Which statement correctly describes the function of an identity provider in a federated scenario?

It replaces the need for any other security controls in the environment.

It stores all user data for every application in the organization.

It only works within a single organization and cannot be used across different systems.

It acts as a trusted source to authenticate users and provide identity information to other systems.

Which statement accurately describes how Active Directory supports identity management?

It provides a platform for developing and deploying web applications.

It is used only for managing cloud resources and has no role in on-premises environments.

It stores user accounts and passwords, and enforces policies such as password complexity and account lockout.

It is a network monitoring tool that analyzes traffic for security threats.

An IT administrator needs to find all user accounts that are members of the 'Finance' group in the on-premises Active Directory. Which tool or method is most appropriate?

Use the Group Policy Management Console (GPMC) to view group members.

Use the DNS Manager to query group membership.

Use the Azure portal to view on-premises group members.

Use Active Directory Users and Computers (ADUC) to view the members of the Finance group.

A company has an on-premises Active Directory (AD) environment and is planning to move to a cloud-only identity model using Microsoft Entra ID. They have many legacy line-of-business applications that require LDAP or Kerberos authentication. The company wants to minimize disruption and avoid rewriting applications. What is the most appropriate strategy?

Rewrite all legacy applications to support modern authentication protocols like OAuth 2.0 and SAML.

Keep all legacy applications on-premises and do not migrate them to the cloud.

Move all legacy applications to Azure Virtual Machines and join them to a traditional on-premises AD domain controller in the cloud.

Use Microsoft Entra Domain Services (Entra DS) to provide managed domain services such as LDAP and Kerberos in the cloud, and synchronize identities from on-premises AD.

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 1Objective 2

Define Identity Concepts SC-900 Practice Questions (Page 9)

Part of the Describe the concepts of security, compliance, and identity domain, which accounts for 10–15% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~2–5 in this domain), expect 1–3 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

7concepts

10–15%of the exam

Questions 41–45

41foundation · easy
Which statement correctly describes the function of an identity provider in a federated scenario?
Select an answer first
42foundation · easy
Which statement accurately describes how Active Directory supports identity management?
Select an answer first
43application · easy
An IT administrator needs to find all user accounts that are members of the 'Finance' group in the on-premises Active Directory. Which tool or method is most appropriate?
Select an answer first
44expert · hard
A company has an on-premises Active Directory (AD) environment and is planning to move to a cloud-only identity model using Microsoft Entra ID. They have many legacy line-of-business applications that require LDAP or Kerberos authentication. The company wants to minimize disruption and avoid rewriting applications. What is the most appropriate strategy?
Select an answer first
45application · medium
A user successfully signs in to a company's HR portal. The portal then checks whether the user is a member of the 'HR Managers' group before allowing access to salary reports. What is the portal performing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.

Define Identity Concepts SC-900 Practice Questions (Page 9)

Questions 41–45

Which statement correctly describes the function of an identity provider in a federated scenario?

Which statement accurately describes how Active Directory supports identity management?

An IT administrator needs to find all user accounts that are members of the 'Finance' group in the on-premises Active Directory. Which tool or method is most appropriate?

A user successfully signs in to a company's HR portal. The portal then checks whether the user is a member of the 'HR Managers' group before allowing access to salary reports. What is the portal performing?

Keep studying — Describe the concepts of security, compliance, and identity