Describe Identity Protection and Governance Capabilities of Microsoft Entra SC-900 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A security analyst wants to review all identity risk detections in the past 30 days, including sign-in risks and user risks, to identify patterns of compromise. Where should the analyst look in Microsoft Entra?

   • AThe Microsoft Entra admin center reports under 'Users > All users'
   • BThe access reviews dashboard
   • CThe Microsoft Entra ID Protection reports for risky sign-ins and risky users
   • DThe Privileged Identity Management audit history
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the first step in setting up an access review in Microsoft Entra?

   • ADefine the scope of the review, such as which groups or applications to review
   • BSelect the reviewers who will perform the review
   • CCreate a new user account for the review
   • DConfigure multi-factor authentication for the reviewers
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A security administrator needs to assign a user the ability to manage Azure resources, but only for a specific subscription and only for a limited time. The administrator wants to avoid giving the user permanent access and wants to require approval for each activation. What should you configure in Microsoft Entra?

   • AAn access review for the subscription's Owner role with a frequency of 30 days
   • BA conditional access policy that requires MFA for the Azure portal
   • CA PIM eligible assignment for the Owner role scoped to the subscription, with an approval workflow and a maximum activation duration
   • DA permanent role assignment for the Contributor role at the management group level
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company uses Microsoft Entra ID Governance to automate the identity lifecycle for new employees. When an employee joins, their account is created and assigned to the appropriate groups. When the employee leaves, the account should be disabled and eventually removed. What is the primary benefit of using this automated lifecycle management?

   • AIt reduces the number of administrators required to manage the directory
   • BIt ensures that access is provisioned and deprovisioned consistently with the employee’s employment status
   • CIt prevents all security breaches by automatically blocking malicious sign-ins
   • DIt eliminates the need for access reviews because access is always correct
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   An administrator is reviewing the activation of a privileged role in Microsoft Entra Privileged Identity Management. The user activated the role for 2 hours, and the activation required multi-factor authentication and an approval from a manager. After the 2-hour period, the role was automatically deactivated. What is this process called?

   • AJust-in-time access
   • BIdentity lifecycle management
   • CAccess review
   • DRisk-based conditional access
   Reveal Solution Discussion Select an answer first