Define Identity Concepts SC-900 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of federation in identity management?

   • ATo allow users to use the same identity across multiple organizations or systems without separate credentials.
   • BTo encrypt all communication between organizations.
   • CTo create a single database of all user passwords for an organization.
   • DTo replace the need for authentication entirely.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of authorization?

   • ATo verify the identity of a user attempting to access a system.
   • BTo encrypt data so that only authorized users can read it.
   • CTo determine what actions a verified user is allowed to perform on resources.
   • DTo record user actions for compliance auditing.
   Reveal Solution Discussion Select an answer first
4. 3application · easy

   A user signs in to a corporate application using a smart card and a PIN. The application verifies the smart card certificate and the PIN before allowing access. What is this process called?

   • AAuthentication
   • BFederation
   • CDirectory service lookup
   • DAuthorization
   Reveal Solution Discussion Select an answer first
5. 4application · easy

   A small business wants to manage user accounts and passwords for its employees in a central location so that IT can control access to file shares and printers on the local network. Which technology is most appropriate for this on-premises environment?

   • AActive Directory Domain Services (AD DS)
   • BA federation service such as Active Directory Federation Services (AD FS)
   • CA DNS server
   • DAzure Active Directory (now Microsoft Entra ID)
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is moving from a traditional network perimeter to an identity-centric security model. The security team must decide how to protect access to a legacy application that only supports on-premises authentication. Which approach best aligns with the identity-centric model while still supporting the legacy application?

   • AKeep the application accessible only from the corporate network and rely on the firewall
   • BDisable authentication for the application
   • CMove the application to the public internet with no access controls
   • DPlace the application behind a remote access solution that authenticates users before allowing access
   Reveal Solution Discussion Select an answer first