Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A global corporation is implementing a Zero Trust security model. They need to ensure that every access request, regardless of its origin, is explicitly verified before granting access to resources. Which core Microsoft Entra capability directly supports this principle?
- AMicrosoft Entra Password Protection
- BMicrosoft Entra Connect
- CMicrosoft Entra Conditional Access
- DMicrosoft Entra Domain Services
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Entra Conditional Access
Microsoft Entra Conditional Access is a key component of the Zero Trust model, enabling organizations to enforce policies that explicitly verify user identity, device health, location, and other factors before granting access to resources.
Why the other options are wrong
- A. Password Protection helps prevent weak passwords but doesn't explicitly verify every access request.
- B. Microsoft Entra Connect synchronizes on-premises directories with Microsoft Entra ID, not for explicit access verification.
- D. Domain Services provides managed domain services in Azure, not directly related to explicit access verification for all requests.
Microsoft Entra Conditional Access
A Microsoft Entra ID feature that enables organizations to enforce policies to evaluate identity and access requests based on various conditions and grant or block access accordingly.
- Supports Zero Trust principles.
- Evaluates conditions like user, device, location.
- Can grant, block, or limit access.
Memory trick: Conditional Access puts a guard at every gate.