Device1 on Nov 16, 2020: Yes
Device3 on Dec 15, 2020: Yes
Device3 on Nov 20, 2020: No
According to Microsoft's official documentation and SC-300: Identity and Access Administrator Study Guide (Identity Governance and Compliance section), Terms of Use (ToU) in Azure Active Directory are managed under Conditional Access policies and enforce user acknowledgment before granting access to resources.
Key configuration settings from the scenario:
* Require users to expand the terms of use: On # Users must open the document before accepting.
* Require users to consent on every device: On # Each device requires a separate acceptance (consent stored per device).
* Expire consents: On
* Expire starting on: December 10, 2020
* Frequency: Monthly # Users must reaccept terms every month after initial consent.
Given that:
* Terms1 was created on November 5, 2020.
* User1 accepted the terms on November 15, 2020 on Device3 only.
* Acceptance is per device, meaning Device1 and Device2 do not yet have acceptance recorded.
Therefore:
* On November 16, 2020 (next day), when User1 signs in from Device1, they must accept Terms1 # Yes.
* The terms expire monthly starting December 10, 2020, so by December 15, 2020, User1 must reaccept the terms on Device3 # Yes.
* November 20, 2020 is still within the same month of initial acceptance (November 15), and terms have not expired yet # No, reacceptance is not required that soon.
This aligns with Microsoft documentation excerpt:
"When 'Require users to consent on every device' is enabled, each unique device sign-in requires separate consent. When expiration is configured, users must reaccept terms based on the defined frequency starting from the specified date."