What is the purpose of tenant-wide multifactor authentication (MFA) settings in Microsoft Entra?

To manage the lifecycle of user accounts and groups

To configure which authentication methods are available for password reset

To define the session timeout for all applications

To enforce MFA for all users or selected groups across the tenant

What is the purpose of Microsoft Entra Password Protection?

To block weak and common passwords from being used in the tenant

To synchronize user passwords to the cloud

To manage password expiration policies

To enforce multifactor authentication for all users

Your organization has a hybrid environment with on-premises Active Directory and Microsoft Entra ID. You want to deploy Windows Hello for Business (WHfB) to users on domain-joined Windows 10 devices. What is a key prerequisite you must ensure is in place?

A certificate authority (CA) or cloud trust is configured for WHfB key trust or certificate trust.

MFA must be disabled for all users during WHfB enrollment.

Users must have a FIDO2 security key to enroll in WHfB.

Users must have a Temporary Access Pass to enroll in WHfB.

A user forgets their phone at home and cannot use the Microsoft Authenticator app for MFA. They need to access their email urgently. The help desk wants to provide a temporary solution that allows the user to sign in and register a new authentication method. What should the help desk do?

Reset the user's password and require them to use the new password to sign in.

Use the 'One-time bypass' feature in MFA to allow the user to sign in without MFA.

Issue a Temporary Access Pass (TAP) with a short validity and one-time use, then instruct the user to sign in and register a new method.

Disable MFA for the user temporarily and then re-enable it after they get their phone back.

Microsoft Certified:Identity and Access Administrator Associate

Domain 2Objective 1

Plan, Implement, and Manage Microsoft Entra User Authentication SC-300 Practice Questions (Page 7)

Part of the Implement authentication and access management domain, which accounts for 25–30% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

12concepts

25–30%of the exam

Questions 31–35

31foundation · easy
What is the purpose of tenant-wide multifactor authentication (MFA) settings in Microsoft Entra?
Select an answer first
32foundation · easy
What is the purpose of Microsoft Entra Password Protection?
Select an answer first
33foundation · easy
Which Microsoft Entra license is required for users to use self-service password reset?
Select an answer first
34application · medium
Your organization has a hybrid environment with on-premises Active Directory and Microsoft Entra ID. You want to deploy Windows Hello for Business (WHfB) to users on domain-joined Windows 10 devices. What is a key prerequisite you must ensure is in place?
Select an answer first
35application · medium
A user forgets their phone at home and cannot use the Microsoft Authenticator app for MFA. They need to access their email urgently. The help desk wants to provide a temporary solution that allows the user to sign in and register a new authentication method. What should the help desk do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.