Microsoft Identity and Access Administrator — Question 4
You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com.
Several users use their contoso.com email address for self-service sign-up to Azure Active Directory (Azure AD).
You gain global administrator privileges to the Azure AD tenant that contains the self-signed users.
You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services.
Which PowerShell cmdlet should you run?
Answer options
- A. Set-MsolCompanySettings
- B. Set-MsolDomainFederationSettings
- C. Update-MsolfederatedDomain
- D. Set-MsolDomain
Correct answer: A
Explanation
The correct answer is A, Set-MsolCompanySettings, which allows you to configure company-wide settings in Azure AD, including restrictions on user sign-ups. The other options, while related to domain settings and federation, do not directly address the need to prevent users from signing up for accounts in this context.