SC-300 Certification Practice Question #72

Question

You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com.

Several users use their contoso.com email address for self-service sign-up to Microsoft Entra.

You gain global administrator privileges to the Microsoft Entra tenant that contains the self-signed users.

You need to prevent the users from creating user accounts in the contoso.com Microsoft Entra tenant for self-service sign-up to Microsoft 365 services.

Which PowerShell cmdlet should you run?

Accepted Answer

Preventing email-based self-service sign-up is governed by the tenant authorization policy. MS Learn explicitly states the `Update-MgPolicyAuthorizationPolicy` cmdlet with the `AllowedToSignUpEmailBasedSubscriptions` parameter (set to `$false`) blocks users from signing up for self-service sign-up subscriptions. The other cmdlets touch unrelated areas — domain settings (B), app permission-grant policy exclusions (C), and domain federation (D) — so they cannot meet the requirement. Suggested Answer, the unanimous community vote (6), a 3 👍 comment, and MS Learn all converge on A, hence 95% confidence.

More SC-300 practice questions