StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Identity authentication and access

Practice question 118 of 498 · hard

A policy targets all agents created by a blueprint. A new linked agent user account can still sign in outside its constraints. What is the best diagnosis?

Choose the single best answer.

  1. A.New identities are never covered by blueprint policies
  2. B.The account must share its sponsor’s password
  3. C.Disable audience validation on the resource
  4. D.Blueprint scope covers agent identities, so explicitly target the agent user account
Show the answer and explanation

✓ Correct answer

  • Blueprint scope covers agent identities, so explicitly target the agent user account

Blueprint scope includes future agent identities but not linked agent user accounts. Password sharing weakens security, and removing audience validation would admit inappropriate tokens rather than correct policy scope.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.