The SC-300 practice test trains you in administering an organization’s identity and access management systems by using Microsoft Azure Active Directory.
Why should I take the SC-300 exam?
The Microsoft SC-300 certification offers you the perfect opportunity to develop and validate your skills in designing, implementing, and operating an organization’s identity and access management systems by using Microsoft Azure Active Directory (Azure AD). Specifically, with this certification you will demonstrate your skills in implementing identities in Azure AD, authentication and access management, access management for applications, and in planning and implementing identity governance in Azure AD.
The SC-300 practice test includes two different modes: certification and practice mode. Certification mode allows you to assess your knowledge and discover your weak areas, with practice mode allowing you to focus on the areas that need development.
Questions: 183 Release Date: 07/2021 (Last Update: 01/2024) Job Role: Administrator, Identity And Access Administrator, Security Engineer Language: English
The SC-300 practice test contains 183 questions covering the following objectives:
Implement and manage user identities - 40 questions
Configure and manage a Microsoft Entra tenant
Configure and manage built-in and custom Microsoft Entra roles
Recommend when to use administrative units
Configure and manage administrative units
Evaluate effective permissions for Microsoft Entra roles
Configure and manage custom domains
Configure Company branding settings
Configure tenant properties, user settings, group settings, and device settings
Create, configure, and manage Microsoft Entra identities
Create, configure, and manage users
Create, configure, and manage groups
Manage custom security attributes
Automate the management of users and groups by using PowerShell
Assign, modify, and report on licenses
Implement and manage identities for external users and tenants
Manage External collaboration settings in Microsoft Entra ID
Invite external users, individually or in bulk
Manage external user accounts in Microsoft Entra ID
Implement Cross-tenant access settings
Implement and manage cross-tenant synchronization
Configure identity providers, including SAML and WS-Fed
Create and manage a Microsoft Entra B2C tenant (Microsoft Entra External ID)
Implement and manage hybrid identity
Implement and manage Microsoft Entra Connect
Implement and manage Microsoft Entra Connect cloud sync
Implement and manage password hash synchronization
Implement and manage pass-through authentication
Implement and manage seamless single sign-on (SSO)
Implement and manage federation, excluding manual Active Directory Federation Services (AD FS) deployments
Implement and manage Microsoft Entra Connect Health
Troubleshoot synchronization errors
Implement authentication and access management - 57 questions
Plan, implement, and manage Microsoft Entra ID user authentication
Plan for authentication
Implement and manage authentication methods
Implement and manage tenant-wide Multi-factor Authentication (MFA) settings
Manage per-user MFA settings
Configure and deploy self-service password reset (SSPR)
Implement and manage Windows Hello for Business
Disable accounts and revoke user sessions
Implement and manage password protection and smart lockout
Enable Microsoft Entra Kerberos authentication for hybrid identities
Implement certificate-based authentication in Microsoft Entra
Plan, implement, and manage Microsoft Entra Conditional Access
Plan Conditional Access policies
Implement Conditional Access policy assignments
Implement Conditional Access policy controls
Test and troubleshoot Conditional Access policies
Implement session management
Implement device-enforced restrictions
Implement continuous access evaluation
Create a Conditional Access policy from a template
Manage risk by using Microsoft Entra Identity Protection
Implement and manage user risk policies
Implement and manage sign-in risk policies
Implement and manage MFA registration policies
Monitor, investigate and remediate risky users
Monitor, investigate, and remediate risky workload identities
Implement access management for Azure resources by using Azure roles
Create custom Azure roles, including both control plane and data plane permissions
Assign built-in and custom Azure roles
Evaluate effective permissions for a set of Azure roles
Assign Azure roles to enable Microsoft Entra ID login to Azure virtual machines
Configure Azure Key Vault role-based access control (RBAC) and access policies
Plan and implement workload identities - 34 questions
Plan and implement identities for applications and Azure workloads
Select appropriate identities for applications and Azure workloads, including managed identities, service principals, user accounts, and managed service accounts
Create managed identities
Assign a managed identity to an Azure resource
Use a managed identity assigned to an Azure resource to access other Azure resources
Plan, implement, and monitor the integration of enterprise applications
Configure and manage user and admin consent
Discover apps by using AD FS application activity reports
Plan and implement settings for enterprise applications, including application-level and tenant-level settings
Assign appropriate Microsoft Entra roles to users to manage enterprise applications
Monitor and audit activity in enterprise applications
Design and implement integration for on-premises apps by using Microsoft Entra Application Proxy
Design and implement integration for software as a service (SaaS) apps
Assign, classify, and manage users, groups, and app roles for enterprise applications
Create and manage application collections
Plan and implement app registrations
Plan for app registrations
Create app registrations
Configure app authentication
Configure API permissions
Create app roles
Manage and monitor app access by using Microsoft Defender for Cloud Apps
Configure and analyze cloud discovery results by using Defender for Cloud Apps
Configure connected apps
Implement application-enforced restrictions
Configure Conditional Access app control
Create access and session policies in Defender for Cloud Apps
Implement and manage policies for OAuth apps
Manage the Cloud app catalog
Plan and implement identity governance - 52 questions
Plan and implement entitlement management in Microsoft Entra
Plan entitlements
Create and configure catalogs
Create and configure access packages
Manage access requests
Implement and manage terms of use (ToU)
Manage the lifecycle of external users
Configure and manage connected organizations
Plan, implement, and manage access reviews in Microsoft Entra
Plan for access reviews
Create and configure access reviews
Monitor access review activity
Manually respond to access review activity
Plan and implement privileged access
Plan and manage Azure roles in Microsoft Entra Privileged Identity Management (PIM), including settings and assignments
Plan and manage Azure resources in PIM, including settings and assignments
Plan and configure privileged access groups
Manage the PIM request and approval process
Analyze PIM audit history and reports
Create and manage break-glass accounts
Monitor identity activity by using logs, workbooks, and reports
Design a strategy for monitoring Microsoft Entra
Review and analyze sign-in, audit, and provisioning logs by using the Microsoft Entra admin center
Configure diagnostic settings, including configuring destinations such as Log Analytics workspaces, storage accounts, and event hubs
Monitor Microsoft Entra by using KQL queries in Log Analytics
Analyze Microsoft Entra by using workbooks and reporting
Monitor and improve the security posture by using Identity Secure Score
Plan and implement Microsoft Entra Permissions Management
Onboard Azure subscriptions to Permissions Management
Evaluate and remediate risks relating to Azure identities, resources, and tasks
Evaluate and remediate risks relating to Azure highly privileged roles
Evaluate and remediate risks relating to Permissions Creep Index (PCI) in Azure
Configure activity alerts and triggers for Azure subscriptions
Notes:
The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.
Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.
A practice test is an informal exam that recreates the experience of a real test and aims to prepare you better for what to expect on the actual exam. A MeasureUp practice test has around 150 questions covering the exam objective domains. In a MeasureUp practice test, there are two specific test-taking modes that prepare students for their certification: Certification Mode and Practice Mode.
The Practice Mode allows users to highly customize their testing environment. They will be able to select how many questions they want to include in their assessment, the maximum time to finish the test, and have the possibility to randomize the question order, and select how and which questions will be shown in the test.
The Certification Mode simulates the actual testing environment users will encounter when taking a certification exam. They are timed and do not allow users to request the answers and explanations to questions until after the test.
How does it work?
Take a look at our video to see exactly how MeasureUp’s practice tests work.
Why should you trust MeasureUp over free Learning material?
MeasureUp
Free learning material
A greater number of questions, so more opportunities to learn.
A small proportion of questions to introduce the exam.
Detailed explanations with online references of correct and incorrect answers.
Brief or no explanations of both correct and incorrect answer options.
A total of fourteen different question types.
Limited types of questions out of all the ones you'll find on the exam.
Customize the test based on your needs. Certification & Practice Mode.
Just one type of assessment, without customization options and without a time countdown.
What can I expect to earn if I pass the SC-300 exam?
On passing the SC-300 exam, and obtaining a job as a middle Security Engineer, you can expect to earn a salary in the United States of approximately $100,000.
Source: Nigel Franks International.
Continue growing with MeasureUp’s learning material. Explore the Security learning path.
The MeasureUp SC-300 practice test is the most realistic simulation of the actual certification exam on the market, giving you the perfect opportunity to pass the official exam on the first go. With our Test Pass Guarantee, you can be sure of success as we offer all of your money back if you do not pass. The SC-300 practice test has been created by leading experts in the field of cloud computing in Azure.
You can use the Microsoft SC-300 practice test in two different modes: certification and practice mode. The first gives you the possibility to assess your knowledge and discover your weak areas, and the second allows you to focus on these areas, ensuring you spend your time wisely. Once you have developed your weak areas sufficiently, you can re-take the exam in certification mode to see if you are now exam-ready.
Why should you trust the SC-300 Practice Test from MeasureUp over free learning material?
The MeasureUp SC-300 practice test has many benefits over free learning material, including:
A higher number of questions, so more opportunities to learn.
Detailed explanations with online references of correct and incorrect answers.
A total of fourteen different question types, replicating the look and feel of the real exam.
Customizable based on your needs. Certification & Practice Modes.
Test Pass Guarantee.
Written, reviewed, and edited by experts.
How to use the SC-300 Practice Test?
¡We first recommend you take the SC-300 practice test in certification mode. By studying the generated report on completing the test, you will get a helpful overview of which areas require further attention. You should then take the test in practice mode in order to develop those areas. Once you are confident you have improved your knowledge in these areas, you can re-take the test in certification mode and, on passing 3 consecutive times with a score of 90%, you know you are exam-ready!
Will the questions be the same as the actual exam?
Although the questions will emulate those of the official exam in terms of style, content, level of difficulty, for reasons of copyright they will not be exactly the same. This will allow you to fully understand the content you are studying so that, no matter how the questions are focused, you can be confident you are covering the same material and that you will have no problem in passing the exam.
SC-300 CERTIFICATION EXAM
What is the Microsoft SC-300?
The SC-300 exam is an exam that validates your knowledge and skills as an identity and access management administrator
What are the benefits of the SC-300 certification for my career?
The SC-300 certification is the perfect opportunity to develop and validate your skills in designing, implementing, and operating an organization’s identity and access management systems by using Microsoft Azure Active Directory (Azure AD). Specifically, with this certification you will demonstrate your skills in implementing identities in Azure AD, authentication and access management, access management for applications, and in planning and implementing identity governance in Azure AD.
How long does it take to prepare for the SC-300?
The time required to pass the SC-300 exam depends on your starting point in terms of knowledge and experience with Azure, but Microsoft recommends you first have at least two years of professional development experience with Azure. Another important factor to take into account is the amount of time you are able to study. Most Microsoft associate exams take around 40-50 hours of study. The MeasureUp SC-300 practice test comes in several different access options: 30-day, 60-day, 1-year, and option to download the test.
Can I purchase an SC-300 exam voucher from MeasureUp?
No, MeasureUp does not offer any exam vouchers for the SC-300 exam.
How to prepare for the SC-300 exam?
Review the SC-300 exam domains carefully.
Create your study plan for your preparation.
Enroll for the MeasureUp practice tests. Our practice tests emulate the actual exam in terms of style, format, skill sets, question structure, and level of difficulty, and can be taken in two different formats: practice mode and certification mode.
Practice, practice, practice! After looking at all the questions available in the test, checking the correct answers, reviewing the explanations regarding all the different answer options, and consulting the carefully chosen references, it is now time to use the test’s Certification Mode. This is the closest experience you’ll get to the real exam. And when you pass the Certification Mode twice consecutively with a score of 90% or more, you know you are… Exam ready!
What characteristics does the SC-300 exam have?
Question number: 45-50 questions
Exam duration: approximately 120 minutes
Passing Score: All technical exam scores are reported on a scale of 1 to 1,000. A passing score is 700 or greater. As this is a scaled score, it may not equal 70% of the points. A passing score is based on the knowledge and skills needed to demonstrate competence as well as the difficulty of the questions.
How many questions does the SC-300 exam have?
The SC-300 exam will have between 45 and 50 questions.
Is the Microsoft SC-300 worth it?
If you want to advertise to potential employers your experience in and understanding of administering identity and access management systems, which is an absolutely fundamental element of managing many companies in the 21st century, then the SC-300 is the certification exam that will demonstrate your worth to those employers.
What is the SC-300 learning path?
As you can see from Microsoft’s certification learning path, the SC-300 is situated at a more advanced level than the SC-900 within the Security, Compliance, and Identity learning path. This means that the SC-900 is an ideal starting point to launch your journey in Security, Compliance, and Identity. If you wanted to broaden your knowledge of this area after passing the SC-300, you could opt for the SC-400, the SC-100, SC-200, AZ-500, or MS-500, depending on your interests and personal goals.
https://www.measureup.com/microsoft-practice-test-sc-300-microsoft-identity-and-access-administrator.html7689Microsoft Practice Test SC-300: Microsoft Identity and Access Administrator<b>Questions:</b> 183 <br><b>Release Date:</b> 07/2021 (Last Update: 01/2024) <br><b>Job Role:</b> Administrator, Identity And Access Administrator, Security Engineer <br><b>Language:</b> English <br><br><p>The SC-300 practice test contains 183 questions covering the following objectives:</p>
<h3 aria-level="3"><span data-contrast="none">Implement and manage user identities - 40 questions</span></h3>
<h4 aria-level="4"><span style="color: #0780c2;">Configure and manage a Microsoft Entra tenant</span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure and manage built-in and custom Microsoft Entra roles</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Recommend when to use administrative units</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure and manage administrative units</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Evaluate effective permissions for Microsoft Entra roles</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure and manage custom domains</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure Company branding settings</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure tenant properties, user settings, group settings, and device settings</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Create, configure, and manage Microsoft Entra identities</span></h4>
<ul>
<li><span data-contrast="none">Create, configure, and manage users</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Create, configure, and manage groups</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Manage custom security attributes</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Automate the management of users and groups by using PowerShell</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Assign, modify, and report on licenses</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<h4 aria-level="4"> </h4>
<h4 aria-level="4"><span style="color: #0780c2;">Implement and manage identities for external users and tenants </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Manage External collaboration settings in Microsoft Entra ID</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Invite external users, individually or in bulk</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Manage external user accounts in Microsoft Entra ID</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement Cross-tenant access settings</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage cross-tenant synchronization</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure identity providers, including SAML and WS-Fed</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Create and manage a Microsoft Entra B2C tenant (Microsoft Entra External ID)</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Implement and manage hybrid identity</span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage Microsoft Entra Connect</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage Microsoft Entra Connect cloud sync</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage password hash synchronization</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage pass-through authentication</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage seamless single sign-on (SSO)</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage federation, excluding manual Active Directory Federation Services (AD FS) deployments</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage Microsoft Entra Connect Health</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Troubleshoot synchronization errors</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<h3 aria-level="3"> </h3>
<h3 aria-level="3"><span data-contrast="none">Implement authentication and access management - 57 questions</span></h3>
<h4 aria-level="4"><span style="color: #0780c2;">Plan, implement, and manage Microsoft Entra ID user authentication </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Plan for authentication</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage authentication methods</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage tenant-wide Multi-factor Authentication (MFA) settings</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Manage per-user MFA settings</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure and deploy self-service password reset (SSPR)</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage Windows Hello for Business</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Disable accounts and revoke user sessions</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage password protection and smart lockout</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Enable Microsoft Entra Kerberos authentication for hybrid identities</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement certificate-based authentication in Microsoft Entra</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Plan, implement, and manage Microsoft Entra Conditional Access </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Plan Conditional Access policies</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement Conditional Access policy assignments</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement Conditional Access policy controls</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Test and troubleshoot Conditional Access policies</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement session management</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement device-enforced restrictions</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement continuous access evaluation</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Create a Conditional Access policy from a template</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Manage risk by using Microsoft Entra Identity Protection </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage user risk policies</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage sign-in risk policies</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage MFA registration policies</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Monitor, investigate and remediate risky users</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Monitor, investigate, and remediate risky workload identities</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Implement access management for Azure resources by using Azure roles </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Create custom Azure roles, including both control plane and data plane permissions</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Assign built-in and custom Azure roles</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Evaluate effective permissions for a set of Azure roles</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Assign Azure roles to enable Microsoft Entra ID login to Azure virtual machines</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure Azure Key Vault role-based access control (RBAC) and access policies</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="3"> </p>
<h3 aria-level="3"><span data-contrast="none">Plan and implement workload identities - 34 questions</span></h3>
<h4 aria-level="4"><span style="color: #0780c2;">Plan and implement identities for applications and Azure workloads </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Select appropriate identities for applications and Azure workloads, including managed identities, service principals, user accounts, and managed service accounts</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Create managed identities</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Assign a managed identity to an Azure resource</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Use a managed identity assigned to an Azure resource to access other Azure resources</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Plan, implement, and monitor the integration of enterprise applications </span></h4>
<ul>
<li><span data-contrast="none">Configure and manage user and admin consent</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Discover apps by using AD FS application activity reports</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Plan and implement settings for enterprise applications, including application-level and tenant-level settings</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Assign appropriate Microsoft Entra roles to users to manage enterprise applications</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Monitor and audit activity in enterprise applications</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Design and implement integration for on-premises apps by using Microsoft Entra Application Proxy</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Design and implement integration for software as a service (SaaS) apps</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Assign, classify, and manage users, groups, and app roles for enterprise applications</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Create and manage application collections</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Plan and implement app registrations </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Plan for app registrations</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Create app registrations</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure app authentication</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure API permissions</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Create app roles</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Manage and monitor app access by using Microsoft Defender for Cloud Apps </span></h4>
<ul>
<li><span data-contrast="none">Configure and analyze cloud discovery results </span><span data-contrast="none">by using Defender for Cloud Apps</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Configure connected apps</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Implement application-enforced restrictions</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Configure Conditional Access app control</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Create access and session policies in Defender for Cloud Apps</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Implement and manage policies for OAuth apps</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Manage the Cloud app catalog</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="3"> </p>
<h3 aria-level="3"><span data-contrast="none">Plan and implement identity governance - 52 questions</span></h3>
<h4 aria-level="4"><span style="color: #0780c2;">Plan and implement entitlement management in Microsoft Entra </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Plan entitlements</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Create and configure catalogs</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Create and configure access packages</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Manage access requests</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Implement and manage terms of use (ToU)</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Manage the lifecycle of external users</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure and manage connected organizations</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Plan, implement, and manage access reviews in Microsoft Entra </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Plan for access reviews</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Create and configure access reviews</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Monitor access review activity</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Manually respond to access review activity</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Plan and implement privileged access </span></h4>
<ul>
<li><span data-contrast="none">Plan and manage Azure roles in Microsoft Entra Privileged Identity Management (PIM), including settings and assignments</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Plan and manage Azure resources in PIM, including settings and assignments</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Plan and configure privileged access groups</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Manage the PIM request and approval process</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Analyze PIM audit history and reports</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li><span data-contrast="none">Create and manage break-glass accounts</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Monitor identity activity by using logs, workbooks, and reports </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Design a strategy for monitoring Microsoft Entra</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Review and analyze sign-in, audit, and provisioning logs by using the Microsoft Entra admin center</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure diagnostic settings, including configuring destinations such as Log Analytics workspaces, storage accounts, and event hubs</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Monitor Microsoft Entra by using KQL queries in Log Analytics</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Analyze Microsoft Entra by using workbooks and reporting</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Monitor and improve the security posture by using Identity Secure Score</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
</ul>
<p aria-level="4"> </p>
<h4 aria-level="4"><span style="color: #0780c2;">Plan and implement Microsoft Entra Permissions Management </span></h4>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Onboard Azure subscriptions to Permissions Management</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Evaluate and remediate risks relating to Azure identities, resources, and tasks</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Evaluate and remediate risks relating to Azure highly privileged roles</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Evaluate and remediate risks relating to Permissions Creep Index (PCI) in Azure</span><span data-ccp-props="{"201341983":0,"335559739":40,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{"335551500":0,"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Configure activity alerts and triggers for Azure subscriptions</span></li>
</ul>
<p> </p>
<p><strong>Notes:</strong></p>
<ul style="font-weight: 400;">
<li data-leveltext="" data-font="Symbol" data-listid="17" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.</span><span data-ccp-props="{"201341983":0,"335559685":720,"335559739":0,"335559740":240}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="17" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.</span><span data-ccp-props="{"201341983":0,"335559685":720,"335559739":0,"335559740":240}"> </span></li>
</ul>
<p> </p>
<p> </p> <u><a target="_blank" href="https://docs.measureup.com/knowledgebase/system-requirements/">System Requirements</a></u>https://www.measureup.com/media/catalog/product/m/i/microsoft_sc-300_pt_1.png59.4instock9959.44039.6Microsoft000https://www.measureup.com/media/catalog/product/m/i/microsoft_sc-300_pt_1.png/measureup/measureup/Microsoft/measureup/Microsoft/Microsoft Technical/measureup/Microsoft/Microsoft Technical/Microsoft Practice Tests2021-07-20T08:17:41+0000