What is the core principle of Role-Based Access Control (RBAC) in Microsoft Entra ID?

Permissions are granted directly to each user individually without using roles

Permissions are granted based on the user's location

Permissions are granted based on the user's seniority level

Users are granted permissions based on their job function through role assignments

What is a benefit of assigning a Microsoft Entra role to a group instead of to individual users?

It prevents users from being removed from the role

It grants the role to all users in the tenant

It simplifies permission management because users added to the group automatically receive the role's permissions

It eliminates the need for Conditional Access policies

An organization wants to use Conditional Access to require users to accept the terms of use before accessing a cloud application. Which control should they configure?

Session control: Use app enforced restrictions

Grant control: Require terms of use

Grant control: Require compliant device

Session control: Sign-in frequency

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 2Objective 3

Describe Access Management Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 5)

Part of the Describe the capabilities of Microsoft Entra domain, which accounts for 25–30% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

25–30%of the exam

Questions 21–25

21foundation · easy
What is the core principle of Role-Based Access Control (RBAC) in Microsoft Entra ID?
Select an answer first
22foundation · easy
What is a benefit of assigning a Microsoft Entra role to a group instead of to individual users?
Select an answer first
23application · easy
An organization wants to use Conditional Access to require users to accept the terms of use before accessing a cloud application. Which control should they configure?
Select an answer first
24application · medium
A company wants to allow a team of support staff to manage user account properties, such as job titles and office phone numbers, but they must NOT be able to reset passwords or manage groups. Which built-in Microsoft Entra role should be assigned?
Select an answer first
25foundation · easy
In Microsoft Entra ID, to which of the following can a role be assigned?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.

Describe Access Management Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 5)

Questions 21–25

What is the core principle of Role-Based Access Control (RBAC) in Microsoft Entra ID?

What is a benefit of assigning a Microsoft Entra role to a group instead of to individual users?

An organization wants to use Conditional Access to require users to accept the terms of use before accessing a cloud application. Which control should they configure?

A company wants to allow a team of support staff to manage user account properties, such as job titles and office phone numbers, but they must NOT be able to reset passwords or manage groups. Which built-in Microsoft Entra role should be assigned?

In Microsoft Entra ID, to which of the following can a role be assigned?

Keep studying — Describe the capabilities of Microsoft Entra