Discuss Microsoft SC-300 Exam Topic 6 Question 13

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory forest.

You discover that when a user account is disabled in Active Directory, the disabled user can still authenticate to Azure AD for up to 30 minutes.

You need to ensure that when a user account is disabled in Active Directory, the user account is immediately prevented from authenticating to Azure AD.

Solution: You configure conditional access policies.

Does this meet the goal?

AYes

BNo

Suggested Answer: B

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn

Get Premium SC-300 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

15 comments · newest first

Lindsey 12 months ago

Not sure if that will work immediately though...

Shakira 1 year ago

Yes, this definitely meets the goal.

Murray 1 year ago

Wait, 30 minutes? That's a long time for a disabled account!

Fallon 1 year ago

I don't think that's the right solution.

Desire 1 year ago

Conditional access policies can help with that!

Nina 1 year ago

I feel like I read somewhere that there’s a grace period for authentication after disabling an account, so I'm leaning towards "No" for this one.

Deeanna 1 year ago

I think conditional access policies are more about controlling access based on conditions rather than immediate account status.

Omer 1 year ago

This seems similar to a practice question we did on account management, but I thought the delay was more about sync timing rather than policies.

Kristeen 1 year ago

I remember studying about conditional access policies, but I'm not sure if they can immediately block access after disabling an account.

Shaniqua 1 year ago

I've got a good feeling about this one. I think the answer is A. audit, but I'll review the other choices just to be safe.

Ryan 1 year ago

If I recall correctly, it doesn't matter which directory you use, but that seems wrong. There's definitely a distinction in their purposes.

Derick 1 year ago

This is a good opportunity to apply my knowledge of Scrum principles. I'll carefully consider each option and think about how they align with the goals of the Sprint Retrospective.

Stephaine 1 year ago

I think the figure might be 13,161, but I can't remember if that's adverse or favorable. I hope I can recall the formulas in time!

Douglass 1 year ago

Hmm, I'm a bit unsure about this one. I'll need to double-check the formula for interest cover and make sure I'm applying it correctly.

Colby 1 year ago

Hmm, this seems like a pretty straightforward networking question. I think I've seen something about Cisco WSA port assignments in my studies, so I'll try to recall that information.

Microsoft SC-300 Exam - Topic 6 Question 13 Discussion