SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization uses Microsoft Entra ID with P1 licenses. You need to provide a temporary access pass for a new employee to set up their account without a password. Which Microsoft Entra feature should you use?
⚠ Common exam trap
Candidates often confuse Privileged Identity Management (PIM) with any 'temporary' access feature, but PIM grants temporary privileged roles, not a passwordless onboarding token.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra Temporary Access Pass
The Temporary Access Pass (TAP) is a time-limited passcode issued by an administrator that allows a user to register passwordless authentication methods (e.g., Microsoft Authenticator, FIDO2 security key) without needing an existing password. This directly meets the requirement for a new employee to set up their account without a password, and it is available with Microsoft Entra ID P1 licenses.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra Temporary Access Pass
Why this is correct
Microsoft Entra Temporary Access Pass (TAP) is a time-limited passcode issued by an administrator, specifically designed to enable passwordless onboarding and account recovery. It allows users to sign in without their primary password, register passwordless authentication methods like FIDO2 security keys or Microsoft Authenticator, and then expire, ensuring a secure transition to a fully passwordless state. This mechanism is crucial for new employees or users who have lost their primary authentication method, providing a secure initial access point.
- ✗
Microsoft Entra Privileged Identity Management
Why it's wrong here
Microsoft Entra Privileged Identity Management (PIM) is a service focused on managing, controlling, and monitoring access to important resources within Microsoft Entra ID, Azure, and other Microsoft Online Services. PIM enables just-in-time (JIT) access to privileged roles, requiring users to activate their elevated permissions for a limited time, often with approval workflows. Its primary purpose is to reduce the exposure time of privileges and provide auditing capabilities, not to facilitate the initial onboarding of standard user accounts or their authentication methods.
- ✗
Microsoft Entra Identity Protection
Why it's wrong here
Microsoft Entra Identity Protection is a security module that automates the detection and remediation of identity-based risks, such as leaked credentials, impossible travel, or unfamiliar sign-in properties. It uses machine learning to identify suspicious activities and can enforce conditional access policies, like requiring multi-factor authentication or password resets, based on the detected risk level. While critical for securing identities, its function is purely risk detection and response, not the initial provisioning or setup of user authentication methods during onboarding.
- ✗
Microsoft Entra Verified ID
Why it's wrong here
Microsoft Entra Verified ID is a decentralized identity solution that enables organizations to issue, hold, and verify digital verifiable credentials based on open standards. It allows individuals to prove aspects of their identity (e.g., employment, education) in a privacy-preserving manner without sharing underlying personal data directly. While it can streamline identity verification processes, Verified ID is not designed for the initial provisioning of a user's primary authentication method within Microsoft Entra ID itself, which is the core of passwordless onboarding.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.