Define Identity Concepts SC-900 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   An organization uses Active Directory to manage user accounts. A new application requires fine-grained access control based on user attributes such as department and job title. The application currently authenticates users against Active Directory. What is the best way to provide the application with the necessary attribute information?

   • ACreate a separate database of user attributes and manually maintain it
   • BEnsure the required attributes are populated in Active Directory and have the application read them after authentication
   • CUse the user's password to determine access
   • DGrant all users the same access level
   Reveal Solution Discussion Select an answer first
2. 22application · easy

   A user attempts to sign in to a cloud application. The application checks the user's password and then verifies that the user is allowed to access the 'Sales Reports' folder. Which two distinct processes are being performed, in order?

   • AAuthentication, then federation
   • BAuthorization, then authentication
   • CDirectory service lookup, then authentication
   • DAuthentication, then authorization
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company has multiple cloud applications that each require user authentication. Currently, users must sign in separately to each application. The company wants to implement single sign-on (SSO) so users sign in once and access all applications. They plan to use a central identity provider. What is the primary benefit of this approach?

   • AEach application maintains its own user database
   • BUsers no longer need any authentication
   • CUsers authenticate once and the identity provider issues tokens that multiple applications accept
   • DThe identity provider stores all application data
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company is implementing a new customer portal. The portal will be used by external customers who do not have corporate accounts. The security team wants to ensure that customers are who they claim to be, but they do not want to manage customer credentials. Which approach best meets this requirement?

   • ACreate customer accounts in the corporate Active Directory
   • BUse a shared password for all customers
   • CAllow customers to authenticate using a social or external identity provider
   • DSkip authentication and rely on the network firewall
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company uses Microsoft Entra ID as its identity provider for a custom application. The application does not store user passwords. When a user signs in, the application redirects the user to Microsoft Entra ID for authentication. After successful authentication, what does the application receive to identify the user?

   • AA copy of the user's directory entry
   • BThe user's password hash
   • CA token containing identity claims about the user
   • DA network path to the user's device
   Reveal Solution Discussion Select an answer first