Describe Identity and Access Management Solutions of Microsoft 365 MS-900 Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is a key benefit of a hybrid identity model in Microsoft 365?

   • AUsers can use the same credentials for on-premises and cloud resources
   • BOn-premises Active Directory is no longer needed
   • CCloud identities are created independently of on-premises accounts
   • DAll users must use smart cards for authentication
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A company wants to reduce helpdesk calls for password resets. They have enabled SSPR for all users, but some users report they cannot reset their password because they haven't registered the required authentication methods. What should the company do to ensure users can use SSPR?

   • AEnable MFA for all users so they are forced to register methods.
   • BSet a temporary password for each user and tell them to reset it on first sign-in.
   • CRequire users to register authentication methods as part of the sign-in process by enabling combined registration.
   • DDisable SSPR for users who haven't registered and force them to call the helpdesk.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A company has an on-premises Active Directory environment and wants to enable single sign-on (SSO) to Microsoft 365 for their users. They already have Microsoft Entra Connect configured with password hash synchronization. What additional step is required to provide SSO?

   • AAssign the Global Administrator role to all users
   • BEnable Seamless SSO in Microsoft Entra Connect
   • CDeploy Active Directory Federation Services (AD FS)
   • DConfigure password writeback for SSO
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A law firm wants to ensure that when partners access client files from outside the office, they must use multi-factor authentication (MFA). However, when partners are in the office, they should not be prompted for MFA. Which Microsoft Entra ID feature should they configure?

   • AMFA settings in Microsoft Entra ID that require MFA for all users
   • BSelf-Service Password Reset (SSPR) with MFA enabled
   • CMicrosoft Entra ID Protection sign-in risk policy requiring MFA for all sign-ins
   • DConditional Access policy that requires MFA for all access from locations that are not trusted
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   An organization has a Conditional Access policy that requires MFA for all users. They also have a policy that blocks access from untrusted locations. A user is traveling and tries to access email from a hotel network. The user is blocked. What is the most likely reason?

   • AThe user's account is locked due to multiple failed sign-in attempts.
   • BThe Conditional Access policy blocks access from untrusted locations, and the hotel network is not a trusted location.
   • CThe user's MFA registration is incomplete.
   • DThe hotel network is blocking Microsoft 365 services.
   Reveal Solution Discussion Select an answer first