The answer is to use the `Set-SPOTenant -RequireAcceptingAccountMatchInvitedAccount` parameter set to `$true`, as this is the only method to enforce expiration on existing SharePoint Online external sharing links. While the SharePoint admin center allows you to set a default 30-day expiration for new links, this policy does not retroactively apply to links created before the change, leaving them active indefinitely. The `RequireAcceptingAccountMatchInvitedAccount` parameter forces a match between the invited and accepting accounts, which effectively invalidates any pre-existing links that don't satisfy this condition, achieving the desired expiration enforcement. On the MS-102 exam, this scenario tests your understanding of the distinction between tenant-wide default settings and PowerShell-based enforcement for legacy links—a common trap is assuming the admin center setting applies retroactively. Remember: admin center for new links, PowerShell for old links; think "Match to Expire" as your memory tip.
MS-102 Deploy and manage a Microsoft 365 tenant Practice Question
This MS-102 practice question tests your understanding of deploy and manage a microsoft 365 tenant. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Your organization uses Microsoft 365 E5 licenses. You need to ensure that all external sharing links for SharePoint Online expire after 30 days by default. You configure this in the SharePoint admin center. However, users report that links created before the change still do not have an expiration. What should you do?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the Set-SPOTenant -RequireAcceptingAccountMatchInvitedAccount parameter.
Option A is correct because the `Set-SPOTenant -RequireAcceptingAccountMatchInvitedAccount` parameter, when set to `$true`, forces all external sharing links to require the invited account to match the accepting account, which effectively invalidates any pre-existing links that do not meet this condition. This is the only way to enforce expiration on links created before the policy change, as the SharePoint admin center setting for default link expiration only applies to newly created links, not existing ones.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
Use the Set-SPOTenant -RequireAcceptingAccountMatchInvitedAccount parameter.
Why this is correct
This parameter forces existing anonymous links to expire after the default number of days.
Related concept
Read the scenario before looking for a memorised answer.
✗
Reconfigure the setting in SharePoint admin center and save again.
Why it's wrong here
Reconfiguring does not retroactively apply to existing links.
✗
Run Set-SPOTenant -DefaultSharingLinkExpirationInDays 30.
Why it's wrong here
This also only applies to new links.
✗
Create a data loss prevention (DLP) policy in Microsoft Purview to block unexpired links.
Why it's wrong here
DLP policies do not manage link expiration.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates assume the `-DefaultSharingLinkExpirationInDays` parameter applies retroactively to existing links, when in fact it only affects links created after the setting is applied, leading them to choose Option C instead of the correct retroactive enforcement via `RequireAcceptingAccountMatchInvitedAccount`.
Detailed technical explanation
How to think about this question
The `RequireAcceptingAccountMatchInvitedAccount` parameter works by enforcing that the invited user's email address must exactly match the account used to accept the link, which causes any pre-existing anonymous or mismatched links to fail when accessed. This is a common workaround for retroactively invalidating old sharing links because SharePoint Online does not natively support bulk expiration of existing links; the parameter leverages Azure AD's conditional access behavior for external sharing. In real-world scenarios, this is critical when a security policy change must be enforced immediately without waiting for all old links to expire naturally.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A startup's cloud architect reviews their monthly bill and notices costs are higher than expected for a long-running batch job. Switching from on-demand instances to Reserved Instances — or using Spot/Preemptible VMs — can reduce compute costs by up to 72 %. Questions like this test whether you understand the tradeoffs between commitment, flexibility, and cost across cloud pricing models.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this MS-102 question in full detail.
Deploy and manage a Microsoft 365 tenant — This question tests Deploy and manage a Microsoft 365 tenant — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Use the Set-SPOTenant -RequireAcceptingAccountMatchInvitedAccount parameter. — Option A is correct because the `Set-SPOTenant -RequireAcceptingAccountMatchInvitedAccount` parameter, when set to `$true`, forces all external sharing links to require the invited account to match the accepting account, which effectively invalidates any pre-existing links that do not meet this condition. This is the only way to enforce expiration on links created before the policy change, as the SharePoint admin center setting for default link expiration only applies to newly created links, not existing ones.
What should I do if I get this MS-102 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.