SC-900-Mod-2

" Your organization has implemented important changes in their customer facing web-based applications. You want to ensure that any user who wishes to access these applications agrees to the legal disclaimers. "

Which Microsoft Entra Features should you implement?

• Entitlement management

• Microsoft Entra Terms of Use

• Identity Protection

" IT admins have been asked to review Microsoft Entra Roles assigned to users, to improve organizational security. "

Which of the following should they implement?

• Remove all global admin roles assigned to users

• Create custom roles

• Replace global admin with specific Microsoft Entra Roles

" A company's IT organization has been asked to find ways to reduce IT costs, without compromising security. "

Which feature should they consider implementing

• Self-service password reset

• Biometric sign-in on all devices

• FIDO2

" A project manager is setting up a new project that includes members from different departments. The project manager wants to ensure that a project team members can collaborate and have shared access to a mailbox, calendar, files and the project's SharePoint site. "

Which Microsoft Entra feature can the project manager use to accommodate this requirement, without having to involve an administrator?

• A managed identity

• A Microsoft 365 group

• A security group

" Sign-in risk is a signal used by Conditional Access policies to decide whether to grant or deny access. "

What is sign-in risk?

• The probability that the device is owned by the identity owner

• The probability that the authentication request isn't authorized by the identity owner

• The probability that the user is authorized to view data from a particular application

" A developer wants an application to connect to Azure resources that support Microsoft Entra authentication, without having to manage any credentials and without incurring any extra cost."

Which option best describes the identity type of the application?

• Service principal

• Managed identity

• Hybrid identity

Which of the following additional forms of verification can be used with Microsoft Entra multifactor authentication?

• Microsoft Authenticator app, SMS, Voice call, FIDO2, and Windows Hello for Business

• Security question, SMS, Voice call, FIDO2, and Windows Hello for Business

• Password spray, SMS, Voice call, FIDO2, and Windows Hello for Business

"After hearing of a breach at a competitor, the security team wants to improve identity security within their organization. "

What should they implement to provide the greatest protection to user identities?

• Multifactor authentication

• Require security question for all sign-ins

• Require strong password for all identities

" An organization plans to implement Conditional Access. ".

What do admins need to do?

• Create policies that enforce organizational rules

• Check that all users have multi-factor authentication enabled

• Amend your apps to allow Conditional Access

"An organization has completed a full migration to the cloud and has purchased devices for all its employees. All employees sign in to the device through an organizational account configured in Microsoft Entra ID."

Select the option that best describes how these devices are set up in Microsoft Entra Id.

• These devices are set up as Microsoft Entra registered

• These devices are set up as Microsoft Entra joined

• These devices are set up as Microsoft Entra hybrid joined