SC-900 Describe the capabilities of Microsoft Entra Practice Question
A company uses Microsoft Entra ID. They want to ensure only current employees have access to a sensitive HR application. They implement a process where group membership for the HR app is reviewed quarterly by the HR manager, and any unnecessary access is automatically removed. Which Microsoft Entra feature should they use?
⚠ Common exam trap
Many candidates confuse Access Reviews with Privileged Identity Management (PIM) because both involve 'review' and 'access,' but PIM is specifically for privileged roles and time-bound activation, not for recurring attestation of standard application group memberships.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
C
The scenario describes a recurring review of group membership for the HR application, with automatic removal of unnecessary access. This is exactly what Microsoft Entra ID Governance's Access Reviews feature provides: scheduled reviews (e.g., quarterly) where a reviewer (the HR manager) attests to each member's continued need, and stale access is automatically revoked upon completion.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A
Why it's wrong here
Microsoft Entra Conditional Access enforces policies based on real-time conditions like user location, device compliance, or sign-in risk during an authentication attempt. Its primary function is to grant or block access, or require additional authentication, at the point of access. It does not provide a mechanism for scheduled, periodic reviews of existing group memberships or application assignments, nor does it automate the removal of access based on such reviews.
- ✗
B
Why it's wrong here
Microsoft Entra Identity Protection is a security feature focused on detecting, investigating, and remediating identity-based risks, such as compromised credentials or anomalous sign-in behaviors. It uses machine learning to identify potential threats to user identities. While crucial for security, it does not offer functionality for managing periodic access reviews of group memberships or application assignments, nor does it automate the removal of access based on a review process.
- ✓
C
Why this is correct
Microsoft Entra Access Reviews, a component of Entra ID Governance, are specifically designed to manage the lifecycle of access to resources by enabling organizations to periodically review who has access to groups, applications, or roles. This feature allows for scheduled reviews, automated notifications to reviewers, and the automatic removal of access for users who no longer require it, directly addressing the need for periodic access validation and cleanup.
- ✗
D
Why it's wrong here
Microsoft Entra Privileged Identity Management (PIM) focuses on managing, controlling, and monitoring access to important organizational resources, primarily by providing just-in-time (JIT) and just-enough-access (JEA) for privileged roles and resources. While PIM includes access reviews for *privileged* role assignments and PIM-enabled groups, its scope is specifically privileged access, not general, periodic reviews of all group memberships or application assignments for non-privileged users.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Governance
Governance is the framework of policies, processes, and controls that ensures IT activities align with business goals and comply with regulations.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.