Describe Identity Protection and Governance Capabilities of Microsoft Entra SC-900 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security team wants to reduce the risk of standing privileged access. They plan to use Privileged Identity Management to require activation for privileged roles, but they also want to periodically verify that the eligible users still need those roles. What should you configure?

   • APIM with identity lifecycle management
   • BPIM with conditional access policies requiring MFA
   • CAccess reviews with self-service password reset
   • DPIM with access reviews for privileged roles
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In Microsoft Entra ID Governance, what does identity lifecycle management primarily handle?

   • AThe process of synchronizing identities from on-premises directories
   • BThe process of assigning temporary elevated roles to users
   • CThe process of creating, maintaining, and deleting identities based on a person's role in the organization
   • DThe process of detecting and responding to risky sign-ins
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   Contoso's finance team has 40 users with access to a sensitive cost-tracking application. The compliance officer wants to verify that each user still needs access, and to automatically remove access for users who do not respond to the review request. What should you configure in Microsoft Entra?

   • AA Privileged Identity Management role assignment for the finance team
   • BAn identity lifecycle policy that deletes users after 90 days of inactivity
   • CAn access review with the 'Auto apply results to resource' setting enabled
   • DA conditional access policy that requires multi-factor authentication for the application
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company notices that several users have signed in from a new location and then immediately changed their passwords. The security team wants to automatically block sign-ins that are considered high risk, but they want to allow users to self-remediate if the risk is low. What should you configure in Microsoft Entra?

   • AA Privileged Identity Management activation policy for all users
   • BA user risk policy in ID Protection that blocks high-risk users and allows self-service password reset for low risk
   • CA conditional access policy that uses the 'Require MFA' grant control for all users
   • DAn access review that requires users to confirm their sign-ins
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the main purpose of access reviews in Microsoft Entra?

   • ATo monitor sign-in logs for suspicious activity
   • BTo enforce multi-factor authentication for all users
   • CTo automatically grant access to all users based on their job titles
   • DTo ensure that users have the appropriate level of access by periodically reviewing and confirming their access rights
   Reveal Solution Discussion Select an answer first