You have an Azure subscription.You need to implement approval-based, time-bound role activation. What should you use?
Answer(s): D
Correct:Microsoft Entra Privileged Identity Management (PIM)Incorrect:* Microsoft Entra Access Reviews* Microsoft Entra Conditional access* Microsoft Entra ID Protection* Microsoft Entra Identity Protection* Windows Hello for BusinessMicrosoft Entra Privileged Identity Management (PIM) is designed specifically for implementing approval-based, time-bound role activation in an Azure subscription. PIM allows you to manage and control access to privileged roles in Microsoft Entra ID, Azure resources, and Microsoft Entra-integrated SaaS apps. It enables you to elevate access on a just-in-time basis and provides an approval workflow for role activation, which can be restricted to specific time periods.
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
HOTSPOT (Drag and Drop is not supported)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overviewhttps://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy- admin-mfa
When security defaults are enabled for a Microsoft Entra tenant, which two requirements are enforced? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
Answer(s): B,C
Security defaults make it easy to protect your organization with the following preconfigured security settings: Requiring all users to register for Microsoft Entra Multi-Factor Authentication.Requiring administrators to do multi-factor authentication. Blocking legacy authentication protocols.Requiring users to do multi-factor authentication when necessary. Protecting privileged activities like access to the Azure portal.
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults
Which type of identity is created when you register an application with Microsoft Entra ID?
When you register an application through the Azure portal, an application object and service principal are automatically created in your home directory or tenant.
https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal
Which three tasks can be performed by using Microsoft Entra ID Protection? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
Answer(s): B,C,D
Post your Comments and Discuss Microsoft SC-900 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-900 content, but please register or login to continue.