Describe Authentication Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company wants to require MFA for all users, but they have a group of users who work in a remote area with no cellular or internet connectivity for extended periods. These users only need to access cloud apps when they have connectivity. The company wants to ensure that these users can still authenticate when they are offline. What should the administrator do?

   • ARequire MFA using the Microsoft Authenticator app with one-time passcodes.
   • BRequire MFA using SMS verification codes.
   • CRequire MFA using office phone calls.
   • DExempt these users from MFA.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which capability is provided by Microsoft Entra ID for managing passwords?

   • AAdministrators can set password expiration policies for users
   • BAdministrators can set a global password for all users
   • CUsers can change other users' passwords
   • DAdministrators can view users' plaintext passwords
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company wants to allow users to sign in to their Windows 11 devices using facial recognition. They also want to require MFA for access to a sensitive app. The users are already enrolled in Microsoft Entra ID. What should the administrator configure?

   • AEnable Windows Hello for Business with biometrics, and configure a Conditional Access policy to require MFA for the sensitive app.
   • BConfigure Microsoft Authenticator app for passwordless sign-in and require MFA for the sensitive app.
   • CEnable FIDO2 security keys and require MFA for the sensitive app.
   • DEnable self-service password reset and require MFA for the sensitive app.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary benefit of self-service password reset (SSPR) in Microsoft Entra ID?

   • AIt reduces helpdesk workload by allowing users to reset their own passwords
   • BIt automatically changes passwords for all users on a schedule
   • CIt stores passwords in a secure vault for administrators to access
   • DIt prevents users from ever forgetting their passwords
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company has enabled SSPR, but they are concerned that users might reset their passwords to weak values. They have enabled Microsoft Entra Password Protection with the default global banned list. They also want to ensure that users verify their identity with two methods when resetting. What should the administrator do to strengthen the reset process?

   • AEnable MFA for all users and require them to use the Microsoft Authenticator app.
   • BSet the SSPR number of methods required to reset to one and enforce a minimum password length of 8 characters.
   • CAdd custom terms to the banned password list and set the SSPR number of methods required to reset to two.
   • DDisable SSPR and require users to contact the help desk for password resets.
   Reveal Solution Discussion Select an answer first