Exam SC-300 All Questions

View all questions & answers for the SC-300 exam

Exam SC-300 topic 3 question 39 discussion

Actual exam question from Microsoft's SC-300

Question #: 39
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Amazon Web Services (AWS) account, a Google Workspace subscription, and a GitHub account.

You deploy an Azure subscription and enable Microsoft 365 Defender.

You need to ensure that you can monitor OAuth authentication requests by using Microsoft Defender for Cloud Apps.

Solution: From the Microsoft 365 Defender portal, you add the Amazon Web Services app connector.

Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by ACSC at Oct. 4, 2023, 3:36 a.m.

Comments

Submit Cancel

JimboJones99

Highly Voted 1 year, 8 months ago

Selected Answer: A

A: Yes https://learn.microsoft.com/en-us/defender-cloud-apps/connect-aws

upvoted 8 times

...

loaysalameh

Highly Voted 1 year, 4 months ago

Selected Answer: B

No, adding the Amazon Web Services (AWS) app connector in the Microsoft 365 Defender portal does not meet the goal of monitoring OAuth authentication requests by using Microsoft Defender for Cloud Apps. The Amazon Web Services (AWS) app connector in the Microsoft 365 Defender portal is used to connect and monitor AWS resources and activities for security purposes within the Microsoft 365 Defender environment. However, it is not designed to monitor OAuth authentication requests for AWS services. To monitor OAuth authentication requests for AWS, you would typically need to use AWS CloudTrail or other AWS monitoring and logging services provided by AWS itself, not Microsoft Defender for Cloud Apps

upvoted 6 times

...

Obi_Wan_Jacoby

Most Recent 2 months, 1 week ago

Selected Answer: B

Answer B: NO. Steps to Monitor OAuth Authentication Requests Add Connectors for Each Service: AWS: Add the AWS app connector to monitor OAuth authentication requests for AWS. GitHub: Add the GitHub app connector to monitor OAuth authentication requests for GitHub. Google Workspace: Add the Google Workspace app connector to monitor OAuth authentication requests for Google Workspace. Why Separate Connectors Are Needed Service-Specific Integration: Each connector is designed to integrate with the specific service's API and authentication mechanisms. Comprehensive Monitoring: Adding connectors for each service ensures that you can monitor and manage OAuth authentication requests across all your accounts effectively

upvoted 1 times

...

Labelfree

7 months, 2 weeks ago

Yes and No. Depending on how the actual question is worded on the actual exam. This meets 1/3 of the goal in that it allows you to monitor the AWS OAuth portion but does nothing for Google and GitHub.

upvoted 2 times

...

JuanZ

1 year, 2 months ago

Selected Answer: B

https://learn.microsoft.com/en-us/defender-cloud-apps/app-permission-policy app selection O365 Google Workspace Sale force

upvoted 4 times

...

klayytech

1 year, 2 months ago

Selected Answer: B

Currently, Microsoft Defender for Cloud Apps supports monitoring OAuth authentication requests for platforms like Microsoft 365, Google Workspace, and Salesforce1. However, as of my knowledge cutoff in 2021, there is no direct support for monitoring OAuth authentication requests for AWS services using Microsoft Defender for Cloud Apps. For AWS services, you might want to consider using AWS’s native security tools such as AWS CloudTrail, which provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting. https://learn.microsoft.com/en-us/defender-cloud-apps/manage-app-permissions

upvoted 4 times

...

KRISTINMERIEANN

1 year, 2 months ago

Selected Answer: A

https://learn.microsoft.com/en-us/defender-cloud-apps/connect-aws

upvoted 2 times

...

Nielll

1 year, 3 months ago

Selected Answer: B

The AWS app connector in MDCA likely deals with data access or security posture management for AWS resources within the context of Microsoft 365, not monitoring OAuth requests to AWS.

upvoted 2 times

...

SFAY

1 year, 5 months ago

Selected Answer: A

100% A See step 2 on https://learn.microsoft.com/en-us/defender-cloud-apps/protect-aws#connect-aws-to-microsoft-cloud-app-security. Similarly connectors for Google & Git can be added.

upvoted 4 times

...

yawb

1 year, 5 months ago

Selected Answer: B

OAuth app management is available only after connecting one or more of the supported platforms - Microsoft 365, Google Workspace, or Salesforce. Once connected, the OAuth apps menu option will appear under Investigate. https://learn.microsoft.com/en-us/defender-cloud-apps/manage-app-permissions

upvoted 4 times

...

Sorrynotsorry

1 year, 7 months ago

Selected Answer: B

AWS is not an option to add in MDCA

upvoted 3 times

...

OrangeSG

1 year, 7 months ago

Selected Answer: B

Solution: From the Microsoft 365 Defender portal, you add the Google Workspace app connector.

upvoted 3 times

...

ACSC

1 year, 8 months ago

Selected Answer: B

https://learn.microsoft.com/en-us/defender-cloud-apps/manage-app-permissions

upvoted 3 times

syougun200x

1 year, 8 months ago

Thanks, found the below on the linked page. OAuth app management is available only after connecting one or more of the supported platforms - Microsoft 365, Google Workspace, or Salesforce. Once connected, the OAuth apps menu option will appear under Investigate.

upvoted 6 times

...