Plan, Implement, and Manage Microsoft Entra Conditional Access SC-300 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   Your organization wants to secure the ability to manage Conditional Access policies in Microsoft Entra ID. You need to ensure that only users who have passed a phishing-resistant authentication method can modify Conditional Access policies. What should you implement?

   • ACreate a Conditional Access policy that requires phishing-resistant MFA for the 'Conditional Access administrator' role.
   • BAssign the Conditional Access administrator role only to users with phishing-resistant MFA registered.
   • CEnable security defaults to require MFA for all administrators.
   • DUse a protected action for 'Conditional Access policy management' and require phishing-resistant authentication in the associated policy.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   Your organization has a custom application that supports authentication context. You have created an authentication context for a sensitive operation and assigned it to the application. You have also created a Conditional Access policy that requires MFA when that context is requested. However, users are not being prompted for MFA when performing the sensitive operation. What is the most likely cause?

   • AThe Conditional Access policy is in Report-only mode.
   • BThe user is excluded from the policy.
   • CThe application is not requesting the authentication context.
   • DThe authentication context is not assigned to the application.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   When using a Conditional Access template, what must you do before enabling the policy?

   • AReview and customize the settings to match your organization's requirements
   • BDelete all existing Conditional Access policies
   • CDisable multi-factor authentication
   • DCreate a new tenant
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which session control in Conditional Access allows you to require users to re-authenticate after a specified period?

   • APersistent browser session
   • BApplication enforced restrictions
   • CConditional Access app control
   • DSign-in frequency
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   Your organization wants to protect the ability to manage Conditional Access policies. You have implemented a protected action for 'Conditional Access policy management' and a Conditional Access policy that requires phishing-resistant MFA for that action. However, a user with the Conditional Access administrator role is able to modify policies without being prompted for MFA. What is the most likely cause?

   • AThe protected action is not supported for Conditional Access policies.
   • BThe user is using a phishing-resistant method that satisfies the policy.
   • CThe protected action is not configured correctly.
   • DThe user is not assigned to the Conditional Access policy for the protected action.
   Reveal Solution Discussion Select an answer first