Exam SC-300 topic 1 question 58 discussion

I think "A". https://learn.microsoft.com/en-us/azure/active-directory/external-identities/one-time-passcode (At the end of page) --Frequently asked questions-- What happens to my existing guest users if I enable email one-time passcode? Your existing guest users won't be affected if you enable email one-time passcode, as your existing users are already past the point of redemption. Enabling email one-time passcode will only affect future redemption process activities where new guest users are redeeming into the tenant. Say: Your existing guest users won't be affected... User1 is already inside. So it doesn't affect him.

When does a guest user get a one-time passcode? When a guest user redeems an invitation or uses a link to a resource that has been shared with them, they’ll receive a one-time passcode if: They don't have a Microsoft Entra account. They don't have a Microsoft account. The inviting tenant didn't set up federation with social (like Google) or other identity providers. They don't have any other authentication method or any password-backed accounts. Email one-time passcode is enabled. Obviously, @outlook.com is a Microsoft account, won't receive a passcode.

The question is testing your knowledge of WHEN passcodes are sent. One-Time Passcodes for invitations are not sent to existing users. Therefore, A is correct.

Answer B: When does a guest user get a one-time passcode? When a guest user redeems an invitation or uses a link to a resource that has been shared with them, they’ll receive a one-time passcode if: - They don't have a Microsoft Entra account. - They don't have a Microsoft account. - The inviting tenant didn't set up federation with social (like Google) or other identity providers. - They don't have any other authentication method or any password-backed accounts. - Email one-time passcode is enabled.

has to be B

User2 only

Outlook is Microsoft account and is autheticated by Microsoft itself whithout needing passcodes.

This is currently in the test bank of questions and has a different option toggled for Guest Invite Settings. Based on the configuration in THIS photo the correct answer is None. The ability to invite guests is locked to specific users and admin roles, bsmith does not have a specific role or permission in the example, therefore we should assume he cannot. In the exam bank test questions the Guest Invite settings are set to the first radio option. The question is testing your knowledge of when one time pass codes are sent.

User1 authenticates with email one-time passcode [email protected] authenticates at Microsoft [email protected] authenticates at the own domain When does a guest user get a one-time passcode? When a guest user redeems an invitation or uses a link to a resource that has been shared with them, they’ll receive a one-time passcode if: They don't have a Microsoft Entra account. They don't have a Microsoft account. The inviting tenant didn't set up federation with social (like Google) or other identity providers. They don't have any other authentication method or any password-backed accounts. Email one-time passcode is enabled. https://learn.microsoft.com/en-us/entra/external-id/one-time-passcode#when-does-a-guest-user-get-a-one-time-passcode

one-time passcode is used for guest that don't have a Microsoft account

Just tested this in an environment with the exact same settings as shown in the exhibit and no users need to login with an OTP they all just get the mail of a shared file and then they can open it without reauthenticating. So NO ANSWER is correct

Should be A.

I think the answer is "B" because (1) It doesn't mention one-time passcode is disabled and according to the following article, the one-time passcode is enabled by default. https://learn.microsoft.com/en-us/entra/external-id/one-time-passcode#:~:text=one%2Dtime%20passcodes-,The%20email%20one%2Dtime%20passcode%20feature%20is%20now%20turned%20on%20by%20default%20for%20all%20new%20tenants%20and%20for%20any%20existing%20tenants%20where%20you%20haven%27t%20explicitly%20turned%20it%20off.,-This%20feature%20provides (2) Outlook.com is already a Microsoft account.

point 1: Guest users who redeemed an invitation before email one-time passcode was enabled will continue to use their same authentication method - where "User1" fits here. Point 2: When a user redeems a one-time passcode and later obtains an MSA, Microsoft Entra account, or other federated account, they'll continue to be authenticated using a one-time passcode. If you want to update the user's authentication method, you can reset their redemption status. Since the User2 still didn't access the resource and while accessing its prompt for an Email one time passcode

point 1: Guest users who redeemed an invitation before email one-time passcode was enabled will continue to use their same authentication method - where "User1" fits here. Point 2: When a user redeems a one-time passcode and later obtains an MSA, Microsoft Entra account, or other federated account, they'll continue to be authenticated using a one-time passcode. If you want to update the user's authentication method, you can reset their redemption status. Since the User2 still access the environment and while accessing prompts for Email one time passcode

B is correct

Tested using an outlook account and then a non MS account. B is the correct answer.