Describe Identity Protection and Governance Capabilities of Microsoft Entra SC-900 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security team wants to receive alerts when users are flagged as risky by Microsoft Entra ID Protection. They also want to automatically require users with medium or higher user risk to change their password. What should they configure?

   • AA privileged identity management policy that blocks risky users from activating roles
   • BA conditional access policy that requires a password change when user risk is medium or higher
   • CA password expiration policy that shortens the password lifetime for all users
   • DAn access review that removes risky users from all groups
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In Microsoft Entra Privileged Identity Management (PIM), what happens when a user activates a role?

   • AThe user receives permanent access to the role
   • BThe user's password is changed
   • CThe user is added to a group permanently
   • DThe user is granted the role's permissions for a limited time
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A user with an eligible assignment for the Security Administrator role needs to perform a task that requires that role. The user activates the role, but the activation request is pending approval. What should the user do to proceed?

   • AUse the role immediately because activation is automatic
   • BPerform the task using a different account that has the role
   • CAsk a global administrator to permanently assign the role
   • DWait for the approval and then re-attempt the task
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   Contoso has a policy that all contractors must have their access to the finance system reviewed every 90 days. The compliance team wants to automate this process so that reviewers receive email notifications and can approve or deny access directly from the email. What should you configure in Microsoft Entra?

   • AA privileged identity management role activation policy with a 90-day maximum duration
   • BAn identity lifecycle policy that deletes contractor accounts after 90 days
   • CA conditional access policy that blocks contractors after 90 days
   • DAn access review that recurs every 90 days with reviewers assigned to the finance system role
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a possible response that Microsoft Entra ID Protection can automatically take when a risk is detected?

   • ADelete the user's account
   • BBlock the user's sign-in
   • CReset the user's password without user interaction
   • DGrant the user additional permissions
   Reveal Solution Discussion Select an answer first