Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
SC-900 Describe the capabilities of Microsoft Entra Practice Question
Order the steps to create a conditional access policy in Azure AD.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Sign in, navigate to Conditional Access, create new policy, configure assignments and controls, enable policy and create.
Creating a conditional access policy requires admin sign-in, navigating to Conditional Access, creating a new policy, configuring assignments and controls, then enabling it.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Sign in, navigate to Conditional Access, create new policy, configure assignments and controls, enable policy and create.
Why this is correct
This is the correct order because you must first sign in with appropriate admin rights, navigate to the Conditional Access blade, create a new policy, configure its settings, and finally enable it to take effect.
- ✗
Sign in, navigate to Conditional Access, create new policy, enable policy, then configure assignments and controls.
Why it's wrong here
A Conditional Access policy requires defined assignments (users, cloud apps, conditions) and access controls (grant/block) before it can be effectively enabled. Attempting to enable a policy prior to configuring these critical components would result in an incomplete or non-functional policy, as the system needs to know *who*, *what*, and *how* to enforce before activation. Therefore, enabling must occur after all policy logic is established.
- ✗
Navigate to Conditional Access, sign in, create new policy, configure assignments and controls, enable policy.
Why it's wrong here
Accessing any service or blade within the Azure portal, including the Conditional Access blade, necessitates prior authentication. The Azure portal is a secure administrative interface, and users must first successfully sign in with appropriate credentials and permissions before they can navigate to or interact with any Azure resources or management tools. Attempting to navigate before signing in would result in an access denied error or a redirection to the sign-in page.
- ✗
Sign in, create new policy, navigate to Conditional Access, configure assignments and controls, enable policy.
Why it's wrong here
In the Azure portal, the action to "create new policy" for Conditional Access is context-specific and only becomes available once the user has successfully navigated to the Conditional Access blade within Azure Active Directory. It is not a global action accessible from the portal's root or dashboard. Therefore, attempting to create a new policy before reaching the dedicated Conditional Access management interface is not possible, as the necessary UI element would not be present.
Go deeper
Related to this question
Learn chapter
Conditional Access Policies
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Conditional Access policy
A Conditional Access policy is a set of rules in Microsoft Entra ID that automatically grants or blocks access to cloud apps based on signals like user identity, location, device health, and risk level.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.