SC-300 Practice Question 3474
Exam: SC-300
Domain: Plan and implement workload identities
Difficulty: hard
What happens to access tokens already issued to a service principal when an administrator sets "Enabled for users to sign-in?" to "No" on its Enterprise Application?
Answer Options
A
Active refresh tokens are revoked; service principal cannot acquire new tokens
B
The service principal application code is deleted permanently
C
The virtual machine running the service is deleted immediately
D
Nothing occurs; background daemons ignore this setting
Correct Answer
A: Active refresh tokens are revoked; service principal cannot acquire new tokens
Explanation
Active refresh tokens are revoked; the service principal is blocked from acquiring new tokens, preventing further access to APIs within standard token expiry windows.