SC-900 Describe the capabilities of Microsoft Entra Practice Question
An organization has deployed Microsoft Entra ID Governance and wants to automate the process of revoking access to a critical application when an employee leaves the company. Which feature should they configure?
⚠ Common exam trap
Candidates often confuse automated offboarding (Lifecycle Workflows) with periodic access review (Access Reviews) or privileged role management (PIM), as candidates often think any governance feature can handle termination-based revocation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID Governance Lifecycle Workflows
Microsoft Entra ID Governance Lifecycle Workflows enable automated workflows triggered by HR events like employee termination. When an employee leaves, a lifecycle workflow can be configured to automatically remove the user from the application's access group or disable their account, ensuring immediate revocation of access without manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra ID Governance Lifecycle Workflows
Why this is correct
Microsoft Entra ID Governance Lifecycle Workflows provide automated identity lifecycle management, enabling organizations to define and execute tasks based on HR-driven events like joining, moving, or leaving. This feature can automatically provision or deprovision access to applications and resources, ensuring that when an employee departs, their access is systematically revoked without manual intervention, aligning directly with the requirement to remove access based on HR events.
- ✗
Microsoft Entra Privileged Identity Management
Why it's wrong here
Microsoft Entra Privileged Identity Management (PIM) is designed to manage, control, and monitor access to important organizational resources by providing just-in-time and time-bound access to privileged roles. While crucial for securing high-impact permissions, PIM's primary function is not the automated deprovisioning of standard user access across the board based on general employee offboarding events. It focuses on elevating specific administrative privileges rather than comprehensive lifecycle management for all users.
- ✗
Microsoft Entra Access Reviews
Why it's wrong here
Microsoft Entra Access Reviews facilitate the periodic attestation and certification of user access to groups and applications, ensuring that access remains appropriate and necessary. Although they can identify stale access that should be removed, Access Reviews require designated reviewers to manually approve or deny access, meaning they do not automatically revoke access based on an HR offboarding event without human intervention to complete the review process.
- ✗
Microsoft Entra Terms of Use
Why it's wrong here
Microsoft Entra Terms of Use are utilized to present legal disclaimers, compliance policies, or acceptable use agreements to users, requiring their explicit acceptance before they can access specific cloud applications or resources. This feature serves as a consent mechanism to ensure users acknowledge and agree to organizational policies. However, it lacks any functionality to automatically trigger the revocation of access rights based on an employee's departure or other lifecycle events.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.