Exam SC-300 All Questions

View all questions & answers for the SC-300 exam

Exam SC-300 topic 1 question 60 discussion

Actual exam question from Microsoft's SC-300

Question #: 60
Topic #: 1

HOTSPOT -

Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with Azure AD and contains the users shown in the following table.

In Azure AD Connect, Domain/OU Filtering is configured as shown in the following exhibit.

Azure AD Connect is configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by niesz1 at Oct. 9, 2023, 6:36 p.m.

Comments

Submit Cancel

niesz1

Highly Voted 1 year, 10 months ago

YES YES NO- User 2 is not synced to 365

upvoted 37 times

Das_Duck

10 months, 1 week ago

I agree, YES - Password writeback requires an Entra ID P1 license and by default SSPR is enabled (Always assume default settings in these questions unless given otherwise.) YES NO - Since OU filtering is being enable and User 2 is in an OU not being synced they will not be added as a member but can still be added as a GUEST.

upvoted 4 times

AcTiVeGrEnAdE

3 months, 3 weeks ago

By default, SSPR is disabled for all users AND it must be configured in Entra Id and the Entra Connect Sync engine with password writeback for it to work properly.

upvoted 1 times

...

Another_one

Highly Voted 1 year, 10 months ago

NO YES NO By default SSPR is enabled, but not configured. You have to configure SSPR for users to be able to use it.

upvoted 16 times

OrangeSG

1 year, 9 months ago

Password write-backup are enabled in the last screenshoot.

upvoted 6 times

...

omnomsnom

1 year, 1 month ago

Agree, plus SSPR and password writeback require Entra ID P1 license as well. Nothing is known about the license status or SSPR service config, so we can't say that User 1 can use SSPR.

upvoted 2 times

test123123

7 months, 2 weeks ago

By default Self service password reset enabled is set to "None" for normal users in Entra ID - Password reset Blade. It is always enabled for admins. Ive checked on 3 different new tenants. So the answer should be: NO (Assume default value NONE) YES (Because auth is PTA) NO (User 2 not in the standard Users OU so is not synched from onprem AD to cloud)

upvoted 2 times

...

Giuseppe_Geraci

Most Recent 3 months ago

No - Yes - No. SSPR is enabled by defaut but must be configured before use it.

upvoted 1 times

...

AcTiVeGrEnAdE

3 months, 3 weeks ago

NO YES NO based on screenshots, SSPR is not configured anywhere. SSPR must be configured in Entra ID and the sync engine. Also, there is not "update password in cloud only" for directory synced users....

upvoted 3 times

...

noa808a

5 months, 1 week ago

For those lost in the comments like I am: YES YES YES: Currently at 1 vote YES YES NO: Currently at 5 votes NO YES NO: Currently at 4 votes

upvoted 1 times

...

YesPlease

6 months ago

YES - They can use SSPR, but it will only update the cloud password and not the on-premises password. This is because HASH is turned OFF YES - Passthrough authentication is turned ON NO - User2 is not synced

upvoted 1 times

...

Frank9020

6 months, 3 weeks ago

1 - User1: No. Reason: Azure AD Connect is configured to disable password hash synchronization, and User1 is from OU1, which is synchronized. However, for self-service password reset (SSPR) to work, either password hash synchronization or pass-through authentication with SSPR enabled is required. Since password hash synchronization is disabled, User1 cannot use SSPR. 2 - User1: Yes. Reason: Azure AD Connect is configured with Pass-through authentication (PTA) and password hash synchronization is disabled. With PTA enabled, authentication requests for User1 will be forwarded to the on-premises Active Directory Domain Controller for verification. 3 - User2: No. Reason: In the Domain/OU Filtering settings, OU2 is not selected for synchronization, meaning User2 is not being synchronized to Azure AD. Since User2 does not exist in Azure AD, he cannot be added as a member to a SharePoint Online site.

upvoted 1 times

Sunth65

6 months, 3 weeks ago

NB! But pass-through authentication and Password writeback are enabled in this case !

upvoted 1 times

Frank9020

6 months, 2 weeks ago

Yes, you are right about that, but SSPR must be explicitly enabled in Azure AD for users to reset passwords, and if you read the question on top, this is a sync config in Azure AD. Password Writeback only allows changes to be written back to on-prem AD, but it does not enable the self-service reset functionality by itself. Without SSPR enabled, users would have no way to initiate a password reset via Azure AD. SSPR (Self-Service Password Reset) is a separate feature that must be enabled in Azure AD for users to reset their passwords if they forget them.

upvoted 1 times

...

Siraf

1 year, 7 months ago

It looks like all users are synced according to the check box at the bottom. So, even if OU2 is not synced, user2 will be synced. If this is the case, the correct answer will be Yes - Yes - Yes

upvoted 6 times

Fijii

5 months, 3 weeks ago

What you see "Users" is the default users OU, it does not mean "all the users" I think it's meant to trick people. User2 is in the OU2, not in the Users OU. Since OU2 is not synced, User2 will not be synced.

upvoted 1 times

...

penatuna

1 year, 7 months ago

Even if there is Users selected in Domain and OU filtering, User2 is not selected. You can test this in ADUC: If you make new user in OU, it does not appear in Users, only in OU.

upvoted 5 times

...

Kali13

1 year, 9 months ago

NO : password hash synchronization is disabled YES : PTA is enabled NO : No Sync to AAD

upvoted 2 times

mohamedbenamor

1 year ago

Password Write back requires PTA

upvoted 1 times

...

Nivos23

1 year, 9 months ago

In my opinion it is yes yes no

upvoted 4 times

...