Microsoft · SC-900
Access management
SC-900 · Lesson 5 of 15 · 30:38
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-900 exam (Microsoft Security, Compliance, and Identity Fundamentals). In this lesson: Microsoft Entra Conditional Access (if-then policies, signals like the user, app, location, device and risk, block or grant with requirements, session controls, authentication strengths, Entra ID P1), Microsoft Entra roles (built-in and custom roles, Entra, service-specific and cross-service roles), least privilege, and the difference between Microsoft Entra RBAC and Azure RBAC. Includes three original practice questions.
Preview the topics
- Users may open Microsoft 365 from their personal laptops, but they must not download files to them. What should the admin configure?
- A help desk technician only needs to create and manage users and groups. Which role follows least privilege?
- A developer must start and stop the virtual machines of one Azure resource group, and nothing else. What should they get?