Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Access Management Flashcards
7 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Access Management flashcards as text
What is Microsoft Entra Domain Services (formerly Azure AD Domain Services) primarily used for?
Answer: Providing cloud-based LDAP, Kerberos, and NTLM services for legacy apps without on-premises DCs
Microsoft Entra Domain Services provides managed domain services such as LDAP, Kerberos, and NTLM, allowing legacy applications to use domain features without on-premises domain controllers.
In Microsoft Entra ID, what is a 'Service Principal'?
Answer: The identity representation of an application or service in a tenant, used to authenticate and access resources
A service principal is the local representation of an application registration in a specific Microsoft Entra ID tenant, enabling the app to authenticate and be assigned permissions.
Which report in Microsoft Entra ID helps identify users who have not used their account within a specified period?
Answer: Inactive users report / Sign-in activity report
The sign-in activity report and inactive users insights in Microsoft Entra ID help identify accounts that haven't signed in recently, supporting access hygiene.
What does 'Continuous Access Evaluation' (CAE) enable in Microsoft Entra ID?
Answer: It allows services to revoke access tokens in near real-time when user conditions change
CAE enables Microsoft Entra ID to signal participating services to revoke access tokens immediately when critical events occur, such as account disablement or IP address change.
Which Microsoft Entra workload identity feature helps protect non-human identities like apps and service principals?
Answer: Microsoft Entra Workload Identities (with Identity Protection for workloads)
Microsoft Entra Workload Identities extends identity protection capabilities to apps and service principals, detecting risky workload credential usage.
What is the 'My Access' portal in Microsoft Entra ID used for?
Answer: End users requesting, managing, and reviewing their own access packages and group memberships
The My Access portal (myaccess.microsoft.com) allows end users to request access packages, view their current access, and complete access reviews assigned to them.
In Microsoft Entra ID, what is the difference between 'Authentication' and 'Authorization'?
Answer: Authentication verifies identity; authorization determines what an authenticated identity is allowed to do
Authentication is the process of proving who you are (verifying identity), while authorization is the process of determining what you are allowed to access or do after authentication.