Describe Identity Protection and Governance Capabilities of Microsoft Entra SC-900 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company wants to automate the creation of user accounts when new employees are hired and automatically disable accounts when employees leave. They also want to periodically verify that users still need access to certain applications. Which Microsoft Entra capabilities should you combine?

   • AAccess reviews with multi-factor authentication
   • BIdentity lifecycle management with access reviews
   • CPrivileged Identity Management with conditional access
   • DID Protection with self-service password reset
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A user reports that they received a notification from Microsoft Entra about a sign-in that they do not recognize. The sign-in was from a new device in a different country and occurred while the user was asleep. The user’s account has not been compromised, but the sign-in was flagged as risky. What should the administrator do to automatically respond to similar future events?

   • ASet the user’s password to expire immediately and require a change at next sign-in
   • BCreate an access review that removes the user’s access if they fail to respond
   • CConfigure a conditional access policy that requires multi-factor authentication when sign-in risk is medium or higher
   • DAdd the user to a group that blocks sign-ins from other countries
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A project manager needs to review the access of all users in a specific Microsoft 365 group every quarter. The review should allow the project manager to approve or deny each user’s membership. After the review, denied users should have their membership removed automatically. What should the administrator configure?

   • AAn identity lifecycle policy that deletes the group after 90 days
   • BA recurring access review on the group with the project manager as reviewer and auto-apply results enabled
   • CA privileged identity management role assignment for the project manager to the group
   • DA conditional access policy that removes group membership after 90 days
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company has a group that grants access to a project management tool. The group currently has 50 members, but some members have left the company. The compliance team wants to ensure that only current employees have access. What should you configure in Microsoft Entra?

   • AA user risk policy that requires MFA for all group members
   • BAn identity lifecycle policy that deletes users after 30 days
   • CA conditional access policy that blocks sign-ins from former employees
   • DAn access review for the group with reviewers set to 'Group owner'
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of Microsoft Entra ID Governance?

   • ATo protect identities from external attacks using machine learning
   • BTo manage the lifecycle of identities and govern access to resources through automation and reviews
   • CTo provide a single sign-on experience for users across applications
   • DTo provide a secure storage for passwords and credentials
   Reveal Solution Discussion Select an answer first