SC-900 Describe the capabilities of Microsoft Entra Practice Question
Which TWO features are part of Microsoft Entra ID P2 licensing? (Choose two.)
⚠ Common exam trap
Many exam-takers confuse Conditional Access (a P1 feature) as a P2 exclusive because it is commonly paired with Identity Protection in security demos, but Conditional Access itself does not require P2 licensing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra Identity Protection
Microsoft Entra ID P2 licensing includes advanced security features such as Microsoft Entra Identity Protection and Microsoft Entra Privileged Identity Management (PIM). Identity Protection uses machine learning to detect and remediate identity-based risks like leaked credentials and anomalous sign-in patterns, while PIM provides just-in-time privileged access and approval workflows. These capabilities are exclusive to P2 and are not available in P1 or free tiers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Conditional Access
Why it's wrong here
Microsoft Entra Conditional Access is a powerful policy engine that allows organizations to enforce specific access controls based on user, device, location, application, and real-time risk factors. While crucial for modern security, the core functionality of Conditional Access is included with Microsoft Entra ID P1 licenses. P2 licenses enhance it by integrating with Identity Protection's real-time risk detections, but the feature itself is fundamentally a P1 offering.
- ✗
Basic Mobility and Security
Why it's wrong here
Basic Mobility and Security for Microsoft 365 is a free, built-in mobile device management (MDM) solution included with many Microsoft 365 subscriptions, not specifically tied to Microsoft Entra ID P1 or P2 licenses. It provides fundamental capabilities like device enrollment, security policies, and selective wipe for mobile devices accessing Microsoft 365 services. Its purpose is to offer baseline protection for corporate data on personal and company-owned devices, making it distinct from advanced Entra ID P2 features.
- ✓
Microsoft Entra Identity Protection
Why this is correct
Microsoft Entra Identity Protection is a core security capability of Microsoft Entra ID P2, designed to detect, investigate, and remediate identity-based risks. It leverages machine learning and heuristics to identify suspicious activities, such as leaked credentials, impossible travel, and anomalous sign-in patterns, across an organization's identities. This feature provides automated responses like requiring multi-factor authentication or blocking access, significantly enhancing an organization's security posture against identity compromise.
- ✗
Microsoft Entra Self-Service Password Reset
Why it's wrong here
Microsoft Entra Self-Service Password Reset (SSPR) allows users to reset their forgotten passwords without administrator intervention, significantly reducing helpdesk calls. While a basic version of SSPR is available with free Microsoft Entra ID, the advanced features, such as write-back to on-premises Active Directory and requiring two authentication methods for reset, are exclusive to Microsoft Entra ID P1 licenses. This makes it a P1 feature, not a P2 exclusive.
- ✓
Microsoft Entra Privileged Identity Management
Why this is correct
Microsoft Entra Privileged Identity Management (PIM) is a critical security feature included with Microsoft Entra ID P2, enabling organizations to manage, control, and monitor access to important resources. PIM provides just-in-time (JIT) and just-enough-access (JEA) capabilities for administrative roles, allowing users to activate elevated permissions only when needed and for a limited duration. This minimizes the attack surface by reducing the number of users with standing administrative privileges, thereby enforcing the principle of least privilege.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Privileged Identity Management
Privileged Identity Management is a security system that controls, monitors, and audits access to sensitive systems by granting elevated permissions only when needed and for a limited time.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.