Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A software development company uses Microsoft Entra ID and wants to ensure that all newly created user accounts comply with a strict password policy that includes custom banned passwords specific to their organization (e.g., common project names, company slogans). Which Microsoft Entra capability allows defining and enforcing such a custom banned password list?
- AMicrosoft Entra Password Protection
- BMicrosoft Entra Identity Protection
- CMicrosoft Entra Conditional Access
- DMicrosoft Entra Privileged Identity Management (PIM)
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Password Protection
Microsoft Entra Password Protection allows organizations to define and enforce custom banned password lists, preventing users from creating weak or commonly used passwords, including those specific to their organization's context.
Why the other options are wrong
- B. Identity Protection detects compromised identities, but Password Protection prevents weak passwords from being set.
- C. Conditional Access enforces policies based on access conditions, not password content.
- D. PIM manages privileged role access, unrelated to general user password policies.
Microsoft Entra Password Protection
A feature that detects and blocks known weak passwords and allows organizations to define custom banned password lists to prevent users from creating easily guessable or compromised passwords.
- Prevents use of common weak passwords
- Supports custom banned password lists
- Works for both cloud-only and hybrid environments
Memory trick: No more easy passwords, custom rules keep them strong.