You configure a new Microsoft 365 tenant to use a default domain name of contoso.com. You need to ensure that you can control access to Microsoft 365 resources by using conditional access policies…

The correct answer is B. Disable Security defaults. If your tenant was created on or after October 22, 2019, it is possible security defaults are already enabled in your tenant. To protect all of our users, security defaults are being rolled out to all new tenants created. To enable CAP you have to disable Security defaults…

Submitted by haru.x· Mar 6, 2026Implement authentication and access management solution

Question

You configure a new Microsoft 365 tenant to use a default domain name of contoso.com. You need to ensure that you can control access to Microsoft 365 resources by using conditional access policies. What should you do first?

Options

ADisable the User consent settings.
BDisable Security defaults.
CConfigure a multi-factor authentication (MFA) registration policy.
DConfigure password protection for Windows Server Active Directory.

How the community answered

(45 responses)

A
2% (1)
B
93% (42)
D
4% (2)

Explanation

If your tenant was created on or after October 22, 2019, it is possible security defaults are already enabled in your tenant. To protect all of our users, security defaults are being rolled out to all new tenants created. To enable CAP you have to disable Security defaults. https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals- security-defaults

Topics

#Conditional Access#Security Defaults#Azure AD administration

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice