Plan, Implement, and Manage Microsoft Entra Conditional Access SC-300 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is an example of a grant control in a Conditional Access policy?

   • AUse application enforced restrictions
   • BBlock access
   • CSign-in frequency
   • DRequire multi-factor authentication
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of an authentication context in Conditional Access?

   • ATo allow applications to trigger Conditional Access policies based on specific actions
   • BTo store user authentication tokens
   • CTo replace the need for Conditional Access policies
   • DTo define the authentication method used
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An admin is creating a Conditional Access policy that targets a specific group of users. However, the admin notices that the policy is not applying to some users in the group. The users are direct members of the group. What is the most likely cause?

   • AThe policy is in Report-only mode, but the admin thinks it is enabled.
   • BThe users have not signed in recently.
   • CThe users are using a browser that does not support Conditional Access.
   • DThe users are also members of another group that is excluded from the policy.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   Your organization uses Continuous Access Evaluation (CAE) for Microsoft 365 apps. A user's account is disabled, but the user is still able to access a third-party app that does not support CAE. The token for the third-party app has a lifetime of 60 minutes. What is the most effective way to revoke the user's access to the third-party app immediately?

   • ARevoke the user's sessions from the Entra admin center.
   • BWait for the token to expire naturally.
   • CChange the user's password.
   • DCreate a Conditional Access policy that blocks the user.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A bank wants to require step-up authentication for a specific high-risk operation within its customer portal, such as transferring more than $10,000. The operation is part of the same web application. They want to use Conditional Access to enforce this requirement only for that operation, not for the entire application. What should you configure?

   • AUse a protected action to require MFA for the transfer operation.
   • BCreate a separate Conditional Access policy for each user who performs high-risk transfers.
   • CConfigure an authentication context for the high-risk operation and create a Conditional Access policy that targets that authentication context and requires MFA.
   • DCreate a Conditional Access policy that targets the web application and requires MFA for all users.
   Reveal Solution Discussion Select an answer first