Describe Identity and Access Management Solutions of Microsoft 365 MS-900 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which tool is used to synchronize on-premises Active Directory identities to Microsoft Entra ID?

   • AMicrosoft Intune
   • BMicrosoft Endpoint Configuration Manager
   • CMicrosoft Entra Connect
   • DActive Directory Users and Computers
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company wants to provide a single sign-on experience for users accessing both Microsoft 365 and a third-party SaaS application. The third-party app supports SAML 2.0. What should they configure in Microsoft Entra ID?

   • AUse Microsoft Entra ID Governance to automate access reviews.
   • BAdd the third-party app as an enterprise application and configure SAML-based single sign-on.
   • CCreate a guest account for each user in the third-party app.
   • DConfigure password hash sync for the third-party app.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which feature is commonly used to verify a user's identity during a self-service password reset?

   • AThe user's manager's email address
   • BThe user's employee ID
   • CThe user's previous password
   • DA verification code sent to a registered phone number
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company wants to enforce multi-factor authentication (MFA) for all users, but they have a group of service accounts that cannot use MFA. What is the recommended approach?

   • ACreate a Conditional Access policy that requires MFA for all users, but excludes the service accounts
   • BDo not enforce MFA for any users to avoid complexity
   • CEnable MFA for all users and require service accounts to use a hardware token
   • DUse Self-Service Password Reset (SSPR) instead of MFA
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company has a hybrid identity environment with Microsoft Entra Connect. They want to enable SSPR for users, but they are concerned about security. They want to require two authentication methods for SSPR. Which configuration should they use?

   • ASet the number of methods required to reset to two in SSPR settings.
   • BConfigure password writeback to ensure on-premises passwords are updated.
   • CEnable MFA for all users and use that as the second method.
   • DUse Conditional Access to require MFA for SSPR.
   Reveal Solution Discussion Select an answer first