SC-300 practice examsFinished
Microsoft Identity and Access Administrator
Design, implement, and operate an organization's identity and access management systems using Microsoft Entra. Configure and manage authentication, authorization, identity governance, and access management for users, devices, and applications.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| Implement and manage user identities | 20-25% |
| Implement authentication and access management | 25-30% |
| Plan and implement workload identities | 20-25% |
| Plan and automate identity governance | 20-25% |
Two sample questions
1. Your organization needs to delegate user management for the Sales division to a specific admin without giving them access to manage users in other divisions. Which Entra ID feature should you implement?
- A Conditional Access policy with a user filter on department that restricts the admin's management access to Sales division accounts
- An administrative unit scoped to Sales division users with the User Administrator role assigned to the delegated admin — correct
- An Azure RBAC role assigned at the resource group level containing the Sales division's Azure resources
- A custom Entra ID directory role with permissions limited to user management operations within the Sales OU
Why: Administrative units restrict the scope of directory roles to specific users, groups, or devices. Creating an AU for Sales users and assigning the User Administrator role within that AU provides delegated management.
2. What does a Defender for Cloud Apps risk score for an app summarise?
- General, security, compliance and legal risk factors — correct
- The Conditional Access policies applied to the app
- The number of users who signed in to the app
- How often the app appears in phishing campaigns
Why: The risk score weighs over 90 factors in four groups: general, security, compliance and legal.
The real SC-300 exam
| Length | 120 minutes |
|---|---|
| Questions | 40-60 |
| Pass mark | 700/1000 |
| Price | $165 USD |
| Recommended before you sit it | Strong understanding of security best practices, identity concepts, and experience with Microsoft Entra ID, Conditional Access, and related Azure services. |
| Valid for | 1 year (annual renewal required) |
Exam facts as published by Microsoft; always check the vendor’s page before you book.
Study SC-300 with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.