Define Identity Concepts SC-900 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is moving its customer-facing application to a cloud platform. The security team wants to ensure that only authenticated users can access the application and that each user can only view data belonging to their own account. Which two concepts must be implemented together to meet this requirement?

   • AAuthentication and authorization
   • BIdentity providers and authentication
   • CAuthorization and federation
   • DFederation and directory services
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   Two companies are merging. Company A uses Microsoft Entra ID, and Company B uses a different identity provider. Employees from both companies need to access a shared project management application. The application currently only accepts logins from Company A's identity provider. What is the most efficient way to allow Company B employees to access the application?

   • AHave Company B employees use a shared generic account
   • BEstablish federation between Company B's identity provider and Company A's identity provider
   • CMigrate all Company B users to Company A's identity provider
   • DCreate separate accounts for Company B employees in the application
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An organization has an on-premises Active Directory Domain Services (AD DS) environment. IT wants to grant a new employee access to the HR file share but not to the finance file share. What is the most direct way to accomplish this using AD DS?

   • ACreate a user object for the employee and assign permissions on the HR share to that user or a group containing the user.
   • BCreate a new organizational unit (OU) for the employee and move the file shares into that OU.
   • CConfigure a federation trust with the HR file share server.
   • DModify the DNS records for the file shares to point only to the employee's computer.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In modern security architectures, why is identity often considered the primary security perimeter?

   • ABecause identity is used only for external users, while internal users are trusted by default.
   • BBecause identity is the only security control required to protect data in modern systems.
   • CBecause network firewalls are no longer needed when strong identity controls are in place.
   • DBecause identity verification is the first step in granting access to resources, regardless of where the user or resource is located.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which scenario best illustrates authorization?

   • AA user receives a one-time passcode to complete a sign-in.
   • BA user is allowed to view a document because their account has the 'Read' permission.
   • CA user provides a fingerprint to unlock their laptop.
   • DA user's password is reset by an administrator after a security incident.
   Reveal Solution Discussion Select an answer first