Exam SC-300 All Questions

View all questions & answers for the SC-300 exam

Exam SC-300 topic 3 question 1 discussion

Actual exam question from Microsoft's SC-300

Question #: 1
Topic #: 3

HOTSPOT -
You have a Microsoft 365 tenant and an Active Directory domain named adatum.com.
You deploy Azure AD Connect by using the Express Settings.
You need to configure self-service password reset (SSPR) to meet the following requirements:
✑ When users reset their password, they must be prompted to respond to a mobile app notification or answer three predefined security questions.
✑ Passwords must be synced between the tenant and the domain regardless of where the password was reset.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-security-questions

by AS007 at June 7, 2021, 8:54 p.m.

Comments

Submit Cancel

girikedar

Highly Voted 3 years, 6 months ago

Both The Answer is Correct 1) You have Go to Azure active directory > under Manage section Password reset blade > Authentication methods & check the Security Questions 2) Inorder to sync password between Domain & tenant either you have to do password hash sync & Pass through authentication with password writeback enable in Azure Ad Connect.

upvoted 23 times

...

Jun143

Highly Voted 3 years, 3 months ago

just pass the exam today. This came in the question.

upvoted 12 times

jimmyjose

1 year, 8 months ago

Answering this particular question correctly or incorrectly does not dictate your exam result. Please refrain from answering this way; it adds no value to edam takers, please. I request the moderator of examtopics from submitting such responses unless I am missing a point here.

upvoted 4 times

Obi_Wan_Jacoby

2 months, 1 week ago

Seems like he was just saying the question is still valid in the exam.

upvoted 1 times

...

calom52

7 months, 3 weeks ago

its not that serious bro

upvoted 3 times

...

Obi_Wan_Jacoby

Most Recent 2 months, 1 week ago

Answer looks correct. When you deploy Azure AD Connect using the Express Settings, you can enable the Password write-back option without needing to first enable pass-through authentication. The Express Settings include the necessary configurations to support password write-back, allowing password changes in Azure AD to be synchronized back to your on-premises Active Directory

upvoted 1 times

...

EmnCours

1 year, 10 months ago

1. Authentication methods 2. Password writeback

upvoted 3 times

...

dule27

2 years ago

1. Authentication methods 2. Password writeback

upvoted 1 times

...

Pedro2021

2 years, 5 months ago

Correct

upvoted 1 times

...

[Removed]

2 years, 6 months ago

Answers are correct.

upvoted 1 times

...

zmlapq99

3 years, 4 months ago

On exam few days ago.

upvoted 4 times

...

gills

3 years, 11 months ago

Express install of AD Connect does not allow Password Write back as an option. Only Password Hash Sync is. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-select-installation

upvoted 3 times

bizquit

3 years, 10 months ago

Yes, but from the same link: Options where you can still use Express: You want to enable one of the features in Azure AD Premium, such as Password writeback. First go through express to get the initial installation completed. Then run the installation wizard again and change the configuration options. Password hash sync is definitely not doing the sync between Azure and on-prem, the other answers are also not correct so it must be "Password Write Back"

upvoted 3 times

...

Bloembar

3 years, 11 months ago

Incorrect express does support password writeback

upvoted 5 times

...

cdizzle

3 years, 10 months ago

The exhibit says "You deploy Azure AD Connect by using the Express Settings." I would take that to mean the actions you have to complete are done AFTER the successful deployment. Meaning you could then enable "Password Write Back".

upvoted 7 times

...

melatocaroca

3 years, 11 months ago

Questions can be used during the self-service password reset (SSPR) process to confirm who you are. Administrator accounts can't use security questions as verification method with SSPR. When users register for SSPR, they're prompted to choose the authentication methods to use. If they choose to use security questions, they pick from a set of questions to prompt for and then provide their own answers. Password writeback can be used to synchronize password changes in Azure AD back to your on-premises AD DS environment. Azure AD Connect provides a secure mechanism to send these password changes back to an existing on-premises directory from Azure AD. https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-security-questions https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback

upvoted 4 times

...