Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

Security defaults contain a set of pre-configured settings that are available in every Microsoft Entra tenant at no extra charge. When turned on, they force all users to register for multifactor authentication and prompt for MFA under common threat scenarios. Self-service password reset only helps users regain access to their account and, although registration can be combined with MFA, it does not automatically require MFA at sign-in. Identity Protection risk policies and Privileged Identity Management each require premium licensing, target narrower scenarios, and still rely on separate Conditional Access or role configurations to enforce MFA broadly.