SC-900 Describe the capabilities of Microsoft Entra Practice Question
This SC-900 practice question tests your understanding of describe the capabilities of microsoft entra. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. A key principle to apply: mFA requires two or more verification methods for user authentication.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company uses Microsoft Entra ID (Microsoft Entra ID) to manage user access to cloud applications. The security team wants to enforce that users must provide a second form of authentication, such as a phone call or mobile app notification, in addition to their password. Which Microsoft Entra capability should they enable?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Multi-Factor Authentication
Multi-Factor Authentication (MFA) is the correct capability because it requires users to provide a second form of authentication (e.g., phone call, mobile app notification) in addition to their password. This directly addresses the security team's requirement for a second authentication factor, which is the core function of MFA in Microsoft Entra ID.
Key principle: MFA requires two or more verification methods for user authentication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Conditional Access
Why it's wrong here
Conditional Access is a policy engine that can enforce conditions like MFA, but by itself does not provide the second factor.
✗
Identity Protection
Why it's wrong here
Identity Protection detects risks like leaked credentials but does not directly add a second authentication factor.
✓
Multi-Factor Authentication
Why this is correct
MFA is the feature that requires a second verification method, such as phone call or app notification, in addition to the password.
Related concept
MFA requires two or more verification methods for user authentication.
✗
Privileged Identity Management
Why it's wrong here
PIM manages, controls, and monitors access to privileged roles, not general user authentication.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates may confuse Conditional Access (which can *require* MFA) with the actual MFA capability itself, but the question asks for the capability that *provides* the second form of authentication, not the policy that enforces it.
Detailed technical explanation
How to think about this question
Microsoft Entra MFA supports multiple verification methods including phone call (voice call), SMS, mobile app notification (via Microsoft Authenticator), and OATH hardware tokens. Under the hood, MFA works by challenging the user with a secondary authentication factor after the primary password is validated, using protocols like RADIUS or SAML for integration. In a real-world scenario, an organization might combine MFA with Conditional Access to require MFA only for users accessing sensitive apps from untrusted networks, optimizing security without impacting all sign-ins.
KKey Concepts to Remember
MFA requires two or more verification methods for user authentication.
It adds a layer of security beyond just a password.
Common MFA methods include phone calls, SMS, and authenticator apps.
MFA significantly reduces the risk of unauthorized access from compromised passwords.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
MFA requires two or more verification methods for user authentication.
Real-world example
How this comes up in practice
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this SC-900 question in full detail.
Review mFA requires two or more verification methods for user authentication., then practise related SC-900 questions on the same topic to reinforce the concept.
Describe the capabilities of Microsoft Entra — This question tests Describe the capabilities of Microsoft Entra — MFA requires two or more verification methods for user authentication..
What is the correct answer to this question?
The correct answer is: Multi-Factor Authentication — Multi-Factor Authentication (MFA) is the correct capability because it requires users to provide a second form of authentication (e.g., phone call, mobile app notification) in addition to their password. This directly addresses the security team's requirement for a second authentication factor, which is the core function of MFA in Microsoft Entra ID.
What should I do if I get this SC-900 question wrong?
Review mFA requires two or more verification methods for user authentication., then practise related SC-900 questions on the same topic to reinforce the concept.
What is the key concept behind this question?
MFA requires two or more verification methods for user authentication.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.