Describe Authentication Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company requires all users to verify their identity with a second factor when accessing the HR portal from outside the corporate network. The HR portal is a cloud app registered in Microsoft Entra ID. Users already have the Microsoft Authenticator app installed on their mobile devices for other purposes. What should the administrator configure to meet the requirement with the least additional user friction?

   • ABlock all access to the HR portal from outside the corporate network using a Conditional Access policy.
   • BEnable MFA for all users in the tenant by using the per-user MFA settings and require a phone call as the secondary method.
   • CRequire users to reset their passwords before accessing the HR portal from outside the network.
   • DEnable a Conditional Access policy that requires MFA for the HR portal when the location is not trusted, using Microsoft Authenticator as the allowed method.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A company wants to reduce help desk calls for password resets. They have enabled self-service password reset (SSPR) for all users. However, users are still calling the help desk because they do not know how to register for SSPR. What should the administrator do to encourage self-service registration?

   • ADisable SSPR and require users to contact the help desk for all password issues.
   • BEnable MFA for all users and require them to use the Microsoft Authenticator app.
   • CSet the SSPR number of questions required to reset to zero.
   • DConfigure the SSPR registration campaign to require users to register at their next sign-in.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A company wants to block users from using passwords that contain the company name or common variations. They also want to allow users to reset their own passwords using a mobile app notification. What should the administrator configure?

   • AConfigure a Conditional Access policy to require MFA for password changes.
   • BAdd the company name to the custom banned password list in Microsoft Entra Password Protection, and enable SSPR with the Microsoft Authenticator app as a method.
   • CSet the password expiration to 90 days and enforce a minimum length of 12 characters.
   • DEnable SSPR and require users to answer security questions.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company wants to reduce helpdesk calls for password resets. They have Microsoft Entra ID P1 and all users have registered for MFA. What should they enable to allow users to reset their own passwords?

   • AMicrosoft Entra Password Protection
   • BPassword writeback
   • CSelf-service password reset
   • DConditional Access MFA
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company wants to allow users to reset their own passwords, but they also want to prevent users from reusing their last five passwords. Which Microsoft Entra ID feature should they configure?

   • AMicrosoft Entra Password Protection
   • BConditional Access MFA
   • CPassword expiration policy with a history requirement
   • DSelf-service password reset
   Reveal Solution Discussion Select an answer first