A multinational company has a Microsoft 365 tenant with users in multiple regions. They want to enforce MFA for all users, but they have a group of executives who frequently travel to countries where SMS delivery is unreliable. They also want to avoid locking out these executives. What is the most appropriate approach?

Disable MFA for the executives entirely

Require MFA for all users, and configure the executives to use the Microsoft Authenticator app instead of SMS

Use Conditional Access to require MFA for all users, but exclude the executives from the policy

Use Conditional Access to require MFA only when sign-in risk is medium or higher

A company uses Microsoft Entra ID as its identity provider. They want to give external partners access to a specific SharePoint site without creating user accounts in their own directory. What should they use?

Microsoft Entra B2B collaboration, inviting partners as guest users.

Set up a federation trust with each partner's identity provider.

Create user accounts for each partner and assign licenses.

Use Microsoft Entra B2C for partner access.

A company has an on-premises Active Directory and wants to move to Microsoft 365. They have a regulatory requirement that user passwords must never be stored in the cloud. They also want single sign-on (SSO) for their users. Which hybrid identity approach should they choose?

Federated identity using Active Directory Federation Services (AD FS) with password hash sync disabled.

Cloud-only identities with MFA enforced.

Password hash synchronization with Microsoft Entra Connect.

Pass-through authentication with password writeback enabled.

Which component is required to establish a hybrid identity between on-premises Active Directory and Microsoft Entra ID?

Microsoft Azure Information Protection

Microsoft Certified:Microsoft 365 Fundamentals

Domain 3Objective 1

Describe Identity and Access Management Solutions of Microsoft 365 MS-900 Practice Questions (Page 3)

Part of the Describe security, compliance, privacy, and trust in Microsoft 365 domain, which accounts for 25–30% of the MS-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 2–3 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

7concepts

25–30%of the exam

Questions 11–15

11expert · hard
A multinational company has a Microsoft 365 tenant with users in multiple regions. They want to enforce MFA for all users, but they have a group of executives who frequently travel to countries where SMS delivery is unreliable. They also want to avoid locking out these executives. What is the most appropriate approach?
Select an answer first
12application · medium
A company uses Microsoft Entra ID as its identity provider. They want to give external partners access to a specific SharePoint site without creating user accounts in their own directory. What should they use?
Select an answer first
13expert · hard
A company has an on-premises Active Directory and wants to move to Microsoft 365. They have a regulatory requirement that user passwords must never be stored in the cloud. They also want single sign-on (SSO) for their users. Which hybrid identity approach should they choose?
Select an answer first
14foundation · easy
Which Microsoft 365 identity and access management service provides authentication, single sign-on, and conditional access for users and applications?
Select an answer first
15foundation · easy
Which component is required to establish a hybrid identity between on-premises Active Directory and Microsoft Entra ID?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-900” is a trademark of its owner, used for identification only.

Describe Identity and Access Management Solutions of Microsoft 365 MS-900 Practice Questions (Page 3)

Questions 11–15

A company uses Microsoft Entra ID as its identity provider. They want to give external partners access to a specific SharePoint site without creating user accounts in their own directory. What should they use?

A company has an on-premises Active Directory and wants to move to Microsoft 365. They have a regulatory requirement that user passwords must never be stored in the cloud. They also want single sign-on (SSO) for their users. Which hybrid identity approach should they choose?

Which Microsoft 365 identity and access management service provides authentication, single sign-on, and conditional access for users and applications?

Which component is required to establish a hybrid identity between on-premises Active Directory and Microsoft Entra ID?

Keep studying — Describe security, compliance, privacy, and trust in Microsoft 365