SC-300 Certification Practice Question #24

Question

Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant.
Users sign in to computers that run Windows 10 and are joined to the domain.
You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).
You need to configure the Windows 10 computers to support Azure AD Seamless SSO.
What should you do?

Accepted Answer

The question specifically asks what to configure on the *Windows 10 computers* (client side) to support Seamless SSO. MS Learn's Seamless SSO rollout guidance says the Entra URL `https://autologon.microsoftazuread-sso.com` must be added to the users' Local intranet zone (typically via Group Policy) so the browser will forward Kerberos tickets to the cloud endpoint — that is exactly option C. Installing the Authentication Agent (D) belongs to Pass-through Authentication and is a server-side action, not a client configuration. The Suggested Answer, Most Voted (26 votes), and the top comment (30 👍) all align on C, with only minor low-vote dissent, so confidence is high.

More SC-300 practice questions