Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

Microsoft Entra Password Protection supplies a built-in global banned-password list and lets administrators add their own custom banned words. Whenever users set or reset a password-whether during a standard change or through Self-Service Password Reset-the candidate password is compared to these lists and is rejected if it is too easy to guess. Self-Service Password Reset provides the self-service workflow but does not itself create or manage banned-password lists. Identity Protection sign-in risk policies and Conditional Access baseline or MFA policies assess contextual or behavioral risk signals instead of evaluating the actual password string, so they do not stop users from selecting weak or common passwords.