SC-300 Certification Practice Question #129

Question

You have a Microsoft 365 tenant.

You currently allow email clients that use Basic authentication to connect to Microsoft Exchange Online.

You need to ensure that users can connect to Exchange Online only from email clients that use Modern authentication protocols.

What should you implement?

Accepted Answer

Requiring that users connect to Exchange Online only from clients using **Modern authentication** means blocking **Basic (legacy) authentication**, and the documented Microsoft control for this at the sign-in/identity layer is a Microsoft Entra (Azure AD) **Conditional Access policy** that blocks legacy authentication client apps. The Suggested Answer, the 18-vote Most Voted, and every discussion comment all converge on A, and MS Learn explicitly names CA as the mechanism that "forces all client access requests to use modern authentication." Intune compliance/app-control profiles (B, D) target device or app posture rather than the authentication protocol, and a Defender for Cloud Apps OAuth policy (C) governs consented OAuth app permissions — none of them block Basic auth. Confidence 95 (not higher) because Exchange Online authentication policies are an alternative tenant-level method, but among the four given choices A is unambiguously correct.

More SC-300 practice questions