Microsoft Identity and Access Administrator — Question 41
You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com.
Several users use their contoso.com email address for self-service sign-up to Azure AD.
You gain global administrator privileges to the Azure AD tenant that contains the self-signed users.
You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services.
Which PowerShell cmdlet should you run?
Answer options
- A. Update-MgOrganization
- B. Update-MgPolicyPermissionGrantPolicyExclude
- C. Update-MgDomain
- D. Update-MgDomainFederationConfiguration
Correct answer: A
Explanation
The correct answer is A, Update-MgOrganization, as it allows you to modify the organizational settings to restrict user self-service sign-up. The other options are not relevant for controlling user account creation for self-service situations in Azure AD.