Microsoft Exam SC-300 Topic 4 Question 103 Discussion

Actual exam question for Microsoft's SC-300 exam

Question #: 103
Topic #: 4

[All SC-300 Questions]

You have a Microsoft 365 tenant.

The Azure Active Directory (Azure AD) tenant syncs to an on-premises Active Directory domain.

You plan to create an emergency-access administrative account named Emergency1. Emergency1 will be

assigned the Global administrator role in Azure AD. Emergency1 will be used in the event of Azure AD

functionality failures and on-premises infrastructure failures.

You need to reduce the likelihood that Emergency1 will be prevented from signing in during an emergency.

What should you do?

AConfigure Azure Monitor to generate an alert if Emergency1 is modified or signs in.

BRequire Azure AD Privileged Identity Management (PIM) activation of the Global administrator role for
Emergency1.

CConfigure a conditional access policy to restrict sign-in locations for Emergency1 to only the corporate
network.

DConfigure a conditional access policy to require multi-factor authentication (MFA) for Emergency1.

Show Suggested Answer

Suggested Answer: A

by Sherron at Sep 18, 2024, 05:19 AM

Limited Time Offer

25%

Off

Get Premium SC-300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Pete

1 months ago

I'd avoid C - restricting the sign-in locations could backfire if the emergency happens when someone's away from the office. Flexibility is key in an emergency, right?

upvoted 0 times

William

4 days ago

B) Require Azure AD Privileged Identity Management (PIM) activation of the Global administrator role for Emergency1.

upvoted 0 times

...

Frankie

1 months ago

D looks good too, requiring MFA for that account would be a smart move. Gotta keep those emergency logins locked down tight!

upvoted 0 times

...

Jacklyn

1 months ago

Funny how they're trying to make an 'emergency' account more secure than my regular accounts! I guess the admins are a bit paranoid.

upvoted 0 times

Shonda

4 days ago

A) Configure Azure Monitor to generate an alert if Emergency1 is modified or signs in.

upvoted 0 times

...

Charlesetta

1 months ago

Hmm, I think the answer here is B. Requiring PIM activation for the Emergency1 account makes the most sense to reduce the likelihood of it being prevented from signing in during an emergency.

upvoted 0 times

...