Plan, Implement, and Monitor the Integration of Enterprise Applications SC-300 Practice Questions (Page 4)

Questions 16–20

1. 16expert · medium

   You are configuring an enterprise application that is used by multiple departments. Each department should see the app in their My Apps portal, but the app should appear in different collections for each department. What is the most efficient way to achieve this?

   • AAdd the same enterprise application to multiple collections and assign the respective department groups to each collection.
   • BCreate a single collection and assign all department groups to it.
   • CCreate a separate enterprise application for each department and add each to the respective collection.
   • DUse the app's properties to set a department attribute and filter collections by that attribute.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is integrating a SaaS app that supports SAML 2.0. They want to assign the app to a dynamic group of users based on department. The app has two roles: 'Admin' and 'User'. You need to ensure that users in the 'IT' department get the 'Admin' role and others get the 'User' role. What should you do?

   • ACreate a single dynamic group for all users and assign it to the app, then configure the app's provisioning to map department to role.
   • BCreate two dynamic groups (one for IT, one for others), assign both groups to the app, and map each group to the appropriate app role.
   • CCreate a single dynamic group for all users and assign it to the app with the 'User' role, then manually change the role for IT users.
   • DAssign the app to all users and configure the app's SAML claims to include the department attribute.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the purpose of application roles in an enterprise application?

   • ADefine permissions within the application for assigned users
   • BManage Microsoft Entra administrative permissions
   • CSync users from on-premises Active Directory
   • DControl access to the application itself
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   You are publishing an on-premises app via Application Proxy. The app uses header-based authentication. You need to configure SSO so that the app receives the user's identity via a header. What is the correct configuration?

   • AUse header-based SSO and configure the connector to pass the required headers.
   • BUse Kerberos Constrained Delegation (KCD) for SSO.
   • CUse SAML SSO and configure the app to accept SAML tokens.
   • DUse Password-based SSO and configure the app to accept the password.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   Fabrikam has an on-premises expense reporting web app that uses Integrated Windows Authentication. You are integrating it with Microsoft Entra ID using Application Proxy. Remote users will access the app through the proxy. What must you configure to ensure that users are authenticated and the app receives the user's identity?

   • AConfigure Kerberos Constrained Delegation (KCD) from the Application Proxy connector to the backend app.
   • BSet the external URL to the app's internal URL and configure pass-through authentication.
   • CCreate a service principal name (SPN) for the connector service account and assign it to the app pool identity.
   • DInstall the connector on the domain controller and enable single sign-on with password hash sync.
   Reveal Solution Discussion Select an answer first