A company's IT administrator needs to create a new user account for an employee and add the account to the appropriate security groups. Which tool is designed for this task in an on-premises Windows environment?

Group Policy Management Console

Active Directory Users and Computers

A small business uses an on-premises Active Directory domain to manage employee accounts and group memberships. They want to extend the same identities to a cloud-based productivity suite. What is the most direct benefit of using a directory service like Active Directory in this scenario?

It provides a central repository for identity and access information

It eliminates the need for any authentication

It creates a firewall between on-premises and cloud networks

It automatically encrypts all network traffic

Which statement best describes the role of identity as a security perimeter in a cloud-first organization?

Identity is the primary control point for determining who can access applications and data across cloud and on-premises environments.

Identity is a secondary control that is only used when multi-factor authentication is required.

Identity is used only for user authentication, not for controlling access to resources.

Identity controls are only needed for users accessing resources from outside the corporate network.

Which of the following is an example of a directory service?

Microsoft Entra ID (Azure Active Directory)

An organization runs a legacy on-premises application that authenticates users against Active Directory. The security team wants to enforce a policy that only members of the 'Finance' group can access the application. Where should this authorization rule be implemented?

In the application's access control configuration

In the Active Directory domain's DNS settings

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 1Objective 2

Define Identity Concepts SC-900 Practice Questions (Page 2)

Part of the Describe the concepts of security, compliance, and identity domain, which accounts for 10–15% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~2–5 in this domain), expect 1–3 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

7concepts

10–15%of the exam

Questions 6–10

6application · medium
A company's IT administrator needs to create a new user account for an employee and add the account to the appropriate security groups. Which tool is designed for this task in an on-premises Windows environment?
Select an answer first
7application · medium
A small business uses an on-premises Active Directory domain to manage employee accounts and group memberships. They want to extend the same identities to a cloud-based productivity suite. What is the most direct benefit of using a directory service like Active Directory in this scenario?
Select an answer first
8foundation · easy
Which statement best describes the role of identity as a security perimeter in a cloud-first organization?
Select an answer first
9foundation · easy
Which of the following is an example of a directory service?
Select an answer first
10application · medium
An organization runs a legacy on-premises application that authenticates users against Active Directory. The security team wants to enforce a policy that only members of the 'Finance' group can access the application. Where should this authorization rule be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.