MS-900 Microsoft 365 Fundamentals Identity and Access Management 5

Question 1

What is the purpose of Azure AD 'entitlement management'?

Accepted Answer

To automate access package assignments for groups, apps, and SharePoint sites

Answer

Entitlement management automates access request workflows and lifecycle management for access packages containing resources like groups and apps.

Question 2

Which Azure AD license tier includes features like dynamic groups and self-service group management?

Accepted Answer

Azure AD Premium P1

Answer

Azure AD Premium P1 includes dynamic group membership and self-service group management capabilities.

Question 3

What happens when a Conditional Access policy is set to 'Report-only' mode?

Accepted Answer

The policy is evaluated but does not enforce; results are logged for review

Answer

Report-only mode evaluates Conditional Access policies and logs what would happen without actually enforcing the outcome, useful for testing.

Question 4

An admin needs to ensure that global administrator accounts are never used for daily tasks and are protected with strict controls. Which best practice aligns with this goal?

Accepted Answer

Use separate, dedicated accounts for admin tasks and enable PIM for just-in-time activation

Answer

Best practice dictates using dedicated admin accounts (not daily-use accounts) and leveraging PIM for time-limited, just-in-time role activation.

Question 5

Which Microsoft 365 feature enables users to register and manage their own MFA methods through a self-service portal?

Accepted Answer

Combined security information registration

Answer

Combined security information registration allows users to register MFA and SSPR methods in a single unified portal experience.

MS-900 Practice Test

MS-900 Practice Test

MS-900 Microsoft 365 Fundamentals Identity and Access Management 5