SC-900 Practice Question: Describe the concepts of security, compliance, and identity
Your organization is implementing a Zero Trust security model. Which Microsoft Entra ID feature should you use to verify that users and devices meet specific health requirements before granting access to corporate resources?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Conditional Access
Conditional Access policies can enforce device compliance, MFA, and other health checks before granting access. Option A is wrong because Privileged Identity Management manages just-in-time admin roles, not device health. Option B is wrong because Identity Governance manages access reviews and lifecycle, not real-time health verification. Option C is wrong because Identity Protection detects risks but does not enforce device health requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Privileged Identity Management (PIM)
Why it's wrong here
PIM manages privileged roles, not device health.
- ✗
Identity Governance
Why it's wrong here
Identity Governance focuses on access reviews and lifecycle, not device compliance.
- ✗
Identity Protection
Why it's wrong here
Identity Protection detects risks, but does not enforce device health requirements.
- ✓
Conditional Access
Why this is correct
Conditional Access evaluates signals like device compliance to enforce access controls.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Device compliance
Device compliance is the process of ensuring that a device meets an organization's security and configuration policies before it can access network resources.
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.