Design security operations, identity, and compliance capabilities →mediumMultiple SelectObjective-mapped
SC-100 Practice Question: Design security operations, identity, and compliance capabilities
Which TWO of the following are valid methods to protect privileged accounts in Microsoft Entra ID?
⚠ Common exam trap
Candidates often confuse general security features (like Identity Protection or SSPR) with dedicated privileged account protection mechanisms, failing to recognize that only PIM and Conditional Access policies for privileged roles directly control and restrict privileged access in Entra ID.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Conditional Access policies for privileged roles
Conditional Access policies can be configured to require stronger authentication, device compliance, or location-based controls specifically for users assigned to privileged roles (e.g., Global Administrator, Privileged Role Administrator). This directly protects privileged accounts by enforcing additional security requirements before granting access to Entra ID resources.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure Conditional Access policies for privileged roles
Why this is correct
Conditional Access can enforce MFA and other controls for privileged roles.
- ✓
Implement Privileged Identity Management (PIM)
Why this is correct
PIM provides just-in-time privileged access and approval workflows.
- ✗
Enable Identity Protection for all users
Why it's wrong here
Identity Protection detects risks for all users, not specifically privileged accounts.
- ✗
Enable Self-Service Password Reset (SSPR)
Why it's wrong here
SSPR allows users to reset passwords but does not protect privileged accounts specifically.
- ✗
Use Azure AD Connect to sync privileged accounts
Why it's wrong here
Azure AD Connect syncs accounts but does not protect privileged accounts.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SC-100 question from scratch — 208 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.