Describe Authentication Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company uses Microsoft Entra ID with password hash synchronization. They want to improve security by blocking the use of common passwords and requiring users to change passwords periodically. Which two features should they enable?

   • AConditional Access MFA and trusted IPs
   • BSelf-service password reset and password writeback
   • CFIDO2 security keys and Windows Hello for Business
   • DMicrosoft Entra Password Protection and password expiration policy
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   Contoso has 500 users who access Microsoft 365 from both corporate-managed Windows devices and personal mobile phones. The security team wants to require MFA for all users but wants to minimize sign-in friction for users on corporate-managed devices that are already compliant. Which two Microsoft Entra ID capabilities should the team combine?

   • ASet the per-user MFA state to 'Enabled' for all users, and configure trusted IPs for the corporate network
   • BEnable security defaults for the tenant, which enforces MFA for all users and blocks legacy authentication
   • CConditional Access policy requiring MFA for all users, with a grant control that allows access if the device is marked as compliant
   • DDeploy Microsoft Entra ID Free and use the 'MFA registration campaign' to require users to register MFA methods
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   How do Conditional Access policies enhance MFA in Microsoft Entra ID?

   • ABy automatically resetting user passwords when MFA fails
   • BBy requiring MFA only when certain conditions are met, such as sign-in risk or location
   • CBy disabling MFA for all users to simplify sign-in
   • DBy storing MFA codes in the user's profile
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which scenario best illustrates the value of multifactor authentication (MFA) in Microsoft Entra ID?

   • AA user's password is stolen, but the attacker cannot access the account because they do not have the user's phone for the second factor
   • BA user can access resources without any credentials if they have MFA enabled
   • CA user signs in faster because they only need to enter a code
   • DA user forgets their password and uses MFA to reset it
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   An organization wants to require MFA for all users when they access the corporate email app, but they want to exclude users who are on the corporate network because those devices are managed. They also want to allow users to use either the Microsoft Authenticator app or a hardware token. What should the administrator configure?

   • ACreate a Conditional Access policy that targets the email app, requires MFA, and includes a condition for trusted locations.
   • BSet up self-service password reset and require MFA for password resets.
   • CEnable per-user MFA for all users and require the Microsoft Authenticator app.
   • DConfigure a Conditional Access policy that blocks access to the email app from untrusted locations.
   Reveal Solution Discussion Select an answer first