Describe Access Management Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which statement correctly describes how Conditional Access policies are applied in Microsoft Entra ID?

   • AThey are evaluated only for users with an assigned Microsoft Entra ID P2 license
   • BThey are evaluated after a user signs in and can revoke access at any time
   • CThey are evaluated only when an administrator manually triggers them
   • DThey are evaluated at sign-in and can be used to block access or require additional actions
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company has a Conditional Access policy that requires MFA for all users when accessing Microsoft 365. A user reports that they are NOT prompted for MFA when accessing Microsoft 365 from a new device. The user is in a trusted location. What is the most likely reason?

   • AThe user has already registered for MFA
   • BThe policy is configured to exclude trusted locations
   • CThe policy is in report-only mode
   • DThe user is a Global Administrator
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization needs to grant a specific set of permissions to manage application registrations, but none of the built-in roles provide exactly the right combination. What should they do?

   • AUse Conditional Access to grant application permissions
   • BAssign the Application Administrator role to the users
   • CCreate a custom role with the exact permissions needed and assign it to the users
   • DAssign the Global Administrator role and rely on least privilege
   Reveal Solution Discussion Select an answer first
5. 14application · easy

   A company has a group of employees who need to manage user accounts and reset passwords, but they should not be able to manage roles or directory settings. Which Microsoft Entra role should be assigned to this group?

   • AAuthentication Administrator
   • BHelpdesk Administrator
   • CUser Administrator
   • DGlobal Administrator
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to block access to its internal applications from countries where the company has no employees. They also want to allow access only from devices that are marked as compliant. Which two conditions should the Conditional Access policy include?

   • ALocations and device state
   • BClient applications and device platforms
   • CUser risk and sign-in risk
   • DLocations and client applications
   Reveal Solution Discussion Select an answer first