Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A software development company uses Microsoft Entra ID and wants to ensure that all newly created user accounts and password changes adhere to strong password policies, including custom banned password lists. Which Microsoft Entra capability should they configure?
- AMicrosoft Entra Privileged Identity Management (PIM)
- BMicrosoft Entra Password Protection
- CMicrosoft Entra Identity Protection
- DMicrosoft Entra Conditional Access
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Password Protection
Microsoft Entra Password Protection enables organizations to define and enforce strong password policies, including custom banned password lists, to prevent users from using weak or compromised passwords.
Why the other options are wrong
- A. PIM manages privileged roles, not general password policies for all users.
- C. Identity Protection detects risks, including compromised credentials, but Password Protection is for preventing weak passwords.
- D. Conditional Access focuses on access conditions, not password strength enforcement.
Microsoft Entra Password Protection
A Microsoft Entra ID feature that prevents users from creating weak, easily guessable, or compromised passwords by enforcing global and custom banned password lists.
- Enforces strong password policies.
- Uses global and custom banned password lists.
- Helps prevent password spray attacks.
Memory trick: Password Protection: The 'P' stands for 'Powerful' passwords.