SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
Your company is deploying Microsoft Entra ID Governance. They want to automate the review of guest user access to Microsoft Teams and remove access when guests leave the partner organization. Which feature should they implement?
⚠ Common exam trap
A common mix-up: candidates confuse entitlement management (which handles access requests and provisioning) with access reviews (which handle periodic attestation and automated removal), leading them to choose entitlement management instead of the correct feature for automated removal based on partner organization changes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Access reviews and connected organizations
Access reviews in Microsoft Entra ID Governance allow you to create recurring reviews of guest user access to resources like Microsoft Teams. By configuring the review to include connected organizations, you can automatically remove guest access when the guest's identity is no longer associated with a partner organization, such as when they leave the partner company. This automation is achieved through the integration of access reviews with the connected organization's lifecycle, ensuring that guest access is revoked without manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Access reviews and connected organizations
Why this is correct
Access reviews are a core component of Microsoft Entra ID Governance, enabling organizations to periodically review access rights for users, including guests. When combined with connected organizations, which define external partners, access reviews can be configured to automatically remove guest accounts or their access to resources if their access is no longer justified or if reviewers fail to attest to their continued need. This directly addresses the requirement for automated removal of guest access.
- ✗
Entitlement management
Why it's wrong here
Microsoft Entra entitlement management allows organizations to manage identity and access lifecycle at scale by creating access packages that bundle resources and define policies for requesting and approving access. While it supports access package expiration and recurring access reviews, its primary function is to grant and manage access through packages, not to automatically remove guest accounts themselves based on a review of their overall access across the tenant or specific resources outside of an access package context.
- ✗
Terms of use
Why it's wrong here
Terms of use (ToU) in Microsoft Entra ID are used to present information to users, such as legal disclaimers or acceptable use policies, which they must accept before gaining access to resources. While crucial for compliance and user awareness, ToU policies are purely informational and consent-based; they do not possess any capabilities to automate the removal of guest access or guest accounts based on their lifecycle or review status. Their function is to ensure users acknowledge conditions, not to manage access provisioning or deprovisioning.
- ✗
Password policies
Why it's wrong here
Password policies in Microsoft Entra ID define requirements for user passwords, such as length, complexity, and expiration, to enhance security. These policies apply to how users authenticate and secure their accounts. However, they are entirely unrelated to the lifecycle management of guest accounts, including the automated removal of access or the guest user object itself. Password policies focus on credential strength, not on the governance of who has access or for how long.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Governance
Governance is the framework of policies, processes, and controls that ensures IT activities align with business goals and comply with regulations.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.