SC-900 Microsoft Security, Compliance, and Identity Fundamentals Identity Protection and Governance 2

Question 1

Which Azure AD feature automatically blocks or challenges sign-ins that are flagged as risky based on machine learning analysis?

Accepted Answer

Azure AD Identity Protection risk-based Conditional Access

Answer

Azure AD Privileged Identity Management

Answer

Microsoft Defender for Identity

Answer

Azure AD Access Reviews

Question 2

What is the purpose of Privileged Identity Management (PIM) 'justification' when activating a role?

Accepted Answer

It records the business reason for the temporary role activation for audit purposes

Answer

It automatically approves the role without manager review

Answer

It permanently assigns the role to the user

Answer

It disables MFA for the duration of the privileged session

Question 3

An organization wants to ensure users periodically confirm they still need access to a sensitive SharePoint site. Which Azure AD feature should they use?

Accepted Answer

Access Reviews

Answer

Entitlement Management

Answer

Conditional Access

Answer

Identity Protection

Question 4

Which identity governance feature in Azure AD allows organizations to define packages of access to multiple resources that users can request?

Accepted Answer

Entitlement Management

Answer

Privileged Identity Management

Answer

Access Reviews

Answer

Identity Protection

Question 5

What does a 'sign-in risk' level of 'High' in Azure AD Identity Protection indicate?

Accepted Answer

Microsoft's ML models are highly confident the sign-in is not from the legitimate account owner

Answer

The user has too many assigned roles

Answer

The account password has expired

Answer

The device used to sign in is not compliant

Question 6

In Azure AD, what is a 'guest user' account primarily used for?

Accepted Answer

Providing external partners or vendors with limited access to organizational resources via Azure AD B2B

Answer

Granting full administrative access to external consultants

Answer

Creating temporary accounts for new employees during onboarding

Answer

Allowing anonymous access to public-facing applications

Question 7

Which report in Azure AD Identity Protection shows users whose credentials may have been compromised based on leaked credential databases?

Accepted Answer

Users flagged for risk

Answer

Risky sign-ins

Answer

Audit logs

Answer

Sign-in logs