SC-300 Practice Question 3465
Exam: SC-300
Domain: Plan and implement workload identities
Difficulty: hard
You need to assign a Conditional Access policy that blocks a service principal from authenticating if the request originates from outside a dedicated Azure datacenter IP range. Which license and feature is required?
Answer Options
A
Microsoft Entra Workload ID premium licensing
B
Microsoft 365 Business Basic licensing
C
Exchange Online Plan 1 licensing
D
Windows 11 Enterprise E3 licensing
Correct Answer
A: Microsoft Entra Workload ID premium licensing
Explanation
Microsoft Entra Workload ID premium licensing enables Conditional Access policies and Identity Protection risk policies targeted specifically at service principals.