Microsoft · SC-300
Conditional Access: plan, build, test
SC-300 · Lesson 6 of 16 · 44:02
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-300 exam (Microsoft Identity and Access Administrator). In this lesson: planning Conditional Access policies (if-then statements, emergency access and service account exclusions), assignments (users, workload identities, apps, user actions, authentication contexts) and conditions, grant controls (block, MFA, authentication strengths, compliant devices, app protection), templates, report-only mode, and troubleshooting with the sign-in logs and the What If tool. Includes three original practice questions.
Preview the topics
- Users must complete MFA before they can register or change their security information, like a new phone. What should the policy target?
- Admins must sign in with phishing-resistant methods only, like passkeys or certificates. Which grant control fits?
- You built a policy that blocks legacy authentication, and want to see who it would affect, for two weeks, without blocking anyone. What should you do?