SC-900 Access Management

Question 1

What does conditional access mean?

Answer 1

Feature of entra that examines signals like user, location, device, application, and risk to automate decisions for authorizing access to resources (apps and data) after factor authentication happens.

Question 2

Common parts of conditional access include things like?

Answer 2

Assignements (Determines which signals to use. Who, what, where, and when)

Conditions (Define when and where the policy will apply)

Access Controls (Determine what actions occur)

Question 3

What are examples of RBAC in entra and can roles be customized?

Answer 3

Yes (With a P1/P2 license) and examples include Global Admin, User Admin, and Billing Admin

Question 4

What are some common categories of entra roles?

Answer 4

Entra specfiic: Permissions limited directly to resources in Entra (User admin)

Service specific: Permissions tied directly to managing services of 365 (Intune Admin)

Cross service: Permissions that span multiple services (Compliance admin)

Question 5

What are the major features of entitlement management?

Answer 5

Feature that allow organizations to manage identity and access lifecycle at scale including the automatic management of external users and the delegation of access packages (that contain resources that users can request)

Question 6

What are the major features of privilidged identity management?

Answer 6

Service that allows access to resources to be just in time, time bound, approval based, visible, and auditable

Question 7

What describes the general workflow of PIM?

Answer 7

Assign (members/owners, scope, assignement types, and durations)

Activate

Approve/Deny

Extend/Renew

Default behaivor will be to see all PIM actions for the past 30 days.

Question 8

Define sign in risk?

Answer 8

The probability that a given authentication request isn’t autorized by the identity owner (odd IP, atypical travel, odd sign in properties, entra threat intelligence)

Question 9

Define user risk?

Answer 9

Probability that a given identity or account is compromised (odd behaivor, suspucious activity, leadked creds, threat intell)

Question 10

Reports that are often a part of identity protection include?

Answer 10

Risk detections: Contains every risk detected

Risky sign ins: Takes place when one or more risk detections is triggered for a sign in.

Risky users: When one or more risky signs or risky detections have taken palce.