Plan, Implement, and Manage Microsoft Entra Conditional Access SC-300 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the recommended approach to test a Conditional Access policy before enabling it for all users?

   • AAsk users to test the policy and report any issues
   • BEnable the policy and monitor sign-in logs for issues
   • CUse the What If tool to simulate sign-ins and verify the policy applies as expected
   • DCreate a separate tenant to test the policy
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   Your organization has a Conditional Access policy that requires MFA for all users. You need to ensure that users on managed devices are not prompted for MFA as often as users on unmanaged devices. You want to set a sign-in frequency of 24 hours for managed devices and 1 hour for unmanaged devices. What should you do?

   • ACreate two separate Conditional Access policies, one for managed devices and one for unmanaged devices, each with the appropriate sign-in frequency.
   • BUse the session control 'Persistent browser session' to control the frequency.
   • CConfigure the sign-in frequency in the tenant-wide authentication methods policy.
   • DCreate a single policy with a sign-in frequency of 1 hour for all devices.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   When planning a Conditional Access policy for an organization that requires different levels of access based on user roles, which element should be defined first to ensure the policy aligns with business requirements?

   • AThe session controls to be enforced
   • BThe assignment of the policy to specific users and groups
   • CThe organizational requirements and security needs
   • DThe conditions under which the policy applies
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   Your organization requires that access to the corporate email app only be allowed from devices that are either Microsoft Entra hybrid joined or marked as compliant. You have a Conditional Access policy with the grant control 'Require device to be marked as compliant' and 'Require Microsoft Entra hybrid joined device' combined with OR. A user on a hybrid joined device that is not compliant is being denied access. What is the most likely cause?

   • AThe device is not registered in Microsoft Entra ID.
   • BThe policy is incorrectly using AND instead of OR.
   • CThe device compliance policy is not applied.
   • DThe user is not assigned to the policy.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of protected actions in Microsoft Entra?

   • ATo require additional authentication for sensitive administrative operations
   • BTo block all administrative actions
   • CTo protect user passwords from being changed
   • DTo encrypt all data in the tenant
   Reveal Solution Discussion Select an answer first