Microsoft SC-300 Exam - Topic 1 Question 15 Discussion

Actual exam question for Microsoft's SC-300 exam

Question #: 15
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory forest.

You discover that when a user account is disabled in Active Directory, the disabled user can still authenticate to Azure AD for up to 30 minutes.

You need to ensure that when a user account is disabled in Active Directory, the user account is immediately prevented from authenticating to Azure AD.

Solution: You configure password writeback.

Does this meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn

by Izetta at May 08, 2022, 07:33 AM

Limited Time Offer

25%

Off

Get Premium SC-300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brynn

10 months ago

Yeah, this is a common misconception!

upvoted 0 times

...

Lenora

11 months ago

Nope, that's not the right solution.

upvoted 0 times

...

Haydee

11 months ago

Wait, I thought password writeback was for syncing passwords only?

upvoted 0 times

...

Rueben

11 months ago

Totally agree, it won't solve the issue.

upvoted 0 times

...

Nada

11 months ago

Password writeback doesn't stop authentication immediately.

upvoted 0 times

...

Han

11 months ago

From what I studied, it seems like we need to look into other settings, like conditional access policies, to achieve immediate lockout.

upvoted 0 times

...

Georgeanna

11 months ago

I'm a bit unsure, but I feel like password writeback is more about syncing passwords rather than disabling accounts immediately.

upvoted 0 times

...

Jovita

11 months ago

I remember a practice question where we had to ensure instant revocation of access, and I don't think password writeback was the right solution there either.

upvoted 0 times

...

Sharan

11 months ago

I think configuring password writeback might not directly address the issue of immediate authentication prevention.

upvoted 0 times

...

Tyra

11 months ago

I'm pretty confident this is related to permissions. The question states the AEM Developer can't run the Best Practice Analyzer, so it's likely they don't have the necessary admin rights.

upvoted 0 times

...

Soledad

11 months ago

Okay, I think I've got a strategy for this. I'll go through the options one by one and see which one doesn't match the other objectives listed.

upvoted 0 times

...

Maryln

11 months ago

I'm a little confused by this question. The NDC number has a lot of different elements, so I'm not sure which part the last two digits correspond to. I'll have to think it through carefully.

upvoted 0 times

...

Josue

11 months ago

Hmm, I'm a bit confused on the difference between retained-mode and immediate-mode. I'll have to think this through carefully.

upvoted 0 times

...