Try our Free Demo Practice Tests for Comprehensive SC-300 Exam Preparation

You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

The company has two departments named marketing and finance.

You need to grant permissions to User1 to manage only the users in the marketing department. The solution must ensure that User1 does NOT have permissions to manage the users in the finance department.

What should you create first?

The App registration settings for the Azure AD tenant are configured as shown in the following exhibit.

User1 builds an ASP.NET web app named App1.

You need to ensure that User1 can register App1. The solution must use the principle of least privilege.

Which role should you assign to User1?

You plan to perform the following actions:

• Create a group named Group1.

• Add User1 and User2 to Group1.

• Assign Azure AD roles to Group1.

You need to create Group1.

Which two settings can you use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You need to replace all the permissions granted to User1 with read-only permissions. The solution must minimize administrative effort.

What should you do on the Remediation tab in Permissions Management?