You are developing a daemon application that runs as a background service and needs to access Microsoft Graph to read user profiles. The application does not have a user interface. You want to use OAuth 2.0 to authenticate the application. What should you implement?

Authorization code flow with PKCE

You are deploying Windows Hello for Business (WHfB) in a hybrid environment. You have a mix of Windows 10 and Windows 11 devices. Some users are cloud-only, and some are hybrid. You want to enable WHfB for all users. What is a key consideration?

MFA must be disabled for all users during WHfB enrollment.

Hybrid users need a trust model (key trust or certificate trust) configured, while cloud-only users can use WHfB with Microsoft Entra ID directly.

WHfB is only available for Windows 11 devices.

All users must have a FIDO2 security key to enroll in WHfB.

A new executive starts tomorrow and needs to enroll Microsoft Authenticator on a personal device. The tenant enforces MFA for all users. You want to provide a time-limited, single-use credential that works only for initial registration. What should you configure?

Set the user's authentication method to 'Microsoft Authenticator' and send them a QR code to scan directly.

Assign the user a new password and require a password change at next sign-in, then have them register Authenticator.

Disable MFA for the user temporarily, let them sign in with a password, then re-enable MFA after registration.

Create a Temporary Access Pass with a 30-minute lifetime and one-time use, and instruct the user to use it to sign in and register Authenticator.

You have a hybrid environment with on-premises Active Directory and Microsoft Entra ID. You want to enable Microsoft Entra Kerberos authentication for hybrid users to access Azure Files. What is a prerequisite you must configure?

Configure certificate-based authentication for all users.

Deploy Windows Hello for Business to all hybrid users.

Create a Kerberos server object in on-premises AD and publish it to Microsoft Entra ID.

Enable FIDO2 security keys for all users.

What is the immediate effect of disabling a user account in Microsoft Entra?

The user cannot sign in to Microsoft Entra and its applications

The user's group memberships are removed

The user's access tokens are immediately revoked

Microsoft Certified:Identity and Access Administrator Associate

Domain 2Objective 1

Plan, Implement, and Manage Microsoft Entra User Authentication SC-300 Practice Questions (Page 1)

Part of the Implement authentication and access management domain, which accounts for 25–30% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

12concepts

25–30%of the exam

Questions 1–5

1expert · hard
You are developing a daemon application that runs as a background service and needs to access Microsoft Graph to read user profiles. The application does not have a user interface. You want to use OAuth 2.0 to authenticate the application. What should you implement?
Select an answer first
2expert · hard
You are deploying Windows Hello for Business (WHfB) in a hybrid environment. You have a mix of Windows 10 and Windows 11 devices. Some users are cloud-only, and some are hybrid. You want to enable WHfB for all users. What is a key consideration?
Select an answer first
3application · medium
A new executive starts tomorrow and needs to enroll Microsoft Authenticator on a personal device. The tenant enforces MFA for all users. You want to provide a time-limited, single-use credential that works only for initial registration. What should you configure?
Select an answer first
4application · medium
You have a hybrid environment with on-premises Active Directory and Microsoft Entra ID. You want to enable Microsoft Entra Kerberos authentication for hybrid users to access Azure Files. What is a prerequisite you must configure?
Select an answer first
5foundation · easy
What is the immediate effect of disabling a user account in Microsoft Entra?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.