Exam SC-300 topic 1 question 58 discussion

I think "A". https://learn.microsoft.com/en-us/azure/active-directory/external-identities/one-time-passcode (At the end of page) --Frequently asked questions-- What happens to my existing guest users if I enable email one-time passcode? Your existing guest users won't be affected if you enable email one-time passcode, as your existing users are already past the point of redemption. Enabling email one-time passcode will only affect future redemption process activities where new guest users are redeeming into the tenant. Say: Your existing guest users won't be affected... User1 is already inside. So it doesn't affect him.

When does a guest user get a one-time passcode? When a guest user redeems an invitation or uses a link to a resource that has been shared with them, they’ll receive a one-time passcode if: They don't have a Microsoft Entra account. They don't have a Microsoft account. The inviting tenant didn't set up federation with social (like Google) or other identity providers. They don't have any other authentication method or any password-backed accounts. Email one-time passcode is enabled. Obviously, @outlook.com is a Microsoft account, won't receive a passcode.

User2 only, It will receive a one-time passcode email because: They are not part of the tenant. They haven’t accessed any resources before. Their email is not part of Azure AD or federated. OTP is the fallback authentication mechanism for such guests.

has to be B

- User1 ([email protected]) will receive a passcode if their authentication method is not stored. - User2 ([email protected]) will not receive a passcode because they are not yet invited. - User3 ([email protected]) will not receive a passcode as they are an internal user.

The question is testing your knowledge of WHEN passcodes are sent. One-Time Passcodes for invitations are not sent to existing users. Therefore, A is correct.

In this scenario, only User 2 ends up receiving a one‐time passcode. Here’s why: User1 is already a guest in the tenant (B2B account). Since they have an existing guest identity in Fabrikam’s Azure AD, they can sign in with their existing credentials rather than needing a one‐time passcode. User2 has never accessed Fabrikam, so when first invited, they are treated as a new external user. Because the tenant’s settings allow guests from “any domain” and one‐time passcodes are enabled, User2 will be emailed a passcode for sign‐in. User3 is an internal user in Fabrikam (same domain), so they already have a native Fabrikam account. They will authenticate as a regular member, not via a guest passcode flow. Thus, with the tenant configured for one‐time passcodes (and no existing guest account for User2), User 2 is the only one who will receive an emailed passcode.

Answer B: When does a guest user get a one-time passcode? When a guest user redeems an invitation or uses a link to a resource that has been shared with them, they’ll receive a one-time passcode if: - They don't have a Microsoft Entra account. - They don't have a Microsoft account. - The inviting tenant didn't set up federation with social (like Google) or other identity providers. - They don't have any other authentication method or any password-backed accounts. - Email one-time passcode is enabled.

has to be B

User2 only

Outlook is Microsoft account and is autheticated by Microsoft itself whithout needing passcodes.

This is currently in the test bank of questions and has a different option toggled for Guest Invite Settings. Based on the configuration in THIS photo the correct answer is None. The ability to invite guests is locked to specific users and admin roles, bsmith does not have a specific role or permission in the example, therefore we should assume he cannot. In the exam bank test questions the Guest Invite settings are set to the first radio option. The question is testing your knowledge of when one time pass codes are sent.

User1 authenticates with email one-time passcode [email protected] authenticates at Microsoft [email protected] authenticates at the own domain When does a guest user get a one-time passcode? When a guest user redeems an invitation or uses a link to a resource that has been shared with them, they’ll receive a one-time passcode if: They don't have a Microsoft Entra account. They don't have a Microsoft account. The inviting tenant didn't set up federation with social (like Google) or other identity providers. They don't have any other authentication method or any password-backed accounts. Email one-time passcode is enabled. https://learn.microsoft.com/en-us/entra/external-id/one-time-passcode#when-does-a-guest-user-get-a-one-time-passcode

one-time passcode is used for guest that don't have a Microsoft account

Just tested this in an environment with the exact same settings as shown in the exhibit and no users need to login with an OTP they all just get the mail of a shared file and then they can open it without reauthenticating. So NO ANSWER is correct

Should be A.

I think the answer is "B" because (1) It doesn't mention one-time passcode is disabled and according to the following article, the one-time passcode is enabled by default. https://learn.microsoft.com/en-us/entra/external-id/one-time-passcode#:~:text=one%2Dtime%20passcodes-,The%20email%20one%2Dtime%20passcode%20feature%20is%20now%20turned%20on%20by%20default%20for%20all%20new%20tenants%20and%20for%20any%20existing%20tenants%20where%20you%20haven%27t%20explicitly%20turned%20it%20off.,-This%20feature%20provides (2) Outlook.com is already a Microsoft account.