SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Access Management 5

Question 1

What is Microsoft Entra Domain Services (formerly Azure AD Domain Services) primarily used for?

Accepted Answer

Providing cloud-based LDAP, Kerberos, and NTLM services for legacy apps without on-premises DCs

Answer

Microsoft Entra Domain Services provides managed domain services such as LDAP, Kerberos, and NTLM, allowing legacy applications to use domain features without on-premises domain controllers.

Question 2

In Microsoft Entra ID, what is a 'Service Principal'?

Accepted Answer

The identity representation of an application or service in a tenant, used to authenticate and access resources

Answer

A service principal is the local representation of an application registration in a specific Microsoft Entra ID tenant, enabling the app to authenticate and be assigned permissions.

Question 3

Which report in Microsoft Entra ID helps identify users who have not used their account within a specified period?

Accepted Answer

Inactive users report / Sign-in activity report

Answer

The sign-in activity report and inactive users insights in Microsoft Entra ID help identify accounts that haven't signed in recently, supporting access hygiene.

Question 4

What does 'Continuous Access Evaluation' (CAE) enable in Microsoft Entra ID?

Accepted Answer

It allows services to revoke access tokens in near real-time when user conditions change

Answer

CAE enables Microsoft Entra ID to signal participating services to revoke access tokens immediately when critical events occur, such as account disablement or IP address change.

Question 5

Which Microsoft Entra workload identity feature helps protect non-human identities like apps and service principals?

Accepted Answer

Microsoft Entra Workload Identities (with Identity Protection for workloads)

Answer

Microsoft Entra Workload Identities extends identity protection capabilities to apps and service principals, detecting risky workload credential usage.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Access Management 5