A company has enabled SSPR for all users. They want to ensure that users who are at high risk of compromise are not able to reset their passwords without additional verification. What should they configure?

Use Microsoft Entra ID Protection to block high-risk users from signing in

Require all users to use MFA for SSPR

Disable SSPR for users with high risk

Conditional Access policy that requires MFA for SSPR when sign-in risk is high

Which of the following is an example of a second verification factor in MFA?

A one-time passcode sent to the user's mobile phone

A company wants to allow their employees to use their existing Microsoft Entra ID accounts to access third-party SaaS applications. They do not want to manage separate credentials for each application. What should they configure?

Self-Service Password Reset (SSPR) for each application

Microsoft Entra Connect to sync identities to third-party apps

Enterprise applications in Microsoft Entra ID with single sign-on (SSO)

Conditional Access policies for each application

A small business has 20 employees and no IT staff. They want to ensure all users have MFA enabled without complex configuration. What is the simplest way to achieve this?

Enable security defaults in Microsoft Entra ID.

Use Microsoft Entra ID Free and manually enforce MFA via PowerShell scripts.

Enable per-user MFA for each account.

Create a Conditional Access policy requiring MFA for all users.

In a Microsoft 365 environment that uses on-premises identities, where are the authoritative user accounts stored?

In the Microsoft 365 admin center database

In the on-premises Active Directory Domain Services (AD DS)

Microsoft Certified:Microsoft 365 Fundamentals

Domain 3Objective 1

Describe Identity and Access Management Solutions of Microsoft 365 MS-900 Practice Questions (Page 5)

Part of the Describe security, compliance, privacy, and trust in Microsoft 365 domain, which accounts for 25–30% of the MS-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 2–3 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

7concepts

25–30%of the exam

Questions 21–25

21expert · hard
A company has enabled SSPR for all users. They want to ensure that users who are at high risk of compromise are not able to reset their passwords without additional verification. What should they configure?
Select an answer first
22foundation · easy
Which of the following is an example of a second verification factor in MFA?
Select an answer first
23application · medium
A company wants to allow their employees to use their existing Microsoft Entra ID accounts to access third-party SaaS applications. They do not want to manage separate credentials for each application. What should they configure?
Select an answer first
24application · medium
A small business has 20 employees and no IT staff. They want to ensure all users have MFA enabled without complex configuration. What is the simplest way to achieve this?
Select an answer first
25foundation · easy
In a Microsoft 365 environment that uses on-premises identities, where are the authoritative user accounts stored?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-900” is a trademark of its owner, used for identification only.