Describe Identity Protection and Governance Capabilities of Microsoft Entra SC-900 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization wants to ensure that no user has permanent access to the Global Administrator role. Instead, users should request activation when needed, and the activation should require approval and multi-factor authentication. What should the administrator configure in Microsoft Entra?

   • AUse conditional access to require MFA for Global Administrator sign-ins
   • BCreate an access review for the Global Administrator role that runs monthly
   • CMake the Global Administrator role eligible in Privileged Identity Management and require approval and MFA for activation
   • DAssign the Global Administrator role with a time-limited expiration
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security administrator needs to grant a support engineer the ability to reset user passwords, but only for a few hours each week and only when the engineer explicitly requests the permission. The administrator also wants a record of when the permission is used. What should you configure in Microsoft Entra?

   • AAn access review for the password administrator role
   • BA self-service password reset policy for the support engineer
   • CAn eligible role assignment in Privileged Identity Management with an approval workflow
   • DA permanent role assignment with a conditional access policy requiring MFA
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company uses Microsoft Entra ID Governance to automate the identity lifecycle. When an employee is hired, their account is created and assigned to the Sales group. When the employee is terminated, the account is disabled and the Sales group membership is removed. What is this process called?

   • APrivileged identity management
   • BRisk-based conditional access
   • CAccess review
   • DIdentity lifecycle management
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How does Microsoft Entra ID Protection detect identity risks?

   • ABy reviewing access reviews results
   • BBy analyzing user sign-in behavior and other signals
   • CBy requiring users to change passwords regularly
   • DBy scanning on-premises servers for malware
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How does a role become deactivated in Microsoft Entra Privileged Identity Management (PIM)?

   • AThe role is deactivated only when an administrator manually removes it
   • BThe role is deactivated when the user signs out of Microsoft Entra
   • CThe role is deactivated when the user changes their password
   • DThe role is automatically deactivated when the activation duration expires
   Reveal Solution Discussion Select an answer first