SC-300 Practice Question 3444
Exam: SC-300
Domain: Implement authentication and access management
Difficulty: medium
What is the maximum number of emergency access "break-glass" accounts recommended by Microsoft, and how should their Conditional Access assignment be configured?
Answer Options
A
At least two break-glass accounts explicitly excluded from all CA policies
B
One single account assigned to all helpdesk technicians
C
No accounts should ever be excluded from Conditional Access
D
Break-glass accounts must use simple predictable passwords
Correct Answer
A: At least two break-glass accounts explicitly excluded from all CA policies
Explanation
Microsoft recommends creating at least two break-glass accounts that are explicitly excluded from all Conditional Access and MFA policies to prevent lockout during outages.