Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Access Management Flashcards
7 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Access Management flashcards as text
Which Microsoft Entra feature allows organizations to grant temporary, time-bound access to privileged roles?
Answer: Privileged Identity Management (PIM)
Privileged Identity Management (PIM) enables just-in-time, time-bound access to privileged roles, reducing exposure of sensitive permissions.
In Microsoft Entra ID, what is the purpose of an Access Review?
Answer: To periodically verify that users still need their current access rights
Access Reviews allow administrators and resource owners to periodically verify that users still need their assigned access, helping maintain least-privilege.
What does the 'Never Expire' password policy setting in Microsoft Entra ID mean?
Answer: User passwords do not have a forced expiration date
When 'Never Expire' is configured, Microsoft Entra ID does not enforce periodic password expiration for those users.
Which Microsoft Entra ID role grants full control over the directory, including managing other administrators?
Answer: Global Administrator
The Global Administrator role has complete control over Microsoft Entra ID, including the ability to manage all other administrator roles.
What is the function of Microsoft Entra ID's 'Self-Service Password Reset' (SSPR)?
Answer: It enables users to reset their own passwords without contacting the helpdesk
SSPR lets users securely reset their passwords themselves using registered authentication methods, reducing helpdesk burden.
In Microsoft Entra External ID, what scenario does 'B2B collaboration' address?
Answer: Enabling partner or guest users from external organizations to access your resources
B2B collaboration allows external partner or guest users to securely access your organization's apps and resources using their own credentials.
Which Microsoft Entra feature uses machine learning to detect risky sign-ins and compromised user accounts?
Answer: Microsoft Entra Identity Protection
Microsoft Entra Identity Protection leverages machine learning to detect risk events such as anonymous IP usage, leaked credentials, and atypical travel.