Microsoft
SC-300 · Question #286
Your on-premises network contains an Active Directory Domain Services (AD DS) domain and a certification authority (CA) named CA1. You have an Azure AD tenant. You need to implement certificate-based
Sign in or unlock SC-300 to reveal the answer and full explanation for question #286. The question stem and answer options stay visible for context.
Submitted by khalil_dz· Mar 6, 2026Implement authentication and access management
Question
Your on-premises network contains an Active Directory Domain Services (AD DS) domain and a certification authority (CA) named CA1. You have an Azure AD tenant. You need to implement certificate-based authentication in Azure AD. The solution must ensure that users can sign in by using certificates issued by CA1. What should you do first?
Options
- ADeploy an Azure key vault.
- BAdd CA1 as a Certificate Authority to the Microsoft Entra ID tenant.
- CEnable auto-enrollment for CA1.
- DDeploy Windows Hello for Business.
Unlock SC-300 to see the answer
You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#certificate-based authentication#Certificate Authority#Azure AD CBA#CA trust