SC-900 Single sign-on (SSO) Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Single sign-on (SSO)

  Why this is correct

  Single sign-on (SSO) is a fundamental capability of Microsoft Entra ID, enabling users to access multiple applications and services with a single set of credentials. By acting as a centralized identity provider, Entra ID streamlines the authentication process, significantly enhancing user productivity and reducing password fatigue. This core feature simplifies access management across cloud and on-premises resources, ensuring a consistent and secure user experience.

• ✗

  Data loss prevention (DLP)

  Why it's wrong here

  Data loss prevention (DLP) is not a feature of Microsoft Entra ID, which primarily focuses on identity and access management. Instead, DLP capabilities are integral to Microsoft Purview, designed to identify, monitor, and protect sensitive information across an organization's data estate. Microsoft Purview DLP policies prevent the unauthorized sharing or transfer of critical data, ensuring compliance and mitigating risks of data exfiltration.

• ✗

  Cloud app discovery

  Why it's wrong here

  Cloud app discovery is a specialized function of Microsoft Defender for Cloud Apps, not Microsoft Entra ID. This feature helps organizations identify and assess the risk of cloud applications being used by employees, often referred to as 'shadow IT,' by analyzing network traffic logs. It provides visibility into unsanctioned cloud services, enabling security teams to monitor usage patterns and enforce governance policies to protect sensitive data.

• ✗

  Mobile device management (MDM)

  Why it's wrong here

  Mobile device management (MDM) is a core component of Microsoft Intune, not Microsoft Entra ID. While Entra ID manages user identities, Intune focuses on securing and managing endpoints, including mobile devices, by enforcing configuration policies, deploying applications, and protecting corporate data on those devices. MDM capabilities within Intune ensure that devices accessing organizational resources comply with security standards, separate from identity authentication.

• ✓

  Self-service password reset (SSPR)

  Why this is correct

  Self-service password reset (SSPR) is a valuable feature natively integrated into Microsoft Entra ID, empowering users to securely reset their forgotten or expired passwords without requiring help desk assistance. Users can verify their identity using pre-configured authentication methods, significantly reducing support costs and improving operational efficiency. SSPR enhances user experience and maintains security by ensuring only legitimate users can regain access to their accounts.

Go deeper

Related to this question