SC-300 Certification Practice Question #124

Question

You configure a new Microsoft 365 tenant to use a default domain name of contoso.com.

You need to ensure that you can control access to Microsoft 365 resources by using conditional access policies.

What should you do first?

Accepted Answer

A new Microsoft 365 tenant (created after October 22, 2019) has security defaults enabled automatically. MS Learn states explicitly that security defaults and Conditional Access policies cannot be enabled simultaneously — you can create Conditional Access policies while security defaults are on, but you cannot turn them on until security defaults are disabled. Therefore the first required step to control access via Conditional Access is to disable security defaults. The Suggested Answer, a unanimous Most Voted, the 3-👍 community comment, and MS Learn all agree, with no dissent.

More SC-300 practice questions