SC-300 Microsoft Identity and Access Administrator Free Practice Questions and Answers

A new employee joins and needs access to cloud applications. Which approach best supports consistent onboarding and access management?

• A. Create or provision an identity in Microsoft Entra ID, then assign appropriate access
• B. Share an existing employee account
• C. Add the employee to every directory role
• D. Create a local browser profile only

A user enters a correct password, but the sign-in still requires a second verification method. What security control is being applied?

• A. Multifactor authentication
• B. Password writeback
• C. Directory synchronization
• D. Access review

Administrators want to block sign-ins from a location the organization never uses, while allowing an emergency exception account. What should they configure and test carefully?

• A. A Conditional Access policy using location conditions and a documented emergency access exclusion
• B. A mail retention label
• C. A user profile photo policy
• D. A SharePoint site theme

A support engineer needs an administrative role only during scheduled maintenance. Which method reduces standing privilege?

• A. Eligible role assignment activated for a limited duration with required controls
• B. Permanent Global Administrator assignment
• C. Shared administrator password
• D. Give the role to all support staff

A team must periodically confirm that external guests still need access to a group. Which Entra capability supports this review?

• A. Access reviews
• B. Password protection
• C. Domain verification
• D. Device enrollment