StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Identity authentication and access

Practice question 120 of 498 · hard

An agent accesses a user’s files through OBO and its own mailbox through a linked account. Which two policy decisions are correct? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Replace Entra tokens with API keys to extend Conditional Access
  2. B.Explicitly target Agent Users for the mailbox account
  3. C.Apply relevant user-targeted policies to the OBO resource request
  4. D.Cover both requests with only a blueprint policy
  5. E.Target agent users by ordinary security-group membership
Show the answer and explanation

✓ Correct answers

  • Explicitly target Agent Users for the mailbox account
  • Apply relevant user-targeted policies to the OBO resource request

OBO evaluates the represented user and linked-account access evaluates Agent Users. Blueprint-only coverage misses these subjects, current group scoping is unsupported, and keys bypass Conditional Access.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.