Identify the Core Security Features of Microsoft 365 Services AB-900 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An organization's Identity Secure Score in Microsoft Entra ID is 45 out of 100. The security team wants to improve the score with minimal user disruption. Which action would most directly improve the Identity Secure Score?

   • ADisable self-service password reset to reduce attack surface.
   • BRequire MFA for all users by using a Conditional Access policy.
   • CIncrease the password expiration period to 180 days.
   • DRemove all guest users from the tenant.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   Contoso has enabled Microsoft Entra ID Free and requires all users to use MFA. A user reports that they are prompted for MFA every time they sign in, even though the tenant has a Conditional Access policy that should remember MFA for 30 days. The user's sign-in logs show that the Conditional Access policy is applied and the MFA requirement is satisfied. What is the most likely reason the user is still prompted for MFA?

   • AThe Conditional Access policy is configured to require MFA for every sign-in, overriding the session control.
   • BThe user is a member of a group that is excluded from the Conditional Access policy.
   • CThe user's browser is in private mode, which prevents the MFA session cookie from being persisted.
   • DThe user's device is not compliant, so the policy requires MFA each time.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company wants to allow employees to use their corporate Microsoft Entra ID credentials to access a third-party SaaS application that supports OpenID Connect. The company also wants to enforce MFA for this application. What should you configure?

   • AAdd the application as an enterprise app and configure SSO with OpenID Connect.
   • BCreate a new user account in the SaaS app for each employee.
   • CUse password hash synchronization to the SaaS app.
   • DConfigure a federation trust with the SaaS app's identity provider.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which Microsoft 365 tool should you use to review a record of administrative actions performed in the Microsoft 365 admin center?

   • AMicrosoft 365 Defender alerts
   • BMicrosoft Entra provisioning logs
   • CMicrosoft Purview compliance portal audit log
   • DMicrosoft Entra sign-in logs
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company wants to ensure that only a specific group of IT administrators can activate the Global Administrator role, and only for a maximum of 4 hours. They also want to require approval for activation. Which Microsoft Entra ID feature should you use?

   • ASelf-service password reset
   • BEnterprise application assignment
   • CPrivileged Identity Management (PIM)
   • DConditional Access with a session control
   Reveal Solution Discussion Select an answer first