SC-900 Microsoft Security, Compliance, and Identity Fundamentals Identity Protection and Governance 4

Question 1

A company wants to allow external customers to create their own accounts and sign in to a consumer-facing application. Which Azure AD capability supports this scenario?

Accepted Answer

Azure AD B2C (Business to Consumer)

Answer

Azure AD B2C is designed for customer-facing apps, allowing millions of external consumers to self-register and authenticate using social identities or local accounts.

Question 2

Which of the following best describes the Zero Trust principle of 'assume breach'?

Accepted Answer

Design systems assuming attackers may already be inside the network and minimize blast radius through segmentation and encryption

Answer

Assume breach means architecting as if attackers are already inside: segment networks, encrypt traffic, enforce least privilege, and monitor everything to limit what a successful attacker can access.

Question 3

What is the role of a 'connected organization' in Azure AD Entitlement Management?

Accepted Answer

It represents an external organization whose users can be allowed to request access packages

Answer

Connected organizations in Entitlement Management define trusted external Azure AD tenants or domains from which users can be permitted to request access packages through the self-service portal.

Question 4

Which Azure AD Identity Protection risk remediation action requires the user to complete MFA to prove they are the legitimate account owner?

Accepted Answer

Require MFA self-remediation

Answer

Configuring Identity Protection to 'Require MFA' allows a risky sign-in to proceed if the user successfully completes multi-factor authentication, proving they possess the second factor.

Question 5

An Access Review is configured with 'Reviewers = Managers'. What happens when a user has no manager assigned in Azure AD?

Accepted Answer

The access review falls back to a specified fallback reviewer or the application owner

Answer

When manager-based reviews encounter users without a manager attribute, Azure AD falls back to an administrator-designated fallback reviewer to ensure no accounts are skipped.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Identity Protection and Governance 4