SC-100 Certification Practice Question #170

Question

You have a Microsoft 365 tenant named contoso.com.

You need to ensure that users can authenticate only to contoso.com. The solution must meet the following requirements:

•	Prevent the users from authenticating to other Microsoft 365 tenants.
•	Minimize administrative effort.

What should you use?

Accepted Answer

The requirement is to prevent users from authenticating to any Microsoft 365 tenant other than contoso.com while minimizing administrative effort. Microsoft Entra Internet Access (part of Global Secure Access) enforces Tenant Restrictions v2 via Universal Tenant Restrictions, which tags all traffic and blocks authentication to unauthorized external tenants without the legacy corporate-proxy/header-injection setup — directly satisfying both the "prevent" and "minimize admin effort" conditions. Private Access (A) targets private/on-premises apps, Defender for Endpoint (B) is endpoint protection, and the classic Defender for Cloud Apps approach (D) requires proxy or Conditional Access plumbing, so it loses on administrative effort. Suggested Answer, the 13-vote community majority, and MS Learn all converge on C; the A/D dissents reflect older or alternative methods rather than the lowest-effort solution, so confidence is high-80s.

More SC-100 practice questions