SC-300 SC-300 Skills measured April 27, 2026 Implement authentication and access management Runs in your browser · no setup Original practice · Review pending

Roll out Conditional Access without tenant lockout

Interpret policy results, protect emergency access, and move from observation to enforcement.

Estimated16 min

DifficultyIntermediate

Points10

Content record

Original practice · Review pending

Mapped to Microsoft SC-300 objectives · Internal validation 2026-10-06 · Original ITForMe practice mapped to published objectives; not an official exam question. A named independent subject-matter expert has not yet verified the question and answer key.

Community review →

2.2Plan, implement, and manage Conditional Access. 2.1Plan and implement Microsoft Entra user authentication. 2.3Manage identity risk with Microsoft Entra ID Protection.

Show review record and official sources

Method: Mapped to SC-300 objectives 2.1, 2.2, and 2.3; scenario logic and answer feedback checked against current Microsoft Learn documentation.

Current-profile check: 2026-09-30 · Next review due 2026-10-27

Inspect the evidence

Use only the information provided to complete the tasks.

Policy in report-only mode

table

Setting	Value
Users	All directory roles
Excluded	None
Grant	Require authentication strength: Phishing-resistant MFA
State	Report-only

Report-only results

table

Identity	Authentication	Result
admin-a	Passkey (FIDO2)	Would grant
admin-b	Password + SMS	Would block
emergency-01 (cloud-only, permanent Global Administrator)	Password only	Would block
emergency-02 (cloud-only, permanent Global Administrator)	Passkey (FIDO2)	Would grant
sync-service (service principal)	Certificate	Not applied

If columns are offscreen, scroll sideways or focus the table and use arrow keys.

Complete the response

Partial credit is available for matching, ordering, and multi-select tasks.

Changes will save automatically.

multi select

Select the THREE items that must be resolved before enforcement.

3 pts

Register admin-b with a phishing-resistant method Register a passkey (FIDO2) for emergency-01 Exclude both emergency access accounts from this policy and alert on their sign-ins Exclude emergency-01 and keep its long password as the only method Make both emergency accounts eligible for Global Administrator in PIM Add sync-service to this policy's user assignment

Need a hint?

Evaluate each option independently against the scenario evidence instead of treating the list as one decision.

Show another hint

Choose only options that directly satisfy the prompt; being generally true is not enough.

ordering

Order the remaining rollout steps.

4 pts

Drag the rows or use the arrow buttons to reorder.

1 Switch the policy from Report-only to On for a pilot group of administrators
2 Apply the method registrations and exclusions identified above
3 Review a further week of report-only results for unexpected blocks
4 Extend the assignment to all administrators after monitoring the pilot

Use this order as my answer

Need a hint?

Identify the prerequisite that must happen first and the verification or documentation that belongs last.

Show another hint

For the middle steps, ask what must already be true before each action can safely happen.

matching

Match each signal or control to what it evaluates.

3 pts

User risk → Sign-in risk → Authentication strength →

Need a hint?

Start with the row and choice that have the most distinctive purpose, then use that pair to narrow the rest.

Show another hint

For each remaining pair, explain the relationship in one sentence before selecting it.

Ready to check your work?Unanswered tasks and matches earn no points. A partial submission is scored and saved in your history.

Persistent progress

Attempt history

Every submission is retained. Starting another attempt never replaces or unlocks the previous one.

No attempts yet

Your first submitted score and detailed answer review will appear here.

Community quality control

Question or answer look wrong?

Proposals and votes help staff prioritize review. They never change the scoring key automatically.

Full review queue →

No community corrections yet

Be the first to flag unclear wording, an answer-key issue, or a source that needs another look.

Propose a correction

Original practice · Review pending

Inspect the evidence

Complete the response

Review your result

Attempt history

Question or answer look wrong?