SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your company uses Microsoft Entra ID. Security policy requires that all external guest users must be reviewed and their access approved by their sponsor every 90 days. If not approved, access should be automatically removed. Which feature should you use?
⚠ Common exam trap
Many candidates confuse entitlement management (which creates access packages) with the actual review and removal mechanism, but access reviews are the specific feature that enforces periodic attestation and automatic cleanup.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra access reviews
Microsoft Entra access reviews (Option D) allow you to configure recurring reviews of guest users' access, with automatic removal of access if not approved. This directly meets the requirement for a 90-day review cycle with automatic enforcement, as access reviews can be scoped to guest users and integrated with entitlement management or groups.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra Conditional Access
Why it's wrong here
Microsoft Entra Conditional Access policies enforce specific controls at the time of sign-in, such as requiring multi-factor authentication or a compliant device, based on various signals like user location or application. While crucial for real-time access control and enforcing security postures, Conditional Access does not provide functionality for scheduling periodic reviews of *existing* access assignments or automatically revoking access if a review is not completed or approved.
- ✗
Microsoft Entra B2B collaboration settings
Why it's wrong here
Microsoft Entra B2B collaboration settings primarily govern how external users are invited, how they redeem invitations, and the cross-tenant access configurations between organizations. These settings define the initial trust and collaboration parameters for guest accounts and their general capabilities, but they do not offer mechanisms to periodically assess or automatically remove the specific access privileges that these external users may have accumulated over time within the resource tenant.
- ✗
Microsoft Entra entitlement management
Why it's wrong here
Microsoft Entra entitlement management streamlines the lifecycle of access by enabling self-service access requests through access packages, which can bundle various resource assignments like group memberships or application access. While entitlement management can integrate with access reviews to trigger periodic validation of access package assignments, it is not the component that *performs* the review or the automated removal of access based on review outcomes; it manages the granting and initial lifecycle, relying on access reviews for the validation phase.
- ✓
Microsoft Entra access reviews
Why this is correct
Microsoft Entra access reviews are specifically designed to enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments by scheduling periodic reviews. These reviews allow designated reviewers to confirm continued access necessity, and critically, they can be configured to automatically remove access for users who are not approved or whose review is not completed, directly addressing the requirement for periodic validation and automated revocation.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Entitlement management
Entitlement management is the process of controlling who has access to what resources in an organization through automated policies, approvals, and lifecycle management.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.