HOTSPOT (Drag and Drop is not supported)Select the answer that correctly completes the sentence.Hot Area:
Answer(s): A
Box: a resource groupCreate a role-assignable group in Azure Active DirectoryWith Microsoft Entra ID P1 or P2, you can create role-assignable groups and assign Microsoft Entra roles to these groups. You create a new role-assignable group by setting Microsoft Entra roles can be assigned to the group to Yes or by setting the isAssignableToRole property set to true. A role-assignable group can't be of dynamic membership type and you can create a maximum of 500 groups in a single tenant.Note: Use Resource Groups Grant accessIn Azure RBAC, to grant access, you assign an Azure role.In the list of Resource groups, open the new example-group resource group.In the navigation menu, click Access control (IAM).4. Click the Role assignments tab to see the current list of role assignments.5. Click Add > Add role assignment.6. Etc.
https://learn.microsoft.com/en-us/azure/active-directory/roles/groups-create-eligible https://learn.microsoft.com/en-us/azure/role-based-access-control/quickstart-assign-role-user-portal
You have an Azure subscription.You need to implement approval-based, time-bound role activation.What should you use?
Answer(s): B
Correct:Microsoft Entra Privileged Identity Management (PIM)Incorrect:* Microsoft Entra Access Reviews* Microsoft Entra Conditional access* Microsoft Entra ID Protection* Microsoft Entra Identity Protection* Windows Hello for BusinessMicrosoft Entra Privileged Identity Management (PIM) is designed specifically for implementing approval-based, time-bound role activation in an Azure subscription. PIM allows you to manage and control access to privileged roles in Microsoft Entra ID, Azure resources, and Microsoft Entra-integrated SaaS apps. It enables you to elevate access on a just-in-time basis and provides an approval workflow for role activation, which can be restricted to specific time periods.
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
When you enable Microsoft Entra Multi-Factor Authentication (MFA), how many factors are required for authentication?
Microsoft Entra multifactor authentication works by requiring two or more of the following authentication methods:Something you know, typically a password.Something you have, such as a trusted device that's not easily duplicated, like a phone or hardware key. Something you are - biometrics like a fingerprint or face scan.
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks
Box: afterConditional Access is the tool used by Microsoft Entra ID to bring signals together, to make decisions, and enforce organizational policies. A Conditional Access policy specifies the app or services you want to protect, the conditions under which the apps or services can be accessed, and the users the policy applies to. Policies are enforced after the first-factor authentication has been completed. For example, policies to prevent any unauthorized devices from accessing sensitive business or personal information should be considered.
https://canada-ca.github.io/cloud-guardrails-O365/EN/03_Apply-Conditional-Access.html
DRAG DROP (Drag and Drop is not supported)Match the types of Conditional Access signals to the appropriate definitions.To answer, drag the appropriate Conditional Access signal type from the column on the left to its definition on the right. Each signal type may be used once, more than once, or not at all.NOTE: Each correct match is worth one point.Select and Place:
Box 1: User risk User riskAdministrators with access to Identity Protection, can evaluate user risk as part of a Conditional Access policy. User risk represents the probability that a given identity or account is compromised.Box 2: Sign-in risk Sign-in riskAdministrators with access to Identity Protection, can evaluate sign-in risk as part of a Conditional Access policy. Sign-in risk represents the probability that a given authentication request wasn't made by the identity owner.
https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-conditions
Post your Comments and Discuss Microsoft SC-900 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-900 content, but please register or login to continue.