Microsoft 365 Fundamentals MS-900 Practice Question

Conditional Access in Microsoft Entra ID allows administrators to create policies that control access to cloud resources based on specific conditions, such as user role, device compliance, network location and risk level. This feature helps ensure that only authorized users and compliant devices access resources under specific conditions, providing security and flexibility in access control.

Self-Service Password Reset (SSPR) allows users to reset their own passwords without needing help from IT. While useful for account management, it does not control access conditions based on user role, device, or location.

Multi-Factor Authentication (MFA) adds an additional layer of security to the sign-in process by requiring users to provide additional verification, such as a code from a mobile app. While it enhances security, it does not apply conditional rules based on factors like device compliance or location.

Privileged Identity Management (PIM) is a feature that manages, controls, and monitors access to critical resources in Microsoft Entra ID by providing just-in-time privileged access. While it enhances security for high-privilege roles, it does not enforce access rules based on device compliance or location.