SC-900 Practice Question: Describe the concepts of security, compliance, and identity
Exhibit
{
"command": "Get-MgUser -Filter "startsWith(userPrincipalName,'j')" | Select-Object Id, UserPrincipalName, DisplayName"
}Refer to the exhibit. A security analyst runs this Microsoft Graph PowerShell command. What is the most likely purpose of this command?
⚠ Common exam trap
SC-900 often tests the ability to interpret PowerShell commands—candidates may confuse Get with Update or Remove, or assume a filter lists all users, but the startswith filter clearly narrows the result to UPNs beginning with 'j'.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To find users whose user principal name starts with 'j'.
The Microsoft Graph PowerShell command shown (likely Get-MgUser -Filter "startswith(userPrincipalName,'j')") retrieves users whose userPrincipalName begins with 'j'. The Get-MgUser cmdlet with a startswith filter returns matching user objects, so the purpose is to find users with a UPN starting with 'j'. This is a read-only query, not an update or delete operation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
To find users whose user principal name starts with 'j'.
Why this is correct
The Graph filter uses the startsWith operator on userPrincipalName with the value 'j', returning only accounts whose UPN begins with that letter. This is a prefix match, not a contains search, so users with 'j' elsewhere in the UPN are excluded.
- ✗
To update the display names of users starting with 'j'.
Why it's wrong here
The command filters and retrieves users matching a display-name pattern, not modifies them; updating display names requires a PATCH or Update-MgUser call. It tempts because filtering by name resembles targeting users for change, but the cmdlet shown is a read operation, so no update occurs.
- ✗
To remove users whose user principal name starts with 'j'.
Why it's wrong here
The command performs a read (Get-MgUser with a filter), not a deletion; removing users requires Remove-MgUser. It tempts because filtering by user principal name resembles selecting accounts for removal, but no delete cmdlet is invoked, so nothing is removed.
- ✗
To list all users and their group memberships.
Why it's wrong here
The command returns filtered users matching a display-name prefix, not all users with group memberships; listing memberships requires a separate directory or member-of query. It tempts because Get-MgUser does return user objects, but the filter narrows results and no group data is requested.
Go deeper
Related to this question
Learn chapter
Azure NSG and Application Security Groups
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
This SC-900 question is part of Courseiva's 1,279-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.