You are rolling out Microsoft Authenticator to a pilot group. You want to ensure that users can use passwordless phone sign-in, but you also want to require a number match for MFA push notifications. What should you configure?

Disable MFA for the pilot group and rely solely on Authenticator push notifications.

Enable 'Phone sign-in' in the Authenticator method policy and set 'Number match' to 'Required' in the MFA service settings.

Configure a conditional access policy to require Authenticator for all apps.

Issue Temporary Access Passes to all pilot users to use for every sign-in.

What is a passkey (FIDO2) in Microsoft Entra?

A temporary access code generated by an administrator

A phishing-resistant passwordless authentication method that uses public-key cryptography

A hardware token that generates rotating codes

A one-time password sent via SMS

Your organization wants to enforce MFA for all users, but you have a group of users who use FIDO2 security keys and another group who use Microsoft Authenticator. You want to ensure that both groups can satisfy the MFA requirement with their existing methods. What should you configure?

Enable both FIDO2 and Microsoft Authenticator as authentication methods and create a conditional access policy that requires MFA for all users.

Require all users to use Microsoft Authenticator and disable FIDO2.

Create a custom password protection policy that allows MFA bypass for FIDO2 users.

Disable MFA for the FIDO2 group because security keys are strong enough.

Which Microsoft Entra feature can an administrator use to revoke all refresh tokens and session cookies for a user immediately?

Remove the user from all groups

Microsoft Certified:Identity and Access Administrator Associate

Domain 2Objective 1

Plan, Implement, and Manage Microsoft Entra User Authentication SC-300 Practice Questions (Page 3)

Part of the Implement authentication and access management domain, which accounts for 25–30% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

12concepts

25–30%of the exam

Questions 11–15

11application · medium
You are rolling out Microsoft Authenticator to a pilot group. You want to ensure that users can use passwordless phone sign-in, but you also want to require a number match for MFA push notifications. What should you configure?
Select an answer first
12foundation · easy
Which OAuth 2.0 grant type is most commonly used by a web application that needs to access APIs on behalf of a user?
Select an answer first
13foundation · easy
What is a passkey (FIDO2) in Microsoft Entra?
Select an answer first
14application · medium
Your organization wants to enforce MFA for all users, but you have a group of users who use FIDO2 security keys and another group who use Microsoft Authenticator. You want to ensure that both groups can satisfy the MFA requirement with their existing methods. What should you configure?
Select an answer first
15foundation · easy
Which Microsoft Entra feature can an administrator use to revoke all refresh tokens and session cookies for a user immediately?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.