Describe the capabilities of Microsoft security solutions →mediumMultiple ChoiceObjective-mapped

SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Exhibit

Refer to the exhibit.

Get-MgUser -Filter "userPrincipalName eq 'user@contoso.com'" | Select-Object Id, DisplayName, UserPrincipalName, SignInActivity

Id               : a0b1c2d3-e4f5-6789-0abc-def012345678
DisplayName      : John Doe
UserPrincipalName: user@contoso.com
SignInActivity   : @{LastSignInDateTime=2026-02-15T14:30:00Z; LastNonInteractiveSignInDateTime=2026-02-15T10:00:00Z}

You run the Microsoft Graph PowerShell command in the exhibit. What information does this command retrieve about the user?

⚠ Common exam trap

A common mix-up: candidates confuse the `SignInActivity` property with license or role information, because the `Get-MgUser` command can retrieve many user properties, but only `SignInActivity` specifically returns sign-in timestamps.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The user's last sign-in dates

The command `Get-MgUser -UserId user@contoso.com -Property SignInActivity | Select-Object -Property SignInActivity` retrieves the `SignInActivity` property of the specified user, which contains the `lastSignInDateTime` and `lastNonInteractiveSignInDateTime` fields. This data directly provides the user's last sign-in dates, making option B correct.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The user's license assignments
Why it's wrong here
The Microsoft Graph PowerShell command specified in the exhibit explicitly targets the SignInActivity property of a user object. Retrieving license assignments would require selecting the 'assignedLicenses' property or using a dedicated cmdlet like Get-MgUserLicenseDetail. Since the command does not include these specific properties or cmdlets, it will not return any information regarding the user's assigned licenses.
✓
The user's last sign-in dates
Why this is correct
The SignInActivity property, when retrieved for a user object via Microsoft Graph PowerShell, provides critical details about a user's authentication history. Specifically, it contains the 'lastSignInDateTime' for interactive sign-ins and 'lastNonInteractiveSignInDateTime' for non-interactive sign-ins. Therefore, executing a command that selects SignInActivity will accurately return the timestamps indicating the user's most recent successful authentication events.
✗
The user's assigned roles
Why it's wrong here
The command focuses solely on the SignInActivity property, which is distinct from a user's administrative role assignments. To retrieve a user's assigned roles, such as Global Administrator or User Administrator, the command would need to explicitly query the 'appRoleAssignments' or 'directoryRoles' relationships, or utilize cmdlets like Get-MgUserAppRoleAssignment or Get-MgDirectoryRoleMember. The current command's scope does not encompass this information.
✗
The user's group memberships
Why it's wrong here
The SignInActivity property provides authentication data and has no direct correlation with a user's group memberships. To ascertain which security or Microsoft 365 groups a user belongs to, the Microsoft Graph PowerShell command would need to query the 'memberOf' relationship or use specific cmdlets like Get-MgUserMemberOf. The command in question lacks the necessary parameters or property selections to retrieve group membership details.

Go deeper

SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question