Exam SC-300 topic 4 question 5 discussion

The current answer Y, Y, N is correct. Box 1: Yes, because User1 has not yet accepted the terms on Device1. Box 2: Yes, because User1 has not yet accepted the terms on Device2. User1 will be prompted to register the device before the terms can be accepted. Box 3: No, because User1 has already accepted the terms on Device3. The terms do not expire until December 10 and then monthly after that

Y, N,N Start November 5, 2020 End December 10, 2020 • Box 1: Yes, o November 5, 2020 User1 has not yet accepted the terms on Device1 Registered in contoso.com • Box 2: No, Answer date is December 11, 2020 expire starting on: December 10, 2020 answer date is December 11, 2020 • Box 3: No December 7, 2020 No On November 15, 2020, User1 accepts Terms1 on Device3.

For the second part: I tested on a not registered Windows device and here is the error: You can't get there from here Your sign-in was successful, but your device must be registered with (Org name) before you can use this site. So, this user cannot

No, users cannot accept Terms of Use on devices that are not registered in Azure AD. The setting “Require users to consent on every device” mandates that the device must be registered in Azure AD. The device ID is used to enforce the Terms of Use policy on each device. https://learn.microsoft.com/en-us/entra/identity/conditional-access/terms-of-use

Y,N,N On November 20, 2020, User1 can accept Terms1 on Device1. Device1 is registered in contoso.com.The terms of use were created and enforced on November 5, 2020.Therefore, User1 can accept Terms1 on Device1 on November 20, 2020. The answer is Yes. On November 20, 2020, User1 can accept Terms1 on Device2. Device2 is not registered in contoso.com.Since the device is not registered, User1 cannot accept Terms1 on Device2. The answer is No. On December 7, 2020, User1 can accept Terms1 on Device3. Device3 is registered and User1 accepted the terms on November 15, 2020.The terms expire monthly starting from December 10, 2020.Therefore, the acceptance on November 15, 2020, is still valid on December 7, 2020, and there's no need for re-acceptance yet. The answer is No.

Y, Y, N (Already accepted)

Device 2 is not registered so YNN

YES YES NO

YES YES NO

For Device2, when they try to access, they'll be forced to register the device on Azure AD, and their Device ID is used to enforce the Terms of use policy (meaning they will have to accept) When it says "Expire starting on:" it means that the initial acceptance expires on that date for users, and they must reaccept the terms of use. It doesn't mean Terms1 overall expires So: - Yes - Yes - No (Accepted November 15, and December 7 < 10th where it expires for the first time, so they won't be prompted and have the ability to reaccept then) https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/terms-of-use#per-device-terms-of-use

Answer is YNN. Box 2 will get a message that states: "You can't get there from here." User will have to go to Access Work or School and register the device first.

this question came out in my test today.

Should be Y/N/N, device 2 needs to be registered first. Yes, you get asked to do it when accepting the terms, but AAD registration of devices can blocked in various ways. So the exact answer is "No", because you cannot accept the terms without registering. Most answers can be answered "yes, if you do X or Y or Z" so gets confusing, and the lack of info in the questions if course deliberate by MS..

i performed this question on y lab. The given answers are right

Regarding box 2, what expires is the "consent", not the terms-of-use requirement. So the given answer is correct: YYN

On the exam - March 28, 2022

Answers are Y, N, N. The second one is No because it is not registered: "Per-device terms of use...require users to consent on every device setting enables you to require end users to accept your terms of use policy on every device they're accessing from. ****The end user will be required to register their device in Azure AD.**** When the device is registered, the device ID is used to enforce the terms of use policy on each device." The device will need to be registered before the terms of use can be accepted, and in its current unregistered state, User1 will not be able to accept Terms1. https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/terms-of-use