SC-900 Practice Question: Describe the concepts of security, compliance, and identity
An organization uses Microsoft Intune to manage devices. They want to ensure that only devices that are compliant with security policies (e.g., encryption enabled, latest patches) can access corporate email. Which Microsoft Entra feature should they use to enforce this requirement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Conditional Access in Microsoft Entra ID
Conditional Access in Microsoft Entra ID allows administrators to create policies that enforce access controls based on conditions such as device compliance, as reported by Intune. Only devices that satisfy the compliance requirements (e.g., encryption enabled, latest patches) are granted access to corporate email. Option B (Microsoft Defender for Endpoint) focuses on threat detection and response, not access enforcement. Option C (Device compliance policies in Microsoft Intune) defines the compliance criteria and marks devices as compliant or non-compliant, but it does not enforce access at the application level—that enforcement is done by Conditional Access. Option D (Azure AD Join) is a device identity registration method, not an access control mechanism.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Conditional Access in Microsoft Entra ID
Why this is correct
Conditional Access can block or allow access based on device compliance status.
- ✗
Microsoft Defender for Endpoint
Why it's wrong here
Defender for Endpoint provides threat protection, not access enforcement.
- ✗
Device compliance policies in Microsoft Intune
Why it's wrong here
These set compliance requirements but do not enforce access; Conditional Access does.
- ✗
Azure AD Join
Why it's wrong here
Azure AD Join registers devices but does not enforce access policies.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Conditional access
Conditional access is a security framework that evaluates signals like user location, device health, and risk level to grant or block access to resources in real time.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.