Overview of Microsoft Identity and Access Administrator
The SC-300 certification is an essential milestone in your Azure journey. Our practice tests simulate the real exam format, helping you build confidence and identify knowledge gaps. Review the detailed explanations provided after each question to deeply understand the underlying cloud concepts.
Sample SC-300 Practice Questions
Question 1
You are configuring directory synchronization from on-premises Active Directory to Microsoft Entra ID. You need to enable user authentication in the cloud while retaining immediate detection of compromised credentials on the dark web without on-premises DC dependency during sign-in. Which sign-in method should you configure in Microsoft Entra Connect?
- Password Hash Synchronization (PHS)
- Pass-through Authentication (PTA)
- Active Directory Federation Services (AD FS)
- LDAP relay over port 389
Password Hash Synchronization (PHS) syncs an encrypted hash of the password hash to Microsoft Entra ID. It enables cloud authentication independently of on-premises DCs and allows Microsoft Entra ID Protection to match synced hashes against leaked credential databases on the dark web.
Question 2
An organization wants to configure self-service password reset (SSPR) for synchronized hybrid users. When users change their passwords in Microsoft Entra ID, the new password must be applied immediately to on-premises Active Directory Domain Services. What must you enable?
- Password Writeback in Microsoft Entra Connect
- Kerberos Constrained Delegation
- Azure ExpressRoute private peering
- Direct LDAP Synchronization
Password Writeback is an integrated feature of Microsoft Entra Connect that securely sends cloud-initiated password resets back to on-premises Active Directory in real time over an encrypted outbound session.
Question 3
You are configuring Microsoft Entra Cloud Sync to synchronize users from a disconnected Active Directory forest acquired during a merger. What is a key architectural feature of Microsoft Entra Cloud Sync compared to traditional Microsoft Entra Connect Sync?
- Cloud Sync uses lightweight agents and executes sync logic in the cloud
- Cloud Sync requires full local SQL Server instances on-premises
- Cloud Sync cannot synchronize to Microsoft Entra ID
- Cloud Sync requires inbound open TCP port 443 on edge firewalls
Microsoft Entra Cloud Sync uses lightweight provisioning agents on-premises that initiate outbound connections to the cloud. Synchronization rules and mapping engines are hosted directly in Microsoft Entra ID rather than on a local SQL-backed server.
Use the interactive quiz engine above to answer these questions and hundreds more.