Free SC-900 Exam Braindumps
Microsoft Security, Compliance, and Identity Fundamentals Questions 51–55 (page: 12)

Explanation:

With Microsoft Entra ID Governance you can implement the following scenarios for employees, business partners and vendors:
Govern the identity lifecycle
*-> Govern the access lifecycle
Secure privileged access for administration Privileged access lifecycle
Governing privileged access is a key part of modern Identity Governance especially given the potential for misuse associated with administrator rights can cause to an organization. The employees, vendors, and contractors that take on administrative rights need to have their accounts and privileged access rights governed.
*Microsoft Entra Privileged Identity Management (PIM)* provides additional controls tailored to securing access rights for resources, across Microsoft Entra, Azure, other Microsoft Online Services and other applications. The just-in-time access, and role change alerting capabilities provided by Microsoft Entra PIM, in addition to multifactor authentication and Conditional Access, provide a comprehensive set of governance controls to help secure your organization's resources (directory roles, Microsoft 365 roles, Azure resource roles and group memberships). As with other forms of access, organizations can use access reviews to configure recurring access re-certification for all users in privileged administrator roles.

Reference:

https://learn.microsoft.com/en-us/entra/id-governance/identity-governance-overview

Explanation:

Box 1: Yes
Yes - Microsoft Entra Access review evaluates user and group permissions for Azure resources.
Access reviews in Microsoft Entra ID, part of Microsoft Entra, enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User access can be reviewed regularly to make sure only the right people have continued access.
Box 2: Yes
Yes - A user can be removed from a group automatically after a Microsoft Entra Access Review evaluation.
Apply the changes
If Auto apply results to resource was enabled based on your selections in Upon completion settings, autoapply executes once a review instance completes, or earlier if you manually stop the review.
If Auto apply results to resource wasn't enabled for the review, navigate to Review History under Series after the review duration ends or the review was stopped early, and select on the instance of the review you’d like to Apply.
Box 3: No
No - Microsoft Entra Access review feature is available in all Microsoft Entra ID service plans.
Access reviews for service provider-assigned privileged roles is included in the Workload ID Premium, and is not free.

Reference:

https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview https://learn.microsoft.com/en-us/entra/id-governance/complete-access-review https://learn.microsoft.com/en-us/entra/workload-id/workload-identities-faqs

Explanation:

Multi-factor authentication is a process where a user is prompted during the sign-in process for an additional form of identification, such as to enter a code on their cellphone or to provide a fingerprint scan.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Explanation:

Box 1: Yes
Box 2: No
Conditional Access policies are enforced after first-factor authentication is completed. Box 3: Yes

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

Explanation:

Reference:

https://docs.microsoft.com/en-us/defender-for-identity/what-is