Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

Microsoft Entra ID Password Protection evaluates every password change or reset against a global and custom banned password list, preventing users from choosing common or compromised passwords. The same feature includes smart lockout, which automatically blocks further sign-in attempts for a period after multiple consecutive failures, mitigating brute-force and password-spray attacks. Identity Protection focuses on detecting risky sign-ins, not on enforcing password composition. Self-service password reset allows users to change or reset their passwords but does not determine password strength. Privileged Identity Management governs privileged role assignments and is unrelated to password strength or lockout policies.