SC-900 Practice Question: Describe the concepts of security, compliance, and identity

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Single sign-on (SSO) to cloud applications

  Why this is correct

  Single sign-on (SSO) to cloud applications is a core benefit of Microsoft Entra ID, enabling users to authenticate once with their Entra ID credentials and gain seamless access to thousands of integrated Software-as-a-Service (SaaS) applications. This capability significantly enhances user productivity by eliminating the need to remember multiple passwords and repeatedly log in, while also improving security by centralizing identity management. Entra ID acts as the central identity provider, issuing secure tokens after initial authentication.

• ✗

  Password hash synchronization

  Why it's wrong here

  Password hash synchronization (PHS) is a specific method utilized by Microsoft Entra Connect to synchronize user identities and their password hashes from an on-premises Active Directory to Microsoft Entra ID. While PHS is a crucial component for enabling hybrid identity scenarios and allowing users to authenticate to cloud services with their existing on-premises credentials, it is a *feature* or *method* of synchronization, not a direct end-user or administrative *benefit* of Entra ID itself. The benefit comes from the resulting unified identity experience, which PHS helps facilitate.

• ✓

  Multi-factor authentication (MFA)

  Why this is correct

  Multi-factor authentication (MFA) is a fundamental security benefit provided by Microsoft Entra ID, allowing organizations to require users to verify their identity using two or more verification methods. Entra ID offers robust, built-in MFA capabilities, supporting various methods such as the Microsoft Authenticator app, FIDO2 security keys, and biometrics. Implementing MFA significantly strengthens security by making it much harder for unauthorized users to gain access, even if they manage to compromise a user's password.

• ✗

  Automated security incident detection

  Why it's wrong here

  Automated security incident detection is not a primary or core benefit of Microsoft Entra ID itself, which primarily focuses on identity and access management. While Entra ID generates extensive audit logs and sign-in reports that can be used for security analysis, the advanced, automated detection and response to security incidents across an entire environment are typically handled by broader security services. These capabilities are provided by solutions like Microsoft Sentinel for Security Information and Event Management (SIEM) or Microsoft 365 Defender for Extended Detection and Response (XDR), which consume Entra ID data but operate at a higher level of security operations.

• ✗

  Replacement of on-premises Active Directory

  Why it's wrong here

  Microsoft Entra ID is not a replacement for on-premises Active Directory Domain Services (AD DS); rather, it is a complementary cloud-based identity and access management solution designed for cloud applications and services. Many organizations operate in a hybrid identity model where Entra ID coexists with on-premises AD DS, with identities synchronized between the two using Microsoft Entra Connect. This allows users to access both on-premises resources managed by AD DS and cloud resources managed by Entra ID using a single set of credentials, leveraging the strengths of both systems.

Go deeper

Related to this question