Discuss Microsoft SC-300 Exam Topic 4 Question 14

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory forest.

You discover that when a user account is disabled in Active Directory, the disabled user can still authenticate to Azure AD for up to 30 minutes.

You need to ensure that when a user account is disabled in Active Directory, the user account is immediately prevented from authenticating to Azure AD.

Solution: You configure pass-through authentication.

Does this meet the goal?

AYes

BNo

Suggested Answer: A

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn

Get Premium SC-300 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Hannah 12 months ago

Just a fact: pass-through authentication is for on-prem authentication only.

Sabina 1 year ago

Nope, still a 30-minute window with that setup.

Lajuana 1 year ago

Wait, I thought it would work instantly?

Sophia 1 year ago

Totally agree, it won't meet the goal!

Laurel 1 year ago

Pass-through authentication doesn't solve the delay issue.

Val 1 year ago

I thought pass-through authentication was meant to improve user experience, but I can't remember if it affects the timing of account disablement in Azure AD.

Nada 1 year ago

I recall that there was a delay in authentication when using certain methods. I’m uncertain if configuring pass-through authentication changes that delay.

Bernadine 1 year ago

I think I practiced a similar question where we had to ensure immediate access revocation. I feel like pass-through might not be the right answer here.

Elliott 1 year ago

I remember that pass-through authentication allows users to authenticate directly against Active Directory, but I'm not sure if it immediately blocks access when an account is disabled.

Phil 1 year ago

I've got this one! The answer is B - an event fires without a conversion variable. I remember learning about that in class.

Leslie 1 year ago

Hmm, I'm a bit unsure about this one. I know the orchestration plane handles some management functions, but I can't recall the specific details. I'll have to think this through carefully.

Ashton 1 year ago

This is a good question to test our knowledge of Oracle User Management's self-service capabilities. I'll review the options and select the three that best fit the description of self-service registration tasks for an end user.

Carry 1 year ago

I feel like one condition is definitely about the parent having investments that aren't fully owned, but I need to check what the other condition is.

Kasandra 1 year ago

Okay, I've got this. From what I remember, ACK supports a range of vGPU ratios, and the options given here cover the most common ones. I'll review the details and select the best answer.

Microsoft SC-300 Exam - Topic 4 Question 14 Discussion