Capabilities of Microsoft Entra

Describe Microsoft Entra ID functions, identity types, authentication capabilities, access management, and identity protection and governance features.

5 minutes 5 Questions

Microsoft Entra is Microsoft's comprehensive identity and network access solution designed to protect organizations in a multi-cloud and hybrid environment. It encompasses several key capabilities: **1. Identity and Access Management (IAM):** Microsoft Entra ID (formerly Azure Active Directory) se…

Concepts covered
Types of Identities in Microsoft Entra IDMultifactor Authentication (MFA)Conditional Access PoliciesMicrosoft Entra ID GovernanceMicrosoft Entra Privileged Identity Management (PIM)Access Reviews in Microsoft EntraMicrosoft Entra ID Overview and FeaturesHybrid Identity with Microsoft EntraAuthentication Methods in Microsoft Entra IDPassword Protection and Management CapabilitiesMicrosoft Entra Roles and Role-Based Access ControlMicrosoft Entra ID Protection
Test mode:
Start practice test

SC-900 - Capabilities of Microsoft Entra Example Questions

Test your knowledge of Capabilities of Microsoft Entra

Question 1

Which approach best justifies Microsoft's recommendation to prioritize passwordless authentication methods in Microsoft Entra ID over traditional password-based sign-in?

Correct Answer: Passwordless methods reduce the risk of credential theft, phishing, and password replay attacks

Passwordless authentication methods such as Windows Hello for Business, FIDO2 security keys, and the Microsoft Authenticator app eliminate passwords entirely, which directly removes the attack surface for credential theft, phishing, and password replay attacks since there is no password to steal or intercept.

Claiming that passwordless methods allow longer and more complex password combinations is wrong because passwordless methods do not use passwords at all, so password complexity is irrelevant. Claiming that passwordless methods encrypt stored passwords with stronger algorithms to prevent brute-force attacks is incorrect because passwordless authentication does not involve storing or encrypting passwords with stronger algorithms. Claiming that passwordless methods consolidate all user credentials into a single secure token is wrong because passwordless methods do not consolidate credentials into a single token; they use cryptographic key pairs or biometrics bound to specific devices.

Key concept tested: understanding why eliminating passwords improves security posture over merely strengthening password-based mechanisms.

Question 2

A company is migrating from an on-premises Active Directory environment to the cloud. They need a cloud-based service to manage user identities, control access to applications like Microsoft 365 and third-party SaaS apps, and enforce security policies such as multi-factor authentication. Which service should the company use to meet these requirements?

Correct Answer: Microsoft Entra ID, a cloud-based identity and access management service

Microsoft Entra ID (formerly Azure Active Directory) is the correct answer because it is Microsoft's cloud-based identity and access management (IAM) service designed to manage user identities, control access to applications including Microsoft 365 and third-party SaaS apps, and enforce security policies like multi-factor authentication.

Microsoft Entra ID Protection focuses specifically on detecting and remediating identity-based risks and threats, not broadly managing identities and access. Microsoft Entra Domain Services provides managed domain services supporting legacy protocols like LDAP and Kerberos, not modern cloud IAM. Microsoft Defender for Identity monitors on-premises Active Directory signals to detect advanced threats, not manage cloud identity and access.

The key concept tested is understanding the role of Microsoft Entra ID as the foundational cloud identity and access management platform.

Question 3

Which statement best defines the fundamental requirement of Multifactor Authentication?

Correct Answer: It demands at least two distinct forms of identification from the user.

The correct statement accurately defines Multifactor Authentication by its core principle, which requires a user to present at least two different categories of evidence to verify their identity, such as something they know, something they have, or something they are.

Relying on complex passwords and resets focuses solely on single-factor authentication. Enforcing access rules based on physical location describes conditional access policies rather than multifactor verification. Mandating single sign-on describes a mechanism for centralizing access across applications rather than securing the initial verification process.

The key concept tested is the core operational principle of Multifactor Authentication.

More Capabilities of Microsoft Entra questions
500 questions (total)
Practice 100 questions
One session at a time, always new questions