Microsoft SC-900 SC-200 SC-300 MS-900 MS-700 MD-102 PL-900 - Security M365 Teams Endpoint Power Platform

By Taylor Kim · Updated May 25, 2026

Questions25
Passing Score75%
Format100% Multiple Choice
Sessions Logged2,103
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
Community rating 4.7 out of 5 from 45 ratings.
4.7 (45)

Topics covered

This quiz

Uncategorized25 (100%)

Uncategorized25 questions

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

An endpoint administrator uses Microsoft Intune to manage Windows 11 devices. A new security policy requires that BitLocker encryption is enabled on all company-owned devices. Which Intune feature configures this?

Answer choices

  • A. Intune Device Configuration Profile with BitLocker settings

  • B. Intune Enrollment Restriction policy

  • C. Microsoft Defender for Endpoint baseline

  • D. Intune App Protection Policy

Question 2

An Intune administrator needs to configure Windows Autopilot for deploying new Windows 11 devices. The company wants devices to be automatically joined to Azure AD and enrolled in Intune when users first sign in. Which deployment profile mode achieves this?

Answer choices

  • A. Windows Autopilot Self-Deploying mode

  • B. Windows Autopilot User-Driven mode with Azure AD join

  • C. Windows Autopilot for pre-provisioned deployment (White Glove)

  • D. Intune Enrollment Status Page (ESP) only

Question 3

An identity administrator needs to ensure that users with Azure AD Global Administrator role are assigned the role only temporarily and must provide justification. Which Azure AD feature provides this just-in-time privileged access?

Answer choices

  • A. Azure AD Conditional Access with role conditions

  • B. Azure AD Privileged Identity Management (PIM)

  • C. Azure AD Access Reviews

  • D. Azure AD Identity Protection

Question 4

An SC-300 administrator needs to implement a B2B collaboration scenario where external partners from partner.com can access specific SharePoint sites using their own corporate identities. Which Azure AD feature enables this?

Answer choices

  • A. Azure AD B2C for customer identities

  • B. Azure AD B2B Collaboration with guest user invitations

  • C. Azure AD Domain Services

  • D. Azure AD Application Proxy

Question 5

An organization enables Microsoft Defender for Identity (MDI). Which identity-based attack does MDI specifically detect on-premises?

Answer choices

  • A. Password spray attacks against Azure AD cloud accounts

  • B. Pass-the-Hash and Kerberos Golden Ticket attacks in on-premises Active Directory

  • C. OAuth token hijacking in cloud applications

  • D. Business email compromise via phishing