SC-300 decision sheets

• Where to create each type of access review
• Administrative unit scope: what it does and does not cover
• Choosing an Entra authentication method
• Custom security attributes: scope and delegation
• Defender for Cloud Apps: which control
• Entitlement management: which assignment mechanism
• Entra ID Free vs P1 vs P2 vs Governance
• Global Secure Access: Internet Access vs Private Access
• Cross-tenant group sync and role-assignable groups
• Cloud Sync vs Connect Sync vs PTA vs PHS vs AD FS
• Synced vs device-bound passkeys
• Controlling token lifetime and session revocation
• System vs user-assigned managed identity vs service principal