CertifyCloudxAce every cloud certification.
AzureAssociate

Microsoft Certified: Identity and Access Administrator Associate

SC-300

Implement identities, authentication, access management, workload identities and identity governance with Microsoft Entra ID.

Sign in to start preparingExam page
Duration
100 min
Exam questions
40–60
Passing score
700 / 1000
Exam fee
$165
Question formats:Multiple choiceMultiple responseYes / NoYes / No statementsDrag and dropHot areacase study
Free plan
3 free papers
Free account
Mocks locked
Pro only
Upgrade to Pro
Every paper and mock exam.
See Pro

Start with free papers Free

You get 3 free practice papers with your plan.

Free
Mixed paper 1
Domain 1 · 25 questions
Practice
Free
Mixed paper 2
Domain 1 · 25 questions
Practice
Free
Mixed paper 3
Domain 1 · 25 questions
Practice
Pro
Case study: Ostrevan Pharmaceuticals
6 questions · 10 min
Pro
Case study: Quenbury Media Group
6 questions · 10 min

Domain papers 521 questions

Free
Mixed paper 1
25 questions · 60 min
Practice
Free
Mixed paper 2
25 questions · 60 min
Practice
Free
Mixed paper 3
25 questions · 60 min
Practice
Pro
Mixed paper 4
25 questions · 60 min
Pro
Mixed paper 5
16 questions · 39 min
Pro
Mixed paper 6
15 questions · 36 min

Mock exams Pro

Full-length, exam-like practice tests. Available with Pro.

Mock exam 1
50 questions · 100 min
Mock exam 2
50 questions · 100 min
Mock exam 3
50 questions · 100 min

Try a sample question

All 10 sample questions →
Question 1Implement and manage user identities

Consolidated Messenger has five Active Directory forests left over from three acquisitions. Two of the forests have no network connectivity to the other three. The identity team must decide where Microsoft Entra Cloud Sync is a better fit than Microsoft Entra Connect Sync. Which two requirements can Cloud Sync meet that Connect Sync cannot? Each correct answer presents a complete solution. (Choose TWO.)

Choose 2.

  1. A.

    Synchronize users from multiple disconnected Active Directory forests to one Microsoft Entra tenant without any network connectivity between the forests.

  2. B.

    Synchronize Windows device objects to support Microsoft Entra hybrid join.

  3. C.

    Synchronize users and groups so that password hash synchronization can be used for sign-in.

  4. D.

    Filter the objects that are synchronized by organizational unit.

  5. E.

    Provide high availability for synchronization by running several lightweight provisioning agents that share the workload.

  6. F.

    Support Exchange hybrid deployments that require attribute writeback to Active Directory.

Show answer

Answer: A, E

Cloud Sync's differentiators are support for disconnected forests and built-in high availability from multiple lightweight agents; device sync and Exchange hybrid writeback still require Connect Sync.

  • A. Each Cloud Sync agent reaches only its own forest, so disconnected forests can target one tenant.
  • B. Device object synchronization for hybrid join is supported only by Microsoft Entra Connect Sync.
  • C. Both products support password hash synchronization, so it is not a Cloud Sync differentiator.
  • D. Organizational unit filtering exists in both products and therefore decides nothing.
  • E. Multiple lightweight provisioning agents share the load and provide high availability with no staging server.
  • F. Exchange hybrid writeback needs the Connect Sync engine; Cloud Sync does not support it.
ShareLinkedInXWhatsAppFacebook

What's on the exam

4 domains · 16 task statements, straight from the official exam guide (as of October 28, 2026).

  1. 1.1Configure and manage a Microsoft Entra tenant
    • Configure and manage built-in and custom Microsoft Entra roles
    • Recommend when to use administrative units
    • Configure and manage administrative units
    • Evaluate effective permissions for Microsoft Entra roles
    • Configure and manage domains in Microsoft Entra ID and Microsoft 365
    • Configure Company branding settings
    • Configure tenant properties, user settings, group settings, and device settings
  2. 1.2Create, configure, and manage Microsoft Entra identities
    • Create, configure, and manage users
    • Create, configure, and manage groups
    • Manage custom security attributes
    • Automate bulk operations by using the Microsoft Entra admin center and PowerShell
    • Manage device join and device registration in Microsoft Entra ID
    • Assign, modify, and report on licenses
  3. 1.3Implement and manage identities for external users and tenants
    • Manage External collaboration settings in Microsoft Entra ID
    • Invite external users, individually or in bulk
    • Manage external user accounts in Microsoft Entra ID
    • Implement Cross-tenant access settings
    • Implement and manage cross-tenant synchronization
    • Configure external identity providers, including protocols such as SAML and WS-Fed
  4. 1.4Implement and manage hybrid identity
    • Implement and manage Microsoft Entra Connect Sync
    • Implement and manage Microsoft Entra Cloud Sync
    • Implement and manage password hash synchronization
    • Implement and manage pass-through authentication
    • Implement and manage seamless single sign-on (SSO)
    • Migrate from AD FS to other authentication and authorization mechanisms
    • Implement and manage Microsoft Entra Connect Health

Outline reproduced from the vendor's public exam guide for study reference.Official guide

SC-300 practice — frequently asked questions

Are these real SC-300 exam questions?

No. Every question on CertifyCloudx is original, written by us against Microsoft Azure's publicly available SC-300 exam guide to rehearse the skills it lists. None are actual exam questions, and CertifyCloudx is not affiliated with or endorsed by Microsoft Azure.

How many SC-300 practice questions are there?

521 practice questions, including 3 full-length timed mock exams and 51 domain papers of up to 25 questions (mixed and by topic). Every question has a detailed explanation of why the right answer wins and why each distractor loses.

Is the content up to date with the current SC-300 exam guide?

The questions are written against the SC-300 exam guide dated October 28, 2026, and we revise them when Microsoft Azure updates the guide.

What question formats are covered?

The same formats the real SC-300 uses: Multiple choice, Multiple response, Yes / No, Yes / No statements, Drag and drop, Hot area, case study. Each is rendered and graded the way the exam does it.

How long is the SC-300 exam and how many questions does it have?

According to Microsoft Azure's published exam details: 40–60 questions, 100 minutes, passing score 700 / 1000. Our mock exams use the same time limit, with a question count in the middle of that range. Always confirm current details with Microsoft Azure before booking.

Can I practise SC-300 for free?

Yes. 3 papers are free, with up to 10 questions a day on the free plan and no card needed. Pro unlocks every paper and mock exam with no daily limit.

Does CertifyCloudx guarantee that I will pass?

No practice material can guarantee a result. CertifyCloudx helps you find and close your weak areas — accuracy by exam-guide domain and topic shows what to study next.