SC-300 Conditional Access Policy Design Quiz

1. What is the 'Block access' grant control used for?

Temporarily suspending a user account

Denying access when specific conditions are met

Preventing password resets

Disabling multi-factor authentication

2. What is the relationship between Conditional Access policies and device compliance in Microsoft Entra ID?

They are unrelated and serve different purposes

Conditional Access can require devices meet compliance policies

Device compliance policies override Conditional Access

Compliance is only enforced for on-premises devices

3. Which built-in role is required to create and manage Conditional Access policies?

Global Reader

Conditional Access Administrator

Application Administrator

User Administrator

4. In Conditional Access, what does 'Application enforced restrictions' session control do?

Restricts file uploads and downloads in cloud apps

Prevents users from copying data

Limits access to specific features within applications

Blocks all external sharing of documents

5. What is a best practice when creating Conditional Access policies?

Apply the same policy to all users without exceptions

Test policies in report-only mode before enforcement

Block all access by default

Disable policies during business hours

6. Which session control limits concurrent sessions to prevent unauthorized access?

Sign-in frequency

Persistent browser session

Application enforced restrictions

Conditional Access App Control

7. What is the purpose of 'User risk' detection in Conditional Access?

To identify and respond to compromised user accounts

To monitor employee productivity

To track user attendance

To measure user satisfaction

8. In Conditional Access, what is 'Require approved client app'?

A grant control ensuring only approved apps access resources

A setting that automatically updates all applications

A condition that blocks web browsers

A feature that prevents application installation

9. What does the 'Client apps' condition in Conditional Access specify?

Which applications or clients can access resources

The version of Windows installed on devices

The browser cache settings

The user's installed software list

10. Which authentication method is typically required when using the 'Require multi-factor authentication' grant control?

Only password-based authentication

Two or more verification methods

Biometric authentication exclusively

Hardware security keys only

11. What is the primary purpose of Conditional Access policies in Microsoft Entra ID?

To enforce multi-factor authentication based on risk and context

To manage user passwords and password complexity requirements

To control resource access based on conditions and controls

To monitor and log all user activities in cloud applications

12. Which assignment option in Conditional Access determines who the policy applies to?

Users and groups, cloud apps, and conditions

Only administrators and security personnel

All users in the organization automatically

Users who have failed authentication once

13. In Conditional Access, what does the 'Locations' condition allow you to do?

Restrict access based on geographic location or IP address

Track user movements in real-time

Automatically disable accounts in certain countries

Log all user locations for compliance reporting

14. What is 'Require device to be marked as compliant' in Conditional Access?

A grant control ensuring devices meet security standards

A session control that expires after 24 hours

A condition that checks user location

A filter that blocks specific file types

15. Which device platform condition would you use to require compliance for mobile devices?

Windows and macOS only

Android and iOS

Linux and Unix systems

Web browsers only

16. What does the 'Sign-in risk' condition assess in Conditional Access?

The user's credit score and financial history

The likelihood that a sign-in attempt is not legitimate

The number of failed password attempts

The user's location history over the past year

17. Session controls in Conditional Access allow administrators to do what?

Limit the duration of user sessions and monitor user activity

Change user passwords remotely

Delete user accounts automatically

Prevent users from accessing any cloud applications

18. Which grant control requires users to acknowledge organizational terms before accessing resources?

Require multi-factor authentication

Require device to be marked as compliant

Require terms of use

Require password change

19. What is a grant control in Conditional Access?

A session timeout that logs users out after inactivity

An action taken when conditions are met, such as requiring MFA

A rule that blocks all access to a specific application

A notification sent to administrators about policy changes

20. Which of the following is NOT a standard condition in a Conditional Access policy?

User risk level

Device platform

User's favorite browser

Network location