What is the purpose of a session control in a Conditional Access policy?

To require multi-factor authentication before access is granted

To evaluate the user's location before access is granted

To limit the user's experience within a session after access is granted

To block access to the resource entirely

An organization wants to enforce a session control that limits the sign-in frequency for users accessing a financial application. They want users to re-authenticate every 30 minutes. Which Conditional Access control should they configure?

Grant control: Require compliant device

Grant control: Require multifactor authentication

Session control: Sign-in frequency

Session control: Use app enforced restrictions

A small company has a single IT administrator who manages all users and groups. They want to give a new hire the ability to reset passwords for other users, but they do not want to give them any other administrative permissions. What is the most appropriate way to grant this permission?

Create a custom role with the permission to manage all users

Assign the Global Administrator role to the new hire

Add the new hire to the User Administrator role

Assign the Password Administrator role to the new hire

How does Role-Based Access Control (RBAC) help manage user permissions in Microsoft Entra ID?

It uses machine learning to predict which permissions a user needs

It allows administrators to assign permissions to roles and then add users to those roles

It requires users to request permissions each time they access a resource

It automatically grants all users the same permissions regardless of role

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 2Objective 3

Describe Access Management Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 2)

Part of the Describe the capabilities of Microsoft Entra domain, which accounts for 25–30% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

25–30%of the exam

Questions 6–10

6foundation · easy
What is the purpose of a session control in a Conditional Access policy?
Select an answer first
7application · medium
An organization wants to enforce a session control that limits the sign-in frequency for users accessing a financial application. They want users to re-authenticate every 30 minutes. Which Conditional Access control should they configure?
Select an answer first
8foundation · easy
Which built-in Microsoft Entra role is designed to manage all aspects of Microsoft Entra ID and other Microsoft 365 services?
Select an answer first
9application · medium
A small company has a single IT administrator who manages all users and groups. They want to give a new hire the ability to reset passwords for other users, but they do not want to give them any other administrative permissions. What is the most appropriate way to grant this permission?
Select an answer first
10foundation · easy
How does Role-Based Access Control (RBAC) help manage user permissions in Microsoft Entra ID?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.