SC-300 Korean試験無料問題集「Microsoft Identity and Access Administrator (SC-300 Korean Version) 認定」

解説: (GoShiken メンバーにのみ表示されます)

Explanation:
Box 1: A system-assigned managed identity
Ensure that if Automation1 is deleted, the permissions granted for Vault1 will be removed automatically When an Azure resource with a system-assigned managed identity is deleted, the managed identity is also automatically deleted. This ensures that the identity is not orphaned and that the resource is no longer able to use it. The deletion is tied directly to the lifecycle of the resource, meaning if the resource is gone, so is the associated managed identity.
Box 2: Key Vault Secrets User
Ensure that runbooks created in Automation1 can read secret values stored in Vault1.
To read Azure Key Vault secrets, you'll need to assign the Key Vault Secrets User role. This role grants the necessary permissions to access and use the secrets stored in Key Vault. The Key Vault Reader role also allows users to read metadata of Key Vaults, but not the secret contents themselves.
* Key Vault Secrets User
Read secret contents including secret portion of a certificate with private key. Only works for key vaults that use the 'Azure role-based access control' permission model.
Reference:
https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview
https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guid

Explanation:
Box 1: Microsoft Entra admin center
The "Conditional Access App Control" custom policy is created within the Microsoft Entra admin center. Specifically, you'll find it under Protection > Conditional Access > Policies. You can also access it through Entra ID > Conditional Access.
Box 2: Session
Define Session controls:
Under the "Session" section, you can enable Conditional Access App Control. This allows you to leverage Microsoft Defender for Cloud Apps for session controls and custom policies.
Reference:
https://learn.microsoft.com/en-us/defender-cloud-apps/proxy-intro-aad

解説: (GoShiken メンバーにのみ表示されます)

解説: (GoShiken メンバーにのみ表示されます)

解説: (GoShiken メンバーにのみ表示されます)

Explanation:
Box 1: Yes
User1 belongs to the Marketing Department, and is a member of Group1.
Cross-tenant synchronization settings:
* Sync Group1
* Filter Department EQUALS Marketing
Box 2: No
User2 belongs to the marketing Department, and is a member of Group2.
Group2 will not be synchronized.
Box 3: No
User3 belongs to the HR Department, and is a member of Group1.
HR department will not be synchronized.