Exam SC-300 All Questions

View all questions & answers for the SC-300 exam

Exam SC-300 topic 1 question 32 discussion

Actual exam question from Microsoft's SC-300

Question #: 32
Topic #: 1

Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant.
Users sign in to computers that run Windows 10 and are joined to the domain.
You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).
You need to configure the Windows 10 computers to support Azure AD Seamless SSO.
What should you do?

A. Configure Sign-in options from the Settings app.
B. Enable Enterprise State Roaming.
C. Modify the Local intranet Zone settings.
D. Install the Azure AD Connect Authentication Agent.

Show Suggested Answer

Suggested Answer: C 🗳️

by existingname at Sept. 1, 2022, 6:06 a.m.

Comments

Submit Cancel

ShinoIgarashi

Highly Voted 2 years, 9 months ago

The question states: You need to configure the Windows 10 computers to support Azure AD Seamless SSO. The catch is, "configure the Windows 10 computers. The answer is C. This is also a repeated question on the previous page.

upvoted 30 times

jack987

2 years, 5 months ago

I agree, the correct answer is C.

upvoted 2 times

Taigr

2 years, 3 months ago

Question is same, but possible answers are different. Here is LOCAL zone, and it is different than Intranet zone settings. So set answer si right I think.

upvoted 1 times

Taigr

2 years, 3 months ago

OK, back. I found If your organization is planning to use Seamless SSO, then the following URLs need to be reachable from the computers inside your organization and they must also be added to the user's local intranet zone: https://autologon.microsoftazuread-sso.com (enable with GPO) https://aadg.windows.net.nsatc.net (enable with GPO) Also, the following setting should be enabled in the user's intranet zone: "Allow status bar updates via script." Use GPO for this operation.

upvoted 2 times

...

ColdCut

Most Recent 6 months, 4 weeks ago

The correct answer is: C. Modify the Local intranet Zone settings. Explanation: To configure Windows 10 computers for Azure AD Seamless Single Sign-On (Seamless SSO), you need to ensure that users' credentials are automatically passed from their Windows session to Azure AD when accessing cloud resources. This is achieved by configuring the Local intranet zone settings in Internet Explorer or Edge. Azure AD Seamless SSO works by authenticating users seamlessly without prompting for credentials when they access resources in Azure AD. However, for it to work, the Azure AD URLs (like https://autologon.microsoftazuread-sso.com) must be trusted by the browsers on the Windows 10 machines. This is achieved by adding the URLs to the Local intranet zone. Option A (Configuring Sign-in options) and Option B (Enabling Enterprise State Roaming) are not related to enabling Seamless SSO. Option D (Installing the Azure AD Connect Authentication Agent) is also incorrect, as the Authentication Agent is used for Pass-through Authentication (PTA) rather than Seamless SSO. Therefore, Option C is the correct choice to ensure Azure AD Seamless SSO works on Windows 10 computers.

upvoted 3 times

...

emartiy

1 year, 2 months ago

Selected Answer: C

A for implementing Single Sign-on... Question asks what you need to configure on client side.. so, intranet zone links is the only option for this question..

upvoted 1 times

...

emartiy

1 year, 2 months ago

Selected Answer: C

Seamless SSO > ıntranet Zone settings... read more.

upvoted 1 times

...

Er_01

1 year, 4 months ago

I would agree with A being answer as it is the only option but moves the process along but configuring Azure AD option does not "configure the windows 10 client to support SSO". It configures the Azure AD connect server to enable the option on the server, not the windows 10 client. Typical MS question.

upvoted 1 times

...

maneeshs

1 year, 7 months ago

Answer is C

upvoted 1 times

...

BenLam

1 year, 7 months ago

The link for the quick start shows the answer which is C. Scroll down to the Roll out the feature section.

upvoted 1 times

...

MrMicrosoft

1 year, 7 months ago

Selected Answer: C

As in the previous page, answer is C.

upvoted 2 times

...

sherifhamed

1 year, 8 months ago

Selected Answer: C

C. Modify the Local intranet Zone settings. To configure the Windows 10 computers to support Azure AD Seamless SSO, you need to modify the Local intranet Zone settings in Internet Explorer or Microsoft Edge. You need to add the following URL to the Local intranet Zone: https://autologon.microsoftazuread-sso.com. This will allow the browser to send the Kerberos ticket to Azure AD and enable Seamless SSO

upvoted 2 times

...

sherifhamed

1 year, 8 months ago

Selected Answer: C

ChatGPT Answer: To configure Windows 10 computers to support Azure AD Seamless Single Sign-On (Azure AD Seamless SSO), you should: C. Modify the Local intranet Zone settings.

upvoted 3 times

jtlucas99

1 year, 1 month ago

Copilot says: 1. Ensure Prerequisites are Met: Your environment must meet certain prerequisites, which typically include: ○ Azure AD Connect must be installed and configured. ○ The computers must be part of an Active Directory domain. ○ The Azure AD tenant must be configured for Seamless SSO. 2. Enable Seamless SSO: This is done through Azure AD Connect. During the setup, there’s an option to enable Seamless SSO. You need to whitelist all the required URL and Endpoints for Azure AD SSO. 3. Configure Intranet Zone Settings: You need to add the Azure AD URL to the intranet zone in Internet Explorer/Edge settings to allow for automatic sign-in. This can be done via Group Policy. 4. Roll Out the Feature: Gradually roll out Seamless SSO to your users using Group Policy and test it thoroughly.

upvoted 2 times

...