SC-300 Certification Practice Question #116

Question

You have an Azure subscription. The subscription contains 50 virtual machines that run Windows Server.

You enable Microsoft Entra login for the virtual machines.

Users report that they cannot sign in to the virtual machines by using their Microsoft Entra credentials.

You need to ensure that the users can sign in to the virtual machines.

What should you do first?

Accepted Answer

Microsoft Entra login on a Windows Server VM depends on the AADLoginForWindows extension successfully Entra-joining the device, which requires the VM to reach the device-registration discovery endpoint `https://enterpriseregistration.windows.net` (exit code -2145648607 / `DSREG_AUTOJOIN_DISC_FAILED` is raised when it can't). If users cannot sign in with Entra credentials, the first thing to verify is outbound connectivity to that required endpoint. The Suggested Answer, the single Most Voted reply, and the MS Learn troubleshooting guidance all align on D. Confidence is held at 88 rather than higher because the community sample is thin (one vote), but the official documentation strongly corroborates it. The other options are either destructive (A), irrelevant to the connectivity prerequisite (B), or apply to Linux/SSH rather than Windows Entra login (C).

More SC-300 practice questions