SC-300 Certification Practice Question #2

Question

You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com.
Several users use their contoso.com email address for self-service sign-up to Azure Active Directory (Azure AD).
You gain global administrator privileges to the Azure AD tenant that contains the self-signed users.
You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services.
Which PowerShell cmdlet should you run?

Accepted Answer

Self-service ("ad hoc") sign-up to Microsoft 365 services is governed by the company-level AllowAdHocSubscriptions / AllowEmailVerifiedUsers settings. MS Learn explicitly shows `Set-MsolCompanySettings -AllowAdHocSubscriptions $false` as the cmdlet that disables these sign-ups, matching the top Highly Voted comment. The other three options all manipulate domain or federation configuration and have no effect on self-service sign-up. Suggested Answer, Most Voted, the highest-voted comment, and MS Learn all converge on A. The only caveat — that the modern Graph cmdlet Update-MgPolicyAuthorizationPolicy supersedes the deprecated MSOnline cmdlet — does not change the answer because Update-MgPolicyAuthorizationPolicy is not among the four choices; A remains the only correct option presented.

More SC-300 practice questions