Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question
Your organization wants users to perform multi-factor authentication (MFA) only when they sign in from outside the corporate network. Which Microsoft Entra ID capability can enforce this requirement without prompting users for MFA when they are on the internal network?
Onboard the users to Microsoft Entra Privileged Identity Management and configure just-in-time access.
Create a Conditional Access policy that requires MFA when the user's sign-in location is outside trusted IP ranges.
Enable Azure AD Password Protection with a custom banned password list.
Add the users to the User administrator directory role so they can reset their own credentials.
Conditional Access policies evaluate sign-in signals like user location and can require MFA only when the sign-in originates from an unfamiliar or external network. Password protection simply blocks weak or banned passwords and cannot trigger location-based MFA. Privileged Identity Management provides time-bound elevation to administrative roles, not conditional access to everyday sign-ins. Assigning the User administrator directory role grants account-management privileges but does not create rules that demand or waive MFA based on location.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Conditional Access in Microsoft Entra ID?
Open an interactive chat with Bash
How can trusted IP ranges be configured in a Conditional Access policy?
Open an interactive chat with Bash
How does Microsoft Entra Privileged Identity Management differ from Conditional Access?
Open an interactive chat with Bash
Microsoft Security, Compliance, and Identity Fundamentals SC-900
Describe the capabilities of Microsoft Entra
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .