Describe Identity Protection and Governance Capabilities of Microsoft Entra SC-900 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A user’s account is flagged by Microsoft Entra ID Protection because of a series of impossible travel sign-ins. The administrator wants to automatically block the user from signing in until the risk is remediated. What should the administrator configure?

   • AA conditional access policy that blocks access when sign-in risk is high
   • BA password expiration policy that forces a password change
   • CAn access review that removes the user’s group memberships
   • DA privileged identity management policy that deactivates the user’s roles
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which scenario best illustrates identity lifecycle management in Microsoft Entra ID Governance?

   • AA user's sign-in is blocked because of a high-risk signal
   • BA user receives a temporary elevation to a privileged role for a specific task
   • CA user's account is automatically disabled when they leave the company
   • DA user is prompted to provide additional verification during sign-in
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which outcome is a direct result of conducting access reviews in Microsoft Entra?

   • AAll users are required to change their passwords
   • BStale or unnecessary access is identified and can be removed
   • CUsers' access to resources is automatically extended indefinitely
   • DNew users are automatically added to all groups
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security administrator needs to grant a support engineer the ability to temporarily reset passwords for other users, but only when needed and only for a limited time. The engineer should not have this ability permanently. What should the administrator configure in Microsoft Entra?

   • AAssign the engineer to the Helpdesk Administrator role with permanent activation
   • BCreate a conditional access policy that blocks the engineer from using the role after business hours
   • CCreate an access review for the Helpdesk Administrator role that runs monthly
   • DUse Privileged Identity Management to make the Helpdesk Administrator role eligible and require activation for a set duration
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company wants to protect against identity compromise by detecting risky user behavior and responding automatically. They also want to ensure that privileged role activations are audited. Which combination of Microsoft Entra capabilities should they implement?

   • AIdentity lifecycle management with access reviews
   • BConditional access with session controls and ID Protection
   • CAccess reviews with self-review and conditional access with MFA
   • DID Protection with risk policies and PIM with audit logging
   Reveal Solution Discussion Select an answer first