Describe Identity and Access Management Solutions of Microsoft 365 MS-900 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which capability is provided by Microsoft Entra ID to allow users to sign in once and access multiple applications without being prompted again?

   • AConditional access
   • BMulti-factor authentication (MFA)
   • CSelf-service password reset (SSPR)
   • DSingle sign-on (SSO)
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company wants to reduce helpdesk calls for password resets. They have enabled Self-Service Password Reset (SSPR) for all users. However, they are concerned that a stolen mobile device could be used to reset a user's password. What should they configure to mitigate this risk?

   • ARequire users to register for SSPR using a work phone number only
   • BUse Conditional Access to block SSPR from mobile devices
   • CRequire MFA during the SSPR verification process
   • DDisable SSPR for users who have mobile devices
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How are cloud-based user identities in Microsoft 365 typically created?

   • ABy an administrator in the Microsoft 365 admin center or Microsoft Entra admin center
   • BBy using Active Directory Users and Computers on a local server
   • CBy running the Azure AD Connect wizard on a domain controller
   • DBy sending an email invitation to the user
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company wants to block access to Microsoft 365 from countries where they have no business operations. They also want to allow access from any other location. Which Microsoft Entra ID feature should they use?

   • AConditional Access policy with a named location that includes the blocked countries
   • BSelf-Service Password Reset (SSPR) with location restrictions
   • CMFA settings that require MFA for all users
   • DMicrosoft Entra ID Protection user risk policy
   Reveal Solution Discussion Select an answer first
6. 10application · easy

   A startup has no on-premises servers and creates all user accounts directly in Microsoft Entra ID. They want to ensure that only authorized users can access the Microsoft 365 admin center. What should they configure?

   • ACreate a security group and add users to it
   • BAssign the Global Administrator role to the appropriate users
   • CEnable Self-Service Password Reset (SSPR) for all users
   • DConfigure Conditional Access to require MFA for all users
   Reveal Solution Discussion Select an answer first