Exam SC-300 topic 4 question 5 discussion

The current answer Y, Y, N is correct. Box 1: Yes, because User1 has not yet accepted the terms on Device1. Box 2: Yes, because User1 has not yet accepted the terms on Device2. User1 will be prompted to register the device before the terms can be accepted. Box 3: No, because User1 has already accepted the terms on Device3. The terms do not expire until December 10 and then monthly after that

Y, N,N Start November 5, 2020 End December 10, 2020 • Box 1: Yes, o November 5, 2020 User1 has not yet accepted the terms on Device1 Registered in contoso.com • Box 2: No, Answer date is December 11, 2020 expire starting on: December 10, 2020 answer date is December 11, 2020 • Box 3: No December 7, 2020 No On November 15, 2020, User1 accepts Terms1 on Device3.

Answer 1) YES: First time accepting Terms of Use on Device1 Answer 2) YES(or NO): I really HATE no-information Microsoft questions. YES, it is possible if since the device is Windows 10...BUT they will need the ownership/permissions to REGISTER Device2. If so, then they will get prompted with a Register device message first, then they can agree to Terms of Use. For this question, I am leaning toward YES for the test because the users are most likely enrolling their personal devices. Answer 3) NO: Terms of Use were already accepted on Device3 back on November 15. Even though the frequency is set to MONTHLY and would normally cause the prompt for acceptance to start popping up on the 1st day of the month immediately after the acceptance(hence, December 1)...but their acceptance on November 15 is still valid because the expiration isn't set until December 10...so the first possible time that they will see another prompt will be on December 10 and then on the 1st of every month afterwards.

C:\Users\berto\OneDrive\Desktop\Files Shared Between Desktops\Azure SC-300 Training\Question 5---.png

Y,N,N is correct. 1. Y - as user 1 has not accepted and is eligible to accept on device 1 2. N- while user 1 cant accept, but device 2 is not a registered or joined device. refer https://learn.microsoft.com/en-us/entra/identity/conditional-access/terms-of-use, and check per-device terms of use. 3. No, because user 1 has already accepted terms on device 3 on 15th Nov. the expire is only on 10th dec. so he has to wait until 10th Dec to re-accept TOU.

Yes, No, No Device1 (Windows 10, Registered): User1 can accept Terms1 on November 20, 2020. This is because the device is registered, and User1 has not yet accepted the terms on this device. Device2 (Windows 10, Not Registered): User1 cannot accept Terms1 on December 11, 2020. This is because Device2 is not registered in contoso.com, which is a prerequisite for enforcing the terms. Device3 (iOS, Registered): User1 cannot accept Terms1 on December 7, 2020. The terms had already been accepted on this device on November 15, 2020, and the terms' expiration begins only on December 10, 2020, as per the "Expire consents" policy.

For the second part: I tested on a not registered Windows device and here is the error: You can't get there from here Your sign-in was successful, but your device must be registered with (Org name) before you can use this site. So, this user cannot

No, users cannot accept Terms of Use on devices that are not registered in Azure AD. The setting “Require users to consent on every device” mandates that the device must be registered in Azure AD. The device ID is used to enforce the Terms of Use policy on each device. https://learn.microsoft.com/en-us/entra/identity/conditional-access/terms-of-use

Y,N,N On November 20, 2020, User1 can accept Terms1 on Device1. Device1 is registered in contoso.com.The terms of use were created and enforced on November 5, 2020.Therefore, User1 can accept Terms1 on Device1 on November 20, 2020. The answer is Yes. On November 20, 2020, User1 can accept Terms1 on Device2. Device2 is not registered in contoso.com.Since the device is not registered, User1 cannot accept Terms1 on Device2. The answer is No. On December 7, 2020, User1 can accept Terms1 on Device3. Device3 is registered and User1 accepted the terms on November 15, 2020.The terms expire monthly starting from December 10, 2020.Therefore, the acceptance on November 15, 2020, is still valid on December 7, 2020, and there's no need for re-acceptance yet. The answer is No.

Y, Y, N (Already accepted)

Device 2 is not registered so YNN

YES YES NO

YES YES NO

For Device2, when they try to access, they'll be forced to register the device on Azure AD, and their Device ID is used to enforce the Terms of use policy (meaning they will have to accept) When it says "Expire starting on:" it means that the initial acceptance expires on that date for users, and they must reaccept the terms of use. It doesn't mean Terms1 overall expires So: - Yes - Yes - No (Accepted November 15, and December 7 < 10th where it expires for the first time, so they won't be prompted and have the ability to reaccept then) https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/terms-of-use#per-device-terms-of-use

Answer is YNN. Box 2 will get a message that states: "You can't get there from here." User will have to go to Access Work or School and register the device first.

this question came out in my test today.

Should be Y/N/N, device 2 needs to be registered first. Yes, you get asked to do it when accepting the terms, but AAD registration of devices can blocked in various ways. So the exact answer is "No", because you cannot accept the terms without registering. Most answers can be answered "yes, if you do X or Y or Z" so gets confusing, and the lack of info in the questions if course deliberate by MS..