SC-900 - Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Access Management Questions and Answers

Question 1

A company wants to implement a solution that ensures users only have access to resources for a limited time and that their access is reviewed periodically by their managers.
Which Microsoft Entra feature is MOST suitable for this requirement?

Accepted Answer

Access reviews

Answer

Conditional Access policies

Answer

Microsoft Entra ID Protection

Answer

Self-service password reset (SSPR)

Question 2

An administrator is configuring a Microsoft Entra Conditional Access policy. The policy should require multi-factor authentication (MFA) ONLY when a user signs in from a location that is not on the corporate network. Which two components must be configured in the policy?

Accepted Answer

Conditions (Locations) & Access controls (Grant)

Answer

Users and Groups & Client apps

Answer

Sign-in risk & Access controls

Answer

Cloud apps or actions & Session controls

Question 3

Which of the following is a primary function of Microsoft Entra ID Governance?

Accepted Answer

To manage the identity and access lifecycle for users.

Answer

To block sign-ins from malicious IP addresses.

Answer

To provide a cloud-based domain controller.

Answer

To enforce security baselines on endpoint devices.

Question 4

A company is concerned about 'permission creep,' where users accumulate more access rights than they need over time. They want a solution that provides visibility into the gap between granted permissions and used permissions across their multi-cloud environment. Which Microsoft Entra solution addresses this specific need?

Accepted Answer

Microsoft Entra Permissions Management

Answer

Microsoft Entra ID Protection

Answer

Microsoft Entra Domain Services

Answer

Microsoft Entra Application Proxy

Question 5

A user with a global administrator role in Microsoft Entra ID needs to perform a highly sensitive task. To minimize the security risk, access to this role should only be granted for a few hours and require an approval workflow. Which Microsoft Entra feature should be used to achieve this?

Accepted Answer

Privileged Identity Management (PIM)

Answer

Administrative Units

Answer

Dynamic Groups

Answer

Conditional Access

Question 6

What is the primary purpose of defining assignments within a Microsoft Entra Conditional Access policy?

Accepted Answer

To define the scope of the policy, such as which users, groups, and applications it applies to.

Answer

To specify the remediation actions, such as forcing a password reset.

Answer

To analyze the potential impact of the policy before it is enabled.

Answer

To configure session-level controls, like sign-in frequency.