator Associate

Domain 2Objective 2

Plan, Implement, and Manage Microsoft Entra Conditional Access SC-300 Practice Questions (Page 1)

Part of the Implement authentication and access management domain, which accounts for 25–30% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

10concepts

25–30%of the exam

Questions 1–5

1application · medium
Your organization wants to reduce the risk of unauthorized access from shared devices. You need to ensure that users are prompted to reauthenticate after 30 minutes of inactivity when accessing Microsoft 365 apps from unmanaged devices. What should you configure?
Select an answer first
2foundation · easy
An organization wants to implement a Conditional Access policy that requires multi-factor authentication for all users when accessing cloud apps from outside the corporate network. What should be considered first during the planning phase?
Select an answer first
3application · medium
Your organization has a custom line-of-business application that contains sensitive data. You want to require step-up authentication for a specific high-risk action within the application, but not for all access. You plan to use authentication context to achieve this. What should you configure?
Select an answer first
4foundation · easy
An organization wants to keep users signed in for a longer period on trusted devices. Which session control should be configured in a Conditional Access policy?
Select an answer first
5foundation · easy
When troubleshooting a Conditional Access policy that is not applying as expected, which report should you review first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.