Define Identity Concepts SC-900 Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   Two organizations, A and B, want to collaborate. Organization A uses Microsoft Entra ID, and Organization B uses a third-party identity provider. Employees of A need to access B's application, and employees of B need to access A's application. They want to avoid creating separate accounts in each other's systems. What is the most efficient solution?

   • AEstablish a federation trust between the two identity providers, allowing each organization to authenticate its own users and the other to trust those identities.
   • BUse a single shared identity provider for both organizations.
   • CCreate guest accounts in each organization's identity provider for all collaborating users.
   • DSynchronize all user accounts from both organizations into both identity providers.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   Company A and Company B have a partnership. Employees of Company A need to access a partner portal hosted by Company B without having separate accounts in Company B's system. Which technology enables this by allowing Company A's identity system to authenticate its users and Company B to trust that authentication?

   • AMulti-factor authentication (MFA)
   • BFederation
   • CA directory service
   • DRole-based access control (RBAC)
   Reveal Solution Discussion Select an answer first
4. 28application · easy

   A user successfully authenticates to a cloud application but receives an 'access denied' message when trying to open a specific document. What is the most likely reason for this?

   • AThe user's password was incorrect, but the system allowed them in anyway.
   • BThe user's account is locked out due to too many failed attempts.
   • CThe identity provider is down, so the application cannot verify the user.
   • DThe user's identity was verified, but the user is not authorized to access that document.
   Reveal Solution Discussion Select an answer first
5. 29expert · medium

   A security administrator is designing access for a cloud application. The requirement is that users must prove their identity with at least two different factors, and after authentication, they should only be able to access resources based on their assigned role. Which combination of concepts is being applied?

   • ASingle sign-on (SSO) for authentication, and conditional access for authorization.
   • BMulti-factor authentication (MFA) for authentication, and role-based access control (RBAC) for authorization.
   • CPasswordless authentication for authentication, and attribute-based access control (ABAC) for authorization.
   • DFederation for authentication, and directory services for authorization.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company is deploying a new application that will be accessed by both employees and external partners. The security team wants to ensure that the application can verify the identity of users without storing any user credentials. The application will rely on an external identity provider. Which approach best meets this requirement?

   • AHave the application directly validate user passwords against the identity provider's database
   • BUse a shared secret stored in the application to authenticate all users
   • CCreate local user accounts in the application and synchronize passwords from the identity provider
   • DUse the external identity provider to authenticate users and have the application accept tokens issued by that provider
   Reveal Solution Discussion Select an answer first