SC-100 Identity Security Strategy Quiz

1. Which Microsoft service is used for managing external partner access securely?

Azure Firewall

Microsoft Entra External ID

Azure Storage

Defender for Office 365

2. Which framework guides organizations in designing a comprehensive identity security strategy?

NIST Cybersecurity Framework

Microsoft Zero Trust framework

ISO 27001 only

GDPR compliance rules

3. True or False: Token-based authentication is less secure than session-based authentication for modern APIs.

True

False

4. What is the primary goal of implementing entitlement management?

Grant all users full system access

Automate access provisioning and ensure compliance

Eliminate user accounts

Reduce security monitoring

5. Which capability allows organizations to manage both cloud and on-premises identities seamlessly?

Hybrid identity integration

Network segmentation

Firewall rules

Data encryption only

6. True or False: Microsoft Defender for Identity helps detect and investigate threats targeting on-premises identities.

True

False

7. What does risk-based conditional access evaluate?

Only user location

Device health, user risk, and sign-in risk signals

Only device ownership

Network bandwidth usage

8. Which protocol is commonly used for securing API access in modern cloud architectures?

HTTP

OAuth 2.0 and OpenID Connect

FTP

Telnet

9. True or False: Access reviews should be conducted regularly to ensure users still need their assigned permissions.

True

False

10. What is the primary benefit of implementing identity-driven security?

Reduces infrastructure costs only

Shifts focus from network perimeter to user identity

Eliminates the need for encryption

Allows unrestricted access to resources

11. What is the primary goal of a Zero Trust security model?

Trust all users on the corporate network

Never trust, always verify every access request

Eliminate the need for firewalls

Allow unrestricted cloud access

12. True or False: OAuth 2.0 is primarily used for user authentication rather than authorization.

True

False

13. What does SSO (Single Sign-On) primarily improve?

User experience and reduced password fatigue

Network speed

Hardware requirements

Database storage

14. Which principle ensures users have only the minimum permissions needed to perform their tasks?

Defense in depth

Least privilege access

Zero Trust verification

Segmentation

15. True or False: Privileged Access Management (PAM) focuses on securing high-risk administrative accounts.

True

False

16. What is the purpose of identity governance in a security strategy?

Manage and monitor user access throughout their lifecycle

Eliminate all user accounts

Prevent password changes

Reduce security incidents by blocking all access

17. Which authentication method provides the strongest security against credential theft?

Single sign-on (SSO)

Multi-factor authentication (MFA)

Username and password only

Biometric recognition alone

18. True or False: Role-Based Access Control (RBAC) is the only access control model needed for modern cloud environments.

True

False

19. What does conditional access enable in an identity security strategy?

Automatic password resets

Risk-based access decisions based on user context

Unlimited resource sharing

Removal of multi-factor authentication

20. Which component is central to Microsoft Entra ID (formerly Azure AD)?

On-premises Active Directory only

Cloud-based identity and access management

Local network authentication

VPN management

SC-100 Designing Identity Security Strategy Quiz

1. Which Microsoft service is used for managing external partner access securely?

2.

What first name or nickname would you like us to use?

2. Which framework guides organizations in designing a comprehensive identity security strategy?

3. True or False: Token-based authentication is less secure than session-based authentication for modern APIs.

4. What is the primary goal of implementing entitlement management?

5. Which capability allows organizations to manage both cloud and on-premises identities seamlessly?

6. True or False: Microsoft Defender for Identity helps detect and investigate threats targeting on-premises identities.

7. What does risk-based conditional access evaluate?

8. Which protocol is commonly used for securing API access in modern cloud architectures?

9. True or False: Access reviews should be conducted regularly to ensure users still need their assigned permissions.

10. What is the primary benefit of implementing identity-driven security?

11. What is the primary goal of a Zero Trust security model?

12. True or False: OAuth 2.0 is primarily used for user authentication rather than authorization.

13. What does SSO (Single Sign-On) primarily improve?

14. Which principle ensures users have only the minimum permissions needed to perform their tasks?

15. True or False: Privileged Access Management (PAM) focuses on securing high-risk administrative accounts.

16. What is the purpose of identity governance in a security strategy?

17. Which authentication method provides the strongest security against credential theft?

18. True or False: Role-Based Access Control (RBAC) is the only access control model needed for modern cloud environments.

19. What does conditional access enable in an identity security strategy?

20. Which component is central to Microsoft Entra ID (formerly Azure AD)?