Your organization wants to protect the ability to create or modify Conditional Access policies. You need to ensure that only users with a phishing-resistant authentication method can perform these actions. You also want to avoid requiring MFA for all administrative actions. What should you implement?

Use authentication context to protect the policy management action.

Enable security defaults to require MFA for all administrators.

Create a protected action for Conditional Access policy management and a Conditional Access policy that requires phishing-resistant MFA for that action.

Create a Conditional Access policy that requires phishing-resistant MFA for the Conditional Access administrator role.

Which of the following is an example of a protected action in Microsoft Entra?

Signing in to Outlook on the web

Changing a user's multi-factor authentication method

You have a Conditional Access policy that requires MFA for all users when accessing the Azure portal. The policy is in Report-only mode. A user reports that they were prompted for MFA when accessing the Azure portal, even though the policy is in Report-only. What is the most likely cause?

Another Conditional Access policy is enforcing MFA.

The user is a member of an excluded group.

The What If tool was used to simulate the sign-in.

The Report-only mode is not working correctly.

You need to apply a Conditional Access policy to all users in the Sales department. What is the most efficient way to assign the policy?

Create a dynamic group for Sales department users and assign the policy to that group

Use a device filter to include only Sales users

Assign the policy to the All Users option and exclude the Sales department

Select each user individually in the policy assignment

Microsoft Certified:Identity and Access Administrator Associate

Domain 2Objective 2

Plan, Implement, and Manage Microsoft Entra Conditional Access SC-300 Practice Questions (Page 2)

Part of the Implement authentication and access management domain, which accounts for 25–30% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

10concepts

25–30%of the exam

Questions 6–10

6expert · hard
Your organization wants to protect the ability to create or modify Conditional Access policies. You need to ensure that only users with a phishing-resistant authentication method can perform these actions. You also want to avoid requiring MFA for all administrative actions. What should you implement?
Select an answer first
7foundation · easy
Which of the following is an example of a protected action in Microsoft Entra?
Select an answer first
8foundation · easy
A Conditional Access policy requires users to perform multi-factor authentication when accessing a sensitive application. Which policy setting enforces this requirement?
Select an answer first
9expert · hard
You have a Conditional Access policy that requires MFA for all users when accessing the Azure portal. The policy is in Report-only mode. A user reports that they were prompted for MFA when accessing the Azure portal, even though the policy is in Report-only. What is the most likely cause?
Select an answer first
10foundation · easy
You need to apply a Conditional Access policy to all users in the Sales department. What is the most efficient way to assign the policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.

Plan, Implement, and Manage Microsoft Entra Conditional Access SC-300 Practice Questions (Page 2)

Questions 6–10

Which of the following is an example of a protected action in Microsoft Entra?

A Conditional Access policy requires users to perform multi-factor authentication when accessing a sensitive application. Which policy setting enforces this requirement?

You have a Conditional Access policy that requires MFA for all users when accessing the Azure portal. The policy is in Report-only mode. A user reports that they were prompted for MFA when accessing the Azure portal, even though the policy is in Report-only. What is the most likely cause?

You need to apply a Conditional Access policy to all users in the Sales department. What is the most efficient way to assign the policy?

Keep studying — Implement authentication and access management