Describe Identity and Access Management Solutions of Microsoft 365 MS-900 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company has a hybrid identity environment with Microsoft Entra Connect using password hash synchronization. They want to enable SSPR for users, but they also want to ensure that password changes made in the cloud are written back to on-premises AD DS. However, they are concerned about the security of writing passwords back. What should they do?

   • ADisable password writeback and only allow cloud password changes
   • BEnable Seamless SSO to avoid the need for password writeback
   • CUse AD FS instead of password hash synchronization
   • DEnable password writeback and use a dedicated service account with least privilege
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What does Self-Service Password Reset (SSPR) allow users to do?

   • AChange other users' passwords
   • BCreate new user accounts
   • CBypass multi-factor authentication
   • DReset their own password without contacting an administrator
   Reveal Solution Discussion Select an answer first
4. 3application · easy

   A company has enabled Self-Service Password Reset (SSPR) for their users. They want to ensure that users can reset their passwords even if they are traveling and do not have access to their corporate phone. What should they configure?

   • AAllow users to register multiple authentication methods, such as a personal phone and an alternate email
   • BUse Conditional Access to block SSPR from outside the corporate network
   • CDisable SSPR for users who travel
   • DRequire users to use only their corporate phone for verification
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which scenario is an example of a Conditional Access policy?

   • AEncrypting emails sent to external recipients
   • BRequiring multi-factor authentication when users sign in from an untrusted location
   • CSynchronizing groups from on-premises Active Directory
   • DAutomatically creating a new user account for every employee
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   Contoso has 500 on-premises users in Active Directory. They are migrating to Microsoft 365 and want users to sign in with the same corporate credentials they use today. They also want to enforce MFA for all cloud app access. Which solution should they implement?

   • ADeploy Active Directory Federation Services (AD FS) and require users to use smart cards for all sign-ins.
   • BDeploy Microsoft Entra Connect to sync identities and enable seamless SSO, then configure Conditional Access to require MFA for all cloud apps.
   • CCreate cloud-only user accounts in Microsoft 365 and assign the same passwords as on-premises, then enable security defaults for MFA.
   • DUse Microsoft Entra Connect to sync users, then enable MFA only for the Global Administrator role.
   Reveal Solution Discussion Select an answer first