SC-300 Certification Practice Question #188

Question

You have a Microsoft 365 subscription. The subscription contains users that use Microsoft Outlook 2016 and Outlook 2013 clients.
You need to implement tenant restrictions. The solution must minimize administrative effort.
What should you do first?

Accepted Answer

Tenant restrictions only function against Microsoft 365 thick clients when those clients use modern authentication. Outlook 2016 already uses modern auth by default, but Outlook 2013 does not — it must be explicitly enabled (per MS Learn's modern-auth configuration tables, Outlook 2013 requires the EnableADAL registry key). Therefore the prerequisite first step before tenant restrictions can be enforced is to configure the Outlook 2013 clients to use modern authentication. This also minimizes administrative effort relative to a full version upgrade (B/D). Confidence is held at 80% because a significant minority votes B, arguing Office 2013's end-of-support makes the registry approach "unsupported"; that is a real-world concern but it doesn't change the technically correct first step the question is asking for, and the official Suggested Answer and the top community vote both back A.

More SC-300 practice questions