Fabrikam requires that all access to its internal HR application occur only from managed devices that are compliant. The company uses Microsoft Intune for device management. You need to configure a Conditional Access policy that enforces this requirement. What should you include in the policy?

Session control: Use app enforced restrictions, and assign the policy to the HR app only.

Grant control: Require device to be marked as compliant, and assign the policy to all users and the HR app.

Access control: Block access, and assign the policy to the HR app and all users.

Grant control: Require Microsoft Entra hybrid joined device, and assign the policy to all cloud apps.

What is the primary purpose of Continuous Access Evaluation (CAE) in Microsoft Entra?

To provide a one-time token for access

To replace multi-factor authentication

To enforce policies in real time after access has been granted

To evaluate policies only at the time of initial sign-in

An organization wants to immediately revoke access for a user who has been terminated, even if the user has an active session with a token that is valid for up to 60 minutes. They have enabled Continuous Access Evaluation (CAE) for the tenant. What should you do to ensure the user's access is revoked as soon as possible?

Disable the user's account in Microsoft Entra ID.

Change the user's password and require them to sign in again.

Remove the user from all Conditional Access policies.

Wait for the token to expire naturally after 60 minutes.

Your organization wants to implement a Conditional Access policy that requires MFA for all users, but you want to exclude break-glass accounts. You plan to use a template to create the policy. What is the best approach to ensure the break-glass accounts are excluded?

Create a custom policy from scratch and exclude the break-glass accounts.

Use the template and then create a separate policy to block break-glass accounts.

Use the template and then remove the break-glass accounts from the user assignment.

Create the policy from the template and then add the break-glass accounts to the exclusion list.

Microsoft Certified:Identity and Access Administrator Associate

Domain 2Objective 2

Plan, Implement, and Manage Microsoft Entra Conditional Access SC-300 Practice Questions (Page 5)

Part of the Implement authentication and access management domain, which accounts for 25–30% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

10concepts

25–30%of the exam

Questions 21–25

21application · medium
Fabrikam requires that all access to its internal HR application occur only from managed devices that are compliant. The company uses Microsoft Intune for device management. You need to configure a Conditional Access policy that enforces this requirement. What should you include in the policy?
Select an answer first
22foundation · easy
What is the primary purpose of Continuous Access Evaluation (CAE) in Microsoft Entra?
Select an answer first
23application · medium
An organization wants to immediately revoke access for a user who has been terminated, even if the user has an active session with a token that is valid for up to 60 minutes. They have enabled Continuous Access Evaluation (CAE) for the tenant. What should you do to ensure the user's access is revoked as soon as possible?
Select an answer first
24expert · hard
Your organization wants to implement a Conditional Access policy that requires MFA for all users, but you want to exclude break-glass accounts. You plan to use a template to create the policy. What is the best approach to ensure the break-glass accounts are excluded?
Select an answer first
25foundation · easy
Which feature in Microsoft Entra allows a user's access to be revoked immediately when their account is disabled?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.

Plan, Implement, and Manage Microsoft Entra Conditional Access SC-300 Practice Questions (Page 5)

Questions 21–25

Fabrikam requires that all access to its internal HR application occur only from managed devices that are compliant. The company uses Microsoft Intune for device management. You need to configure a Conditional Access policy that enforces this requirement. What should you include in the policy?

What is the primary purpose of Continuous Access Evaluation (CAE) in Microsoft Entra?

Your organization wants to implement a Conditional Access policy that requires MFA for all users, but you want to exclude break-glass accounts. You plan to use a template to create the policy. What is the best approach to ensure the break-glass accounts are excluded?

Which feature in Microsoft Entra allows a user's access to be revoked immediately when their account is disabled?

Keep studying — Implement authentication and access management