Exam SC-300 All Questions

View all questions & answers for the SC-300 exam

Exam SC-300 topic 4 question 60 discussion

Actual exam question from Microsoft's SC-300

Question #: 60
Topic #: 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Amazon Web Services (AWS) account, a Google Workspace subscription, and a GitHub account.

You deploy an Azure subscription and enable Microsoft 365 Defender.

You need to ensure that you can monitor OAuth authentication requests by using Microsoft Defender for Cloud Apps.

Solution: From the Microsoft 365 Defender portal, you add the GitHub app connector.

Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by haazybanj at Nov. 6, 2023, 6:45 p.m.

Comments

Submit Cancel

haazybanj

Highly Voted 1 year, 7 months ago

Selected Answer: B

No, the solution does not meet the goal. Adding the GitHub app connector to Microsoft Defender for Cloud Apps will allow you to monitor OAuth authentication requests from GitHub to Microsoft 365. However, it will not allow you to monitor OAuth authentication requests to your AWS account, Google Workspace subscription, or Azure subscription.

upvoted 6 times

SFAY

1 year, 4 months ago

Wrong, you need all three connectors and Git Hub is one of the available connectors in Defender portal. The other two correct answers are - AWS connector and Google Workspace connector.

upvoted 5 times

...

Obi_Wan_Jacoby

Most Recent 4 weeks ago

Selected Answer: B

Answer: B (No). Yes, you can add connectors for all of it, but the questions states "you add the GitHub app connector" and does it meet the goal? No, as you need it for ALL. This is part of a series and other questions ask about one of the other connectors and ask rather or not that meets the goal.

upvoted 1 times

...

Labelfree

6 months, 3 weeks ago

Selected Answer: B

Even though this is one component to setup for the intended goal, the question redirects the the wrong source to set these up which most of you are missing and makes it definitely false. Microsoft Defender for Cloud Apps (MDCA) itself (not Microsoft 365 Defender) is where third-party app connectors like GitHub, AWS, or Google Workspace are configured.

upvoted 2 times

...

thetootall

10 months, 3 weeks ago

Selected Answer: B

On Exam 7/18/24, answered B Adding the GitHub app connector to Microsoft Defender for Cloud Apps will allow you to monitor OAuth authentication requests from GitHub to Microsoft 365. However, it will not allow you to monitor OAuth authentication requests to your AWS account, Google Workspace subscription, or Azure subscription.

upvoted 4 times

...

Alcpt

1 year ago

Selected Answer: A

A. This section provides instructions for connecting Microsoft Defender for Cloud Apps to your existing GitHub Enterprise Cloud organization using the App Connector API. https://learn.microsoft.com/en-us/defender-cloud-apps/protect-github

upvoted 1 times

...

francescoc

1 year, 2 months ago

Selected Answer: B

The Microsoft Defender for Cloud Apps app permissions enable you to see which user-installed OAuth applications have access to Microsoft 365 data, Google Workspace data, and Salesforce data. Defender for Cloud Apps tells you what permissions the apps have and which users granted these apps access to their Microsoft 365, Google Workspace, and Salesforce accounts. https://learn.microsoft.com/en-us/defender-cloud-apps/manage-app-permissions#oauth-app-auditing

upvoted 4 times

Alcpt

1 year ago

According to this MS document there is a connector for each platform. This section provides instructions for connecting Microsoft Defender for Cloud Apps to your existing GitHub Enterprise Cloud organization using the App Connector API. https://learn.microsoft.com/en-us/defender-cloud-apps/protect-github

upvoted 1 times

...

penatuna

1 year, 3 months ago

Selected Answer: B

OAuth app management is available only after connecting one or more of the supported platforms - Microsoft 365, Google Workspace, or Salesforce. Once connected, the OAuth apps menu option will appear under Investigate. App Governance is a set of security and policy management capabilities designed for OAuth-enabled apps registered on Azure Active Directory (Azure AD), Google, and Salesforce. For more information, see App governance add-on to Defender for Cloud Apps in Microsoft 365 Defender.

upvoted 3 times

penatuna

1 year, 3 months ago

Many third-party productivity apps that might be installed by business users in your organization request permission to access user information and data and sign in on behalf of the user in other cloud apps, such as Microsoft 365, Google Workspace and Salesforce. When users install these apps, they often click accept without closely reviewing the details in the prompt, including granting permissions to the app. This problem is compounded by the fact that IT may not have enough insight to weigh the security risk of an application against the productivity benefit that it provides. Because accepting third-party app permissions is a potential security risk to your organization, monitoring the app permissions your users' grant gives you the necessary visibility and control to protect your users and your applications.

upvoted 1 times

penatuna

1 year, 3 months ago

The Microsoft Defender for Cloud Apps app permissions enable you to see which user-installed OAuth applications have access to Microsoft 365 data, Google Workspace data, and Salesforce data. Defender for Cloud Apps tells you what permissions the apps have and which users granted these apps access to their Microsoft 365, Google Workspace, and Salesforce accounts. App permissions help you decide which apps you allow your users to access and which ones you want to ban. https://learn.microsoft.com/en-us/defender-cloud-apps/manage-app-permissions

upvoted 1 times

...

siffy

1 year, 4 months ago

Selected Answer: A

A for me

upvoted 3 times

...

Er_01

1 year, 4 months ago

You can monitor OAuth from github so yes it does, as the question does not state which platform is to be monitored, so any of them would fit. The question is bad as it should specify which platform is to be monitored as there are multiple connectors to various ones.

upvoted 3 times

Ody

1 year, 3 months ago

Agreed. If the goal is to monitor all 3 of them, installing only one connector does not meet the requirement. Configure Defender for Cloud Apps In the Microsoft Defender Portal, select Settings. Then choose Cloud Apps. Under Connected apps, select App Connectors. In the App connectors page, select +Connect an app, followed by GitHub. https://learn.microsoft.com/en-us/defender-cloud-apps/protect-github

upvoted 3 times

...

einkaufacs

1 year, 4 months ago

Selected Answer: A

There are Google Workspace, GitHub and AWS App-connectors. So I go with A https://learn.microsoft.com/en-us/defender-cloud-apps/protect-github

upvoted 4 times

Alcpt

1 year ago

fully agree - A. This section provides instructions for connecting Microsoft Defender for Cloud Apps to your existing GitHub Enterprise Cloud organization using the App Connector API. https://learn.microsoft.com/en-us/defender-cloud-apps/protect-github

upvoted 2 times

...