SC-900 Microsoft Identity & Access Management 2

Question 1

Which Azure AD feature allows users to reset their own passwords without contacting IT support?

Accepted Answer

Self-Service Password Reset (SSPR)

Answer

SSPR lets users reset or unlock their passwords without IT helpdesk involvement, reducing support costs.

Question 2

What is the primary purpose of Azure AD Privileged Identity Management (PIM)?

Accepted Answer

Provide just-in-time privileged access to reduce standing permissions

Answer

PIM provides just-in-time (JIT) privileged access so admin roles are only active when needed, reducing attack surface.

Question 3

Which identity type in Azure AD represents an application that needs to authenticate to access Azure resources?

Accepted Answer

Service principal

Answer

A service principal is the identity representation of an application in Azure AD, used for app-to-resource authentication.

Question 4

What does Azure AD External Identities B2C primarily enable?

Accepted Answer

Allowing customers to sign in to consumer-facing apps using social or local accounts

Answer

Azure AD B2C is a customer identity solution that lets end users authenticate with social providers or custom accounts.

Question 5

Which Azure AD feature automatically detects and remediates risky sign-ins using machine learning?

Accepted Answer

Identity Protection

Answer

Azure AD Identity Protection uses ML to detect anomalous sign-ins and can automatically block or require MFA for risky logins.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test