SC-300 試験問題を無料オンラインアクセス

Hotspot Question
Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains computers that run Windows 11.
You have a Microsoft 365 E5 subscription.
You plan to enable hybrid join and enroll the computers in Microsoft Intune.
You need to recommend the software that should be deployed to the domain, and the actions that should be performed in Intune.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

Explanation:
Box 1: The Intune Connector for Active Directory
Deploy Microsoft Entra hybrid joined devices by using Intune and Windows Autopilot Intune connector server requirements
* The Intune Connector for Active Directory must be installed on a computer that's running Windows Server 2016 or later with .NET Framework version 4.7.2 or later.
* The server hosting the Intune Connector must have access to the Internet and Active Directory.
Box 2: Modify the mobile device management (MDM) User scope
Set up Windows automatic MDM enrollment
1. Sign in to the Azure portal and select Microsoft Entra ID.
2. In the left hand pane, select Manage | Mobility (MDM and WIP) > Microsoft Intune.
3. Make sure users who deploy Microsoft Entra joined devices by using Intune and Windows are members of a group included in MDM User scope.
4. Use the default values in the MDM Terms of use URL, MDM Discovery URL, and MDM Compliance URL boxes, and then select Save.
Reference:
https://learn.microsoft.com/en-us/autopilot/windows-autopilot-hybrid

You have a Microsoft 365 E5 subscription.
You purchase the app governance add-on license.
You need to enable app governance integration.
Which portal should you use?

• A.the Microsoft 365 admin center
• B.the Microsoft Defender for Cloud Apps portal
• C.the Azure Active Directory admin center
• D.Microsoft 365 Defender
• E.the Microsoft Purview compliance portal

Your network contains an on-premises Active Directory Domains Services (AD DS) domain named contoso.com and a web app named WebApp1. WebAppl uses Integrated Windows authentication.
Remote users access WebApp1 by establishing a VPN connection to the on-premises network and using a URL of https//webapp1.contoso.com.
You have a Microsoft Entra tenant that syncs with contoso.com.
You perform the following actions:
- Deploy Microsoft Entra Private Access.
- Configure a connector group that contains a connector named
Connector1.
You need to ensure that the remote users can access WebApp1 by using Microsoft Entra Private Access.
What should you do?

• A.Deploy Microsoft Entra Internet Access.
• B.Create an application segment.
• C.Enroll the remote users' devices in Microsoft Defender for Endpoint.
• D.Create a Conditional Access policy.

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains an Azure AD enterprise application named App1.
A contractor uses the credentials of [email protected].
You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as [email protected].
What should you do?

• A.Run the New-AzADUser cmdlet.
• B.Create a guest user account in contoso.com.
• C.Add a WS-Fed identity provider.
• D.Configure the External collaboration settings.

Hotspot Question
You have an Azure Active Directory (Azure AD) tenant named contoso.com that has Email one- time passcode for guests set to Yes.
You invite the guest users shown in the following table.

Which users will receive a one-time passcode, and how long will the passcode be valid? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

Explanation:
Box 1: Guest3 only
When does a guest user get a one-time passcode?
When a guest user redeems an invitation or uses a link to a resource that has been shared with them, they'll receive a one-time passcode if:
They don't have an Azure AD account
They don't have a Microsoft account
The inviting tenant didn't set up federation with social (like Google) or other identity providers.
Box 2: 30 minutes
One-time passcodes are valid for 30 minutes. After 30 minutes, that specific one-time passcode is no longer valid, and the user must request a new one. User sessions expire after 24 hours.
After that time, the guest user receives a new passcode when they access the resource. Session expiration provides added security, especially when a guest user leaves their company or no longer needs access.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/external-identities/one-time-passcode