nerdexam
Microsoft

SC-300 · Question #273

Your organization has an existing Microsoft 365 tenant. The following end-user devices have been onboarded into your tenant: You set up a conditional access policy as shown in the exhibits. The…

The correct answer is B. DeviceF E. DeviceA F. DeviceC. The Conditional Access policy will block DeviceA, DeviceC, and DeviceF from accessing cloud resources in the tenant. The policy Access Control settings is configured to only grant access if to devices that are Hybrid Microsoft Entra joined and located in the UK Office. In this…

Submitted by saadiq_pk· Mar 6, 2026Implement authentication and access management

Question

Your organization has an existing Microsoft 365 tenant. The following end-user devices have been onboarded into your tenant:

You set up a conditional access policy as shown in the exhibits. The support desk receives complaints that users are unable to access cloud resources due to MFA registration failing. You need to report which of the new devices have been blocked from accessing cloud resources. Which three devices does the Conditional Access policy block from accessing cloud resources? Each correct answer presents part of the solution.

Exhibits

SC-300 question #273 exhibit 1
SC-300 question #273 exhibit 2

Options

  • ADeviceE
  • BDeviceF
  • CDeviceD
  • DDeviceB
  • EDeviceA
  • FDeviceC

How the community answered

(40 responses)
  • A
    18% (7)
  • B
    73% (29)
  • C
    8% (3)
  • D
    3% (1)

Explanation

The Conditional Access policy will block DeviceA, DeviceC, and DeviceF from accessing cloud resources in the tenant. The policy Access Control settings is configured to only grant access if to devices that are Hybrid Microsoft Entra joined and located in the UK Office. In this scenario, these three devices are all Microsoft Entra Registered only so they will be blocked and they are all located outside of the UK DeviceB, DeviceD, and DeviceE will all be granted access as they meet the requirement set in the policy of being Hybrid Microsoft Entra joined devices and located in the UK Office.

Topics

#Conditional Access#MFA registration#device filtering#access blocking

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice