SC-100 Certification Practice Question #77

Question

Your network contains an Active Directory Domain Services (AD DS) domain named Domain1.

You have a Microsoft Entra tenant.

Domain1 syncs with the tenant by using Microsoft Entra Connect.

You need to evaluate Microsoft Entra smart lockout by testing the following account lockout considerations:

•	The number of failed sign-in attempts that trigger a lockout
•	The duration of the lockout

What should you use to test each consideration? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

The question asks where you test Microsoft Entra **smart lockout** behavior — the failed-attempt threshold and the lockout duration. MS Learn shows both the *Lockout threshold* (number of failed sign-ins before lockout) and *Lockout duration in seconds* are smart-lockout values managed in the Microsoft Entra admin center; smart lockout is a cloud-based capability of Microsoft Entra ID. AD DS has its own separate account-lockout policy, but smart lockout itself (and therefore the testing of its threshold and duration) lives in Entra ID, so both rows are "Microsoft Entra ID only." The discussion is effectively unanimous, led by jim85's doc-cited 4👍/3👍 pair and 424ede1's link to the exact "Manage smart lockout values" section. Confidence is 88 (not higher) only because no official Suggested Answer/Most Voted marker was captured in the file.

More SC-100 practice questions