nerdexam
Microsoft

SC-300 · Question #335

SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in…

The correct approach uses Microsoft Entra Conditional Access to enforce reauthentication intervals. By creating a Conditional Access policy targeting the sg-Legal group and all cloud apps, then configuring the Session control with 'Sign-in frequency' set to 12 hours…

Submitted by emma.c· Mar 6, 2026Implement and manage identity and access in Microsoft 365 - specifically configuring Conditional Access policies to control authentication session behavior, mapped to MS-102: Microsoft 365 Administrator or SC-300: Microsoft Identity and Access Administrator exam objectives.

Question

SIMULATION Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username:[email protected] Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only:

Lab Instance: 99999999 You need to ensure that users in the sg-Legal group must reauthenticate every 12 hours when they access any cloud apps managed by the tenant. To complete this task, sign in to the appropriate admin center. Answer:

Exhibit

SC-300 question #335 exhibit

Explanation

The correct approach uses Microsoft Entra Conditional Access to enforce reauthentication intervals. By creating a Conditional Access policy targeting the sg-Legal group and all cloud apps, then configuring the Session control with 'Sign-in frequency' set to 12 hours, administrators can ensure users must reauthenticate within that timeframe. This is the only built-in mechanism in Microsoft 365 that allows granular control over session lifetime and reauthentication requirements for specific groups and cloud applications.

Topics

#Conditional Access#Microsoft Entra ID#Sign-in Frequency#Session Controls

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice