Describe Identity Protection and Governance Capabilities of Microsoft Entra SC-900 Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company has a high number of users flagged as risky by Microsoft Entra ID Protection. The security team wants to reduce the number of risky users without compromising security. They suspect that many flags are due to legacy authentication protocols that do not support modern authentication. What should they do?

   • ABlock legacy authentication using conditional access
   • BCreate an access review to remove users who use legacy authentication
   • CIncrease the risk threshold to high for all users
   • DDisable risk detection for users who use legacy authentication
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which capability is provided by Microsoft Entra ID Protection?

   • ADelegation of administrative roles
   • BRisk-based conditional access policies
   • CSelf-service group management
   • DAutomatic creation of user accounts
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company is implementing Microsoft Entra ID Governance and wants to automate the identity lifecycle for employees and contractors. Employees should have access to internal applications, while contractors should only have access to a specific project site. When a contractor’s contract ends, their access should be removed automatically. What is the best way to achieve this?

   • AUse identity lifecycle policies that assign employees to the internal apps group and contractors to the project site group, with automatic removal based on the contract end date
   • BCreate a single group for all users and manually remove contractors when their contract ends
   • CUse access reviews to periodically remove contractors who no longer need access
   • DUse Privileged Identity Management to grant contractors temporary access to the project site
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary purpose of Microsoft Entra ID Protection?

   • ATo protect identities by detecting and responding to potential risks
   • BTo provide single sign-on for enterprise applications
   • CTo synchronize identities from on-premises directories
   • DTo manage user passwords and enforce password policies
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   An administrator needs to conduct an access review for all users who have the Global Administrator role. The review should be performed by a specific security officer, and the results should be applied automatically. What should the administrator do?

   • AManually check the Global Administrator role membership and remove users who are no longer needed
   • BCreate an access review for the Global Administrator role, assign the security officer as reviewer, and enable auto-apply
   • CCreate a conditional access policy that requires the security officer to approve all Global Administrator sign-ins
   • DUse Privileged Identity Management to require the security officer to activate the role for each user
   Reveal Solution Discussion Select an answer first