SC-300 · Question #234
SC-300 Question #234: Real Exam Question with Answer & Explanation
The correct answer is B: Update-MgPolicyPermissionGrantPolicyExclude. The Update-MgPolicyPermissionGrantPolicyExclude cmdlet is used to exclude a policy from being applied to a specific set of users. In this case, you can use the cmdlet to exclude the self- service sign-up policy from being applied to users with the contoso.com SMTP address space.
Question
You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com. Several users use their contoso.com email address for self-service sign-up to Azure AD. You gain global administrator privileges to the Azure AD tenant that contains the self-signed users. You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services. Which PowerShell cmdlet should you run?
Options
- AUpdate-MgOrganization
- BUpdate-MgPolicyPermissionGrantPolicyExclude
- CUpdate-MgDomain
- DUpdate-MgDomainFederationConfiguration
Explanation
The Update-MgPolicyPermissionGrantPolicyExclude cmdlet is used to exclude a policy from being applied to a specific set of users. In this case, you can use the cmdlet to exclude the self- service sign-up policy from being applied to users with the contoso.com SMTP address space.
Community Discussion
No community discussion yet for this question.