You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

User1 is the owner of Group1.
You create an access review that has the following settings:
Users to review: Members of a group
Scope: Everyone
Group: Group1
Reviewers: Members (self)
Which users can perform access reviews for User3?

• A.User1, User2, and User3
• B.User1 and User2 only
• C.User3 only
• D.User1 only

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 subscription. The subscription contains users that use Microsoft Outlook 2016 and Outlook 2013 clients.
You need to implement tenant restrictions. The solution must minimize administrative effort.
What should you do first?

• A.Configure the Outlook 2013 clients to use modern authentication.
• B.Upgrade the Outlook 2013 clients to Outlook 2016.
• C.From the Exchange admin center, configure Organization Sharing.
• D.Upgrade all the Outlook clients to Outlook 2019.

Comment: *

Name: *

Email: *

Verification: *

Your company recently implemented Azure Active Directory (Azure AD) Privileged Identity Management (PIM).
While you review the roles in PIM, you discover that all 15 users in the IT department at the company have permanent security administrator rights.
You need to ensure that the IT department users only have access to the Security administrator role when required.
What should you configure for the Security administrator role assignment?

• A.Expire eligible assignments after from the Role settings details
• B.Expire active assignments after from the Role settings details
• C.Assignment type to Active
• D.Assignment type to Eligible

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft Entra tenant that contains two groups named Group! and Group2 and the users shown in the following table.

Group2 is a member of Group1.
You configure an access review that has the following settings:
* Name: Review 1
* Select what to review: Teams + Groups
* Review scope: Select Teams + groups
* Group: Group1
* Scope: Guest users only
* Select reviewers: Group owners(s)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

Comment: *

Name: *

Email: *

Verification: *

You have an Azure AD tenant that contains a user named Admin1.
Admin1 uses the Require password change for high-risk user's policy template to create a new Conditional Access policy.
Who is included and excluded by default in the policy assignment? To answer, drag the appropriate options to the correct target. Each option may be use d once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

According to the Microsoft SC-300: Microsoft Identity and Access Administrator Official Study Guide and Microsoft Learn - Manage Conditional Access policies module, when an administrator creates a Conditional Access policy using the built-in Require password change for high-risk users template, the policy is automatically pre-configured with specific include and exclude assignments.
By default, this template targets "All users" in the tenant because the policy is designed to detect and remediate risky sign-ins or compromised accounts across the entire directory. However, since Azure AD B2B guest accounts and external users often have limited sig n-in scopes and cannot be subjected to organization- specific password policies, Microsoft's security baseline specifically excludes all guest and external users by default.
The intent behind this default configuration is to apply the password change requir ement to internal users while avoiding unnecessary enforcement on guest identities that do not manage credentials within the host tenant.
From the Microsoft Learn - Conditional Access policy templates documentation:
"When you create a policy from the Requi re password change for high-risk users template, the policy is configured to include all users and exclude all guest and external users by default."

Comment: *

Name: *

Email: *

Verification: *