SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Access Management 2

Question 1

Which Microsoft Entra feature allows organizations to grant temporary, time-bound access to privileged roles?

Accepted Answer

Privileged Identity Management (PIM)

Answer

Privileged Identity Management (PIM) enables just-in-time, time-bound access to privileged roles, reducing exposure of sensitive permissions.

Question 2

In Microsoft Entra ID, what is the purpose of an Access Review?

Accepted Answer

To periodically verify that users still need their current access rights

Answer

Access Reviews allow administrators and resource owners to periodically verify that users still need their assigned access, helping maintain least-privilege.

Question 3

What does the 'Never Expire' password policy setting in Microsoft Entra ID mean?

Accepted Answer

User passwords do not have a forced expiration date

Answer

When 'Never Expire' is configured, Microsoft Entra ID does not enforce periodic password expiration for those users.

Question 4

Which Microsoft Entra ID role grants full control over the directory, including managing other administrators?

Accepted Answer

Global Administrator

Answer

The Global Administrator role has complete control over Microsoft Entra ID, including the ability to manage all other administrator roles.

Question 5

What is the function of Microsoft Entra ID's 'Self-Service Password Reset' (SSPR)?

Accepted Answer

It enables users to reset their own passwords without contacting the helpdesk

Answer

SSPR lets users securely reset their passwords themselves using registered authentication methods, reducing helpdesk burden.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Access Management 2