Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Microsoft logo

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 2Objective 1

Describe Function and Identity Types of Microsoft Entra ID SC-900 Practice Questions (Page 4)

Part of the Describe the capabilities of Microsoft Entra domain, which accounts for 25–30% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here
7free pages
5concepts
25–30%of the exam

Questions 16–20

  1. 16application · medium

    A company uses Microsoft Entra ID to manage identities for its employees and devices. They want to ensure that only compliant devices can access corporate email. Which Microsoft Entra ID feature should they use?

    Select an answer first
  2. 17application · medium

    An organization has a custom application that runs in Azure and needs to access Azure Key Vault. They want to use a non-interactive identity for the application. Which identity type should they use?

    Select an answer first
  3. 18expert · hard

    A company has on-premises Active Directory and wants to implement hybrid identity. They have a requirement for users to be able to reset their own passwords from the cloud, and the changes must be written back to on-premises AD. They also want to avoid storing password hashes in the cloud. Which hybrid identity method should they choose?

    Select an answer first
  4. 19application · medium

    A company uses Microsoft Entra ID as its identity provider. Employees access a third-party SaaS application that supports SAML 2.0. The company wants to enable single sign-on so employees do not need separate credentials for this app. What should the IT team configure in Microsoft Entra ID?

    Select an answer first
  5. 20application · medium

    A company wants to implement a conditional access policy that requires devices to be compliant before accessing corporate email. They have both registered and non-registered devices. Which identity type should the policy reference to identify compliant devices?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.