SC-300 · Question #234
You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com. Several users use their contoso.com email address for self-service sign-up to Azure AD. You gain global…
The correct answer is B. Update-MgPolicyPermissionGrantPolicyExclude. The Update-MgPolicyPermissionGrantPolicyExclude cmdlet is used to exclude a policy from being applied to a specific set of users. In this case, you can use the cmdlet to exclude the self- service sign-up policy from being applied to users with the contoso.com SMTP address space.
Question
You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com. Several users use their contoso.com email address for self-service sign-up to Azure AD. You gain global administrator privileges to the Azure AD tenant that contains the self-signed users. You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services. Which PowerShell cmdlet should you run?
Options
- AUpdate-MgOrganization
- BUpdate-MgPolicyPermissionGrantPolicyExclude
- CUpdate-MgDomain
- DUpdate-MgDomainFederationConfiguration
How the community answered
(41 responses)- A10% (4)
- B83% (34)
- C5% (2)
- D2% (1)
Explanation
The Update-MgPolicyPermissionGrantPolicyExclude cmdlet is used to exclude a policy from being applied to a specific set of users. In this case, you can use the cmdlet to exclude the self- service sign-up policy from being applied to users with the contoso.com SMTP address space.
Topics
Community Discussion
No community discussion yet for this question.