What is the primary purpose of a Conditional Access policy in Microsoft Entra ID?

To provide a one-time access code for external users to join the tenant

To enforce security requirements by evaluating signals and applying access decisions when users sign in

To replace multi-factor authentication (MFA) as the sole security mechanism for all user sign-ins

To automatically reset user passwords when a security risk is detected

Which of the following is a condition that can be configured in a Conditional Access policy?

Storage account replication type

A company wants to assign the same Microsoft Entra role to a group of 20 users who all need to manage user passwords. They want to minimize administrative overhead. What should they do?

Create a group, add the 20 users, and assign the Password Administrator role to the group

Assign the Global Administrator role to the group

Assign the Password Administrator role to each user individually

Create a custom role and assign it to each user

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 2Objective 3

Describe Access Management Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 4)

Part of the Describe the capabilities of Microsoft Entra domain, which accounts for 25–30% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

25–30%of the exam

Questions 16–20

16foundation · easy
Which type of Conditional Access control can require a user to accept terms of use before accessing a resource?
Select an answer first
17foundation · easy
What is the primary purpose of a Conditional Access policy in Microsoft Entra ID?
Select an answer first
18foundation · easy
Which built-in Microsoft Entra role is intended for users who need to view security-related information but should not make changes?
Select an answer first
19foundation · easy
Which of the following is a condition that can be configured in a Conditional Access policy?
Select an answer first
20application · medium
A company wants to assign the same Microsoft Entra role to a group of 20 users who all need to manage user passwords. They want to minimize administrative overhead. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.

Describe Access Management Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 4)

Questions 16–20

Which type of Conditional Access control can require a user to accept terms of use before accessing a resource?

What is the primary purpose of a Conditional Access policy in Microsoft Entra ID?

Which built-in Microsoft Entra role is intended for users who need to view security-related information but should not make changes?

Which of the following is a condition that can be configured in a Conditional Access policy?

A company wants to assign the same Microsoft Entra role to a group of 20 users who all need to manage user passwords. They want to minimize administrative overhead. What should they do?

Keep studying — Describe the capabilities of Microsoft Entra