SC-300 Certification Practice Question #94

Question

A user named User1 attempts to sign in to the tenant by entering the following incorrect passwords:
✑ Pa55w0rd12
✑ Pa55w0rd12
✑ Pa55w0rd12
✑ Pa55w.rd12
✑ Pa55w.rd123
✑ Pa55w.rd123
✑ Pa55w.rd123
✑ Pa55word12
✑ Pa55word12
✑ Pa55word12
✑ Pa55w.rd12
You need to identify how many sign-in attempts were tracked for User1, and how User1 can unlock her account before the 300-second lockout duration expires.
What should identify? To answer, select the appropriate
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

This is a long-standing, deliberately ambiguous ExamTopics item. The 300-second custom lockout duration is only possible when smart lockout is enabled, so the question is testing the smart-lockout *counter*, not raw Sign-In log rows. Counting hashes (3×Pa55w0rd12 = 1, Pa55w.rd12 = 2, 3×Pa55w.rd123 = 3, 3×Pa55word12 = 4, final Pa55w.rd12 = 5 because it has rolled out of the last-three-hash window) yields 5 — the keyed answer and the top-voted (dejo, 18 👍) position. The only unlock option that clears a lockout before its duration expires is SSPR with "I forgot my password," which MS Learn says resets the lockout duration to 0; clearing cache or inPrivate browsing do nothing. Confidence is held in the 70s because a large, well-evidenced minority (BRoald 14 👍, Hot_156 13 👍) tested their tenants and report 11 tracked Sign-In log entries — a legitimate alternate reading of "tracked." The SSPR half of the answer is unanimous and high-confidence.

More SC-300 practice questions