SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization is using Microsoft Entra ID with P2 licenses. You need to ensure that all guest users are reviewed for access quarterly, and if not approved, access is automatically removed. Which Microsoft Entra feature should you configure?
⚠ Common exam trap
Watch out — candidates often confuse Entitlement Management (which creates access packages) with Access Reviews (which performs the actual recurring review and auto-removal), but only Access Reviews provides the quarterly schedule and automatic removal enforcement described in the scenario.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra Access Reviews
Microsoft Entra Access Reviews (D) is the correct feature because it allows you to create recurring reviews for guest users, set the frequency to quarterly, and configure auto-apply settings to automatically remove access if the review is not approved. This directly meets the requirement for periodic attestation and automated remediation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra Privileged Identity Management
Why it's wrong here
Microsoft Entra Privileged Identity Management (PIM) is designed to manage, control, and monitor access to important organizational resources, specifically focusing on just-in-time access for privileged roles and groups. While PIM includes review capabilities for these elevated assignments, its primary purpose is not to conduct general periodic access reviews for regular user or guest group memberships or application access, nor does it automatically remove access for non-privileged scenarios based on a review outcome.
- ✗
Microsoft Entra Identity Protection
Why it's wrong here
Microsoft Entra Identity Protection is a security feature dedicated to detecting and remediating identity-based risks within an organization, such as compromised credentials, suspicious sign-ins, and anomalous user behavior. It leverages machine learning and heuristics to identify potential threats and enforce policies like multi-factor authentication, but it does not provide functionality for periodic access reviews to verify ongoing access needs for groups or applications.
- ✗
Microsoft Entra Entitlement Management
Why it's wrong here
Microsoft Entra Entitlement Management streamlines the lifecycle of access requests and approvals for various resources, including groups, applications, and SharePoint sites, by utilizing access packages. While it facilitates the provisioning and deprovisioning of access based on defined policies and can incorporate access reviews as part of an access package's lifecycle, its core function is not solely to conduct periodic reviews that automatically revoke access if not explicitly re-approved by a reviewer.
- ✓
Microsoft Entra Access Reviews
Why this is correct
Microsoft Entra Access Reviews provide a systematic and efficient way for organizations to manage and attest to group memberships, access to enterprise applications, and privileged role assignments. They enable resource owners or designated reviewers to periodically verify who still requires access, and critically, can be configured to automatically revoke access for users who are not approved or fail to respond to the review, directly addressing the requirement to remove access if not approved.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.