Free Microsoft SC-300 Exam Dumps Questions & Answers

You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.
An administrator deletes User1.
You need to identity the following:
* How many days after the account of User1 is deleted can you restore the account?
* Which is the least privileged role that can be used to restore User1?
What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

As per the Microsoft Identity and Access Administrator (SC-300) official study guide, and confirmed by Microsoft Learn documentation on "Restore a deleted user in Azure Active Directory", when a user account is deleted from Azure Active Directory (Azure AD), it is not permanently removed immediately. Instead, the deleted user object is retained in a " soft-deleted " state for 30 days. During this retention period, administrators can restore the user account, including its associated group memberships and licenses. After 30 days, the user object is permanently deleted and cannot be recovered.
From the Microsoft documentation:
"When a user is deleted, the account is retained in a deleted state for up to 30 days. You can restore the user within this period using the Azure portal, PowerShell, or Microsoft Graph." Regarding the minimum role required, the same documentation and SC-300 guide state that the User Administrator role is the least privileged built-in Azure AD role that can manage users - including restoring deleted accounts. Higher roles, such as Global Administrator, also have this capability, but the principle of least privilege applies.
"The User Administrator role can create, update, delete, and restore user accounts and reset passwords for non- administrators." Therefore, the correct configuration is:
* Number of days: 30
* Role: User Administrator

You need to create the LWGroup1 group to meet the management requirements.
How should you complete the dynamic membership rule? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You many need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
According to the Microsoft Identity and Access Administrator (SC-300) Exam Ref and the Azure AD Dynamic Membership Rules documentation , when you create a dynamic group in Azure Active Directory (now Entra ID), you define rules that automatically add or remove users based on their attributes.
The scenario requires a group named LWGroup1 that contains all Azure AD user accounts for Litware but excludes all guest accounts . In Azure AD, internal users created within the tenant are designated with the attribute user.userType = " Member " , while external or guest accounts from partner organizations have user.userType = " Guest " .
To ensure only internal (Litware) users are included, the membership rule must:
* Ensure the user object exists - by checking (user.objectId -ne null) which confirms that the rule only applies to valid user objects.
* Include only members, excluding guests - by filtering with (user.userType -eq " Member " ) .
Hence, the dynamic rule that satisfies these conditions is:
(user.objectId -ne null) and (user.userType -eq " Member " )
This rule guarantees that LWGroup1 dynamically includes all internal users from litware.com and excludes all external users or guest accounts (such as Fabrikam users).
This logic aligns precisely with the Microsoft Learn module "Manage groups in Azure Active Directory" and SC-300 study guide section "Implement and manage dynamic membership rules" , which states:
"Use user.userType to distinguish between internal members and external guests when configuring membership rules for dynamic groups."
# Correct Answer:
(user.objectId -ne null) and (user.userType -eq " Member " )

You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com.
Several users use their contoso.com email address for self-service sign-up to 1 Microsoft Entra.
You gain global administrator privileges to the Microsoft Entra tenant that contains the self-signed users.
You need to prevent the users from creating user accounts in the contoso.com 2 Microsoft Entra tenant for self-service sign-up to Microsoft 365 services.
Which PowerShell cmdlet should you run?

• A.Update-MgDomain
• B.Update-MgPolicyAuthorizationPolicy
• C.Update-MgPolicyPermissionGrantPolicyExclude
• D.Update-MgDomainFederationConfiguration

You have accounts for the following cloud platforms:
* Azure
* Alibaba Cloud
* Amazon Web Services (AWS)
* Google Cloud Platform (GCP)
You configure an A2ure subscription to use Microsoft Entra Permissions Management to manage the permissions in Azure only. Which additional cloud platforms can be managed by using Permissions Management?

• A.AWS only
• B.Alibaba Cloud and GCP only
• C.AWS and GCP only
• D.Alibaba Cloud, AWS, and GCP
• E.Alibaba Cloud and AWS only

Task 2
You need to implement a process to review guest users who have access to the Salesforce app.
The review must meet the following requirements:
* The reviews must occur monthly.
* The manager of each guest user must review the access.
* If the reviews are NOT completed within five days, access must be removed.
* If the guest user does not have a manager, Megan Bowen must review the access.